Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/4ZvMRrPegV0hR0aAf-7A4uApJZs.roa
File: 4ZvMRrPegV0hR0aAf-7A4uApJZs.roa (raw, json)
Hash identifier: kyquVHwlE993jLDR0GHlE8IttEn6GI9E3f/khwidMsM=
Subject key identifier: E1:9B:CC:46:B3:DE:81:5D:21:47:46:80:7F:EE:C0:E2:E0:29:25:9B
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC64A0D9ECD8394D9CA381DF678937162
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/4ZvMRrPegV0hR0aAf-7A4uApJZs.roa
Signing time: Mon 01 Jan 2024 18:29:51 +0000
ROA not before: Mon 01 Jan 2024 18:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215804
IP address blocks: 2a12:bec0:610::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:0d:9e:cd:83:94:d9:ca:38:1d:f6:78:93:71:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e19bcc46b3de815d214746807feec0e2e029259b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:7d:39:3d:42:bc:2c:66:ea:e9:50:89:80:
74:26:23:4b:40:e5:2e:e2:fa:00:15:bc:03:44:0a:
0a:c7:88:b4:22:4a:c3:f5:2a:82:94:81:1d:2d:3c:
95:a2:2e:f6:46:52:93:ac:16:e1:95:31:21:35:cf:
02:f7:6a:7f:21:ad:95:10:a4:39:d3:5c:3e:6e:52:
5c:aa:17:7a:39:86:60:bf:08:32:30:cd:0e:ea:8b:
60:8d:2f:04:a6:90:51:9c:72:0f:08:6f:7e:27:2f:
b9:12:38:94:b9:b8:5d:66:b0:e4:8f:bf:00:fe:ff:
72:f2:f1:b4:2c:3c:9c:d4:39:d4:b9:1c:cf:d0:99:
9c:26:8b:e1:8c:7d:7c:85:b5:72:fe:7a:bd:51:f4:
90:b7:d3:32:9a:fd:9a:5a:73:05:02:0f:73:e4:5c:
79:6e:7f:71:b9:bf:f5:50:9f:bb:0c:f0:18:2f:15:
04:e9:6b:4e:55:ae:0b:64:92:d5:25:c1:35:bb:53:
c0:fa:f8:23:db:e5:81:fa:4f:98:f4:70:8d:78:35:
c7:fd:64:2e:54:2e:59:08:ff:d0:5c:a4:7c:58:74:
5b:14:5f:2d:ae:ba:2e:fa:cc:04:1e:6c:5f:05:4a:
7e:40:b7:50:a4:f6:e3:9d:c0:d0:04:3d:0a:2f:9e:
57:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9B:CC:46:B3:DE:81:5D:21:47:46:80:7F:EE:C0:E2:E0:29:25:9B
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/4ZvMRrPegV0hR0aAf-7A4uApJZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:610::/44
Signature Algorithm: sha256WithRSAEncryption
75:83:8b:37:84:f7:89:59:1a:20:b0:3f:06:1a:91:6d:44:8b:
85:2d:d4:d6:e9:53:68:b1:ee:ac:32:39:5a:68:aa:bd:2f:35:
97:16:56:b1:ed:26:c3:40:06:40:10:1c:49:e1:f8:62:d0:97:
18:08:c1:44:34:69:a3:e0:c0:03:10:2b:ac:97:85:d5:d1:85:
87:a8:3c:7b:a2:a7:9f:aa:04:b1:b6:f3:3e:ca:a5:6d:39:9b:
c4:72:a0:c4:ac:1f:f5:53:63:30:81:4c:8e:a7:b1:d6:33:de:
15:d7:5b:e6:a1:48:a9:a2:c8:9c:8b:54:49:0d:19:14:08:f2:
d6:67:03:12:49:c8:73:7e:dd:9a:44:3e:5f:99:b7:e2:89:8d:
3c:bd:96:c3:35:fe:09:c8:fd:93:30:de:cc:30:64:3b:a1:55:
0d:fe:77:da:42:a0:23:8c:b0:63:a4:2d:30:45:b6:35:ea:e2:
4a:dd:33:95:5b:8d:40:61:fe:07:f2:0e:e6:4e:c4:36:82:36:
56:72:ac:2d:38:cb:e0:2d:be:1f:46:2f:57:1e:cd:1a:1d:5b:
91:41:78:e0:37:52:e4:26:10:9c:eb:31:ac:88:94:db:1d:10:
c2:39:a7:3a:70:50:d4:98:c3:8f:bf:26:6b:e7:a3:14:72:08:
13:b5:6d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:55:53 2024 by rpki-client on console-ams.rpki-client.org