Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/5w6KASHdKdRJQp0DAdauHUyfUKw.roa
File: 5w6KASHdKdRJQp0DAdauHUyfUKw.roa (raw, json)
Hash identifier: 2kmXqSVybrgu02aabkAhBNzHNPJEMKo8Ey3BVMB+KCE=
Subject key identifier: E7:0E:8A:01:21:DD:29:D4:49:42:9D:03:01:D6:AE:1D:4C:9F:50:AC
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0190EA654A96505EBA2CAD67396A8282584E
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/5w6KASHdKdRJQp0DAdauHUyfUKw.roa
Signing time: Thu 25 Jul 2024 14:57:05 +0000
ROA not before: Thu 25 Jul 2024 14:57:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215303
IP address blocks: 2a12:bec4:10f1::/48 maxlen: 48
2a12:bec4:10f2::/48 maxlen: 48
2a12:bec4:10f3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ea:65:4a:96:50:5e:ba:2c:ad:67:39:6a:82:82:58:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jul 25 14:57:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e70e8a0121dd29d449429d0301d6ae1d4c9f50ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:81:05:4e:37:76:a1:c7:f6:8a:a1:e0:ac:
8d:30:d5:b2:aa:1a:f5:1b:0e:a9:a7:c0:13:f1:76:
26:91:b4:6e:cd:5b:1a:76:67:fe:a4:e5:d7:1e:37:
62:1b:10:ee:96:64:c0:e6:32:89:d2:ea:80:62:40:
57:3d:31:cb:47:a0:5c:2c:41:6c:c6:88:61:53:26:
6c:3d:9c:30:12:ac:b6:3b:74:ea:b6:70:e9:0b:c0:
5b:88:c4:d0:9f:ab:e6:a2:8d:69:37:1b:8b:7f:9d:
b7:f7:d3:63:df:69:ed:94:62:9c:85:01:91:95:3c:
a2:10:d9:5c:6f:ba:30:bc:ff:3c:91:3f:2f:96:59:
77:f8:f4:f4:39:da:ac:ea:f2:50:39:3f:93:bd:64:
d3:53:ac:99:34:0f:2c:45:d2:21:17:e0:65:5d:5a:
76:6e:c4:54:52:34:dd:52:24:65:36:b0:c5:83:4f:
f5:2c:8b:b2:f2:f4:9e:9a:98:76:04:25:1c:42:5c:
f2:de:72:d5:dc:f5:62:27:cd:cc:25:c0:25:c8:0f:
b3:80:9c:6f:af:c0:c2:0e:0f:98:c6:f6:6c:2b:78:
e5:a9:2a:12:cb:4f:c3:ec:21:fe:42:ed:ac:ca:e3:
68:ab:2b:e6:85:5d:c1:4b:56:ca:ac:b3:08:23:a1:
4c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0E:8A:01:21:DD:29:D4:49:42:9D:03:01:D6:AE:1D:4C:9F:50:AC
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/5w6KASHdKdRJQp0DAdauHUyfUKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:10f1::-2a12:bec4:10f3:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
59:62:9f:36:d6:d3:8d:45:cb:5a:ab:16:65:40:84:12:1a:eb:
42:3b:a9:d7:93:23:04:69:82:1c:7c:7f:2d:25:cd:b0:bc:15:
fa:29:4d:5b:31:79:fe:d5:64:4f:72:27:17:cb:0a:03:3d:39:
b3:99:03:72:16:ba:e4:95:7e:cb:3a:4e:8e:7d:88:f9:b9:23:
88:dc:be:49:23:e8:ee:b6:1c:74:98:78:ee:66:4e:01:c5:0f:
e2:a2:9e:9c:59:63:51:d1:7c:a8:06:de:9e:ff:71:8e:53:57:
0d:2c:88:cc:f1:5a:ae:a9:f8:a8:3e:f5:aa:3e:3e:af:51:42:
a7:18:ca:e6:69:03:1b:b2:1e:df:92:92:ce:25:86:bb:41:96:
13:ed:7c:c3:19:bd:6e:aa:62:06:da:4b:82:f6:c0:96:24:4c:
0d:1c:83:98:b8:48:aa:a7:77:be:7c:87:fe:05:9d:b1:71:3a:
83:1f:22:3b:74:70:a4:5b:36:aa:14:d9:c7:fc:aa:cc:a8:ed:
9b:93:96:db:60:73:6f:1a:30:cc:65:7a:5e:e8:6d:fc:f9:9a:
1b:96:5a:89:00:68:e8:13:5b:57:dd:67:ec:bb:fa:1a:00:13:
00:27:95:8b:38:b6:dc:63:8d:c3:c4:7f:ff:6a:d7:aa:8b:21:
d4:bf:8c:e1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:55:53 2024 by rpki-client on console-ams.rpki-client.org