Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/7SXRzOUIoJxg2JsVmfq1s43Qq0Y.roa
File: 7SXRzOUIoJxg2JsVmfq1s43Qq0Y.roa (raw, json)
Hash identifier: 95sUEruxLCGbPGB+z0fl9xg5gS9KdwnBuAh1k2hqyHQ=
Subject key identifier: ED:25:D1:CC:E5:08:A0:9C:60:D8:9B:15:99:FA:B5:B3:8D:D0:AB:46
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC64A00633C5F6B58166258F1BCC325D6
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/7SXRzOUIoJxg2JsVmfq1s43Qq0Y.roa
Signing time: Mon 01 Jan 2024 18:29:47 +0000
ROA not before: Mon 01 Jan 2024 18:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199175
IP address blocks: 2a12:bec0:2b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:00:63:3c:5f:6b:58:16:62:58:f1:bc:c3:25:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed25d1cce508a09c60d89b1599fab5b38dd0ab46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:d2:4c:90:30:09:c8:ba:6e:77:10:7e:1c:
c6:6a:71:51:06:fd:4a:a6:de:7a:bb:ad:c2:69:15:
ef:e6:5d:c0:e8:f3:9e:6d:f5:88:5b:23:e1:10:44:
17:a4:38:ed:6c:aa:9d:0e:92:f9:16:b5:c8:5d:97:
8b:96:20:d7:e6:84:6a:2e:d1:a8:8a:bc:64:2d:63:
0f:80:98:ee:d5:9e:b5:42:80:0e:39:7b:25:2e:5d:
94:f9:ff:44:dc:1e:1e:96:af:fe:80:bf:20:ba:4a:
2a:4b:4d:03:8a:66:01:9f:b1:7e:e2:09:10:cd:cc:
c4:a3:08:6e:0a:19:a3:08:9d:e8:61:2b:56:d6:ee:
f9:4c:74:73:52:6b:56:bb:e2:2d:2f:19:98:e5:a5:
02:be:43:9d:fd:a9:ef:9d:a1:d8:6b:30:6c:76:6c:
43:5f:07:11:4b:a2:e1:1f:95:ef:2d:db:6d:65:33:
90:d2:ee:c3:4a:29:03:91:39:13:12:f8:1d:e9:22:
f6:73:b4:bd:77:eb:4a:85:a7:a8:28:e9:67:4b:6f:
5f:56:d8:f9:ea:4c:67:33:bf:0b:76:e3:9d:08:78:
f5:a3:95:0d:83:45:1e:32:c3:10:11:38:d7:ab:2a:
65:7f:71:42:e8:da:06:6c:be:a0:71:f0:2e:82:ac:
b3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:25:D1:CC:E5:08:A0:9C:60:D8:9B:15:99:FA:B5:B3:8D:D0:AB:46
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/7SXRzOUIoJxg2JsVmfq1s43Qq0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:2b0::/44
Signature Algorithm: sha256WithRSAEncryption
2a:2a:a3:93:a2:b1:ed:37:00:15:d0:42:9d:94:3b:dd:1a:f8:
f4:a5:33:29:6a:af:20:a1:c0:86:c4:45:3c:4e:69:0a:90:ac:
00:fb:89:a9:83:22:f8:74:1a:8c:d7:be:ce:fa:99:bc:ee:00:
ac:6a:ef:5a:bb:0b:9a:62:c0:3c:c5:eb:3a:d8:14:b2:14:7d:
04:bf:c6:9f:ed:56:80:33:57:33:9d:b2:ab:1c:78:a7:8d:27:
6d:7a:3d:0f:7f:42:4a:1e:96:ff:33:5e:50:78:d0:92:a7:a1:
5e:66:40:0a:bf:b0:83:76:fe:30:13:57:82:1f:58:93:90:71:
d3:14:2c:47:ed:4a:07:08:e7:bd:78:45:78:23:97:ca:aa:8a:
c7:2a:c2:d8:19:e6:e2:58:16:92:62:5f:89:cb:25:50:6e:de:
3e:b3:7f:e0:c7:1c:d7:10:b2:21:a3:66:c1:93:74:e8:7a:32:
8c:e5:91:b0:16:fb:50:5e:e3:26:f3:e4:c4:51:1c:8e:5d:a8:
17:68:67:98:7e:ec:57:8b:30:c7:6e:cb:3b:62:34:02:b8:bb:
ce:dc:6f:f1:30:bc:59:59:4d:e3:c0:37:21:06:62:33:59:5d:
33:c2:5e:f7:f4:84:ef:92:76:07:a9:ce:f5:47:d5:55:df:8c:
bc:2b:58:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:04:22 2024 by rpki-client on console-fra.rpki-client.org