Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/7h2h6rSHljfHkWIFIAS2U5yjMpA.roa
File: 7h2h6rSHljfHkWIFIAS2U5yjMpA.roa (raw, json)
Hash identifier: jUaaeDlSUjmx6dCcmnsMz8ZEbuNUQZZ9aMZBSlHck94=
Subject key identifier: EE:1D:A1:EA:B4:87:96:37:C7:91:62:05:20:04:B6:53:9C:A3:32:90
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0191ECEF431086D64F0AA12E65CE12B422BE
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/7h2h6rSHljfHkWIFIAS2U5yjMpA.roa
Signing time: Fri 13 Sep 2024 19:49:48 +0000
ROA not before: Fri 13 Sep 2024 19:49:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58212
IP address blocks: 2a12:bec4:1520::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ec:ef:43:10:86:d6:4f:0a:a1:2e:65:ce:12:b4:22:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Sep 13 19:49:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee1da1eab4879637c79162052004b6539ca33290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:34:3a:99:47:89:93:e8:b3:08:b7:15:06:d3:
7b:10:6f:ae:9d:8b:e7:e3:9a:14:64:41:90:69:24:
19:ee:a8:6a:b8:13:0b:29:96:10:28:2f:49:17:fd:
c8:f9:e5:1a:73:87:f9:f3:b3:8a:1d:e1:6b:5b:c4:
76:62:cd:ca:4a:62:d3:0f:dc:99:ee:5a:38:68:9a:
73:20:24:15:f9:24:59:1b:ea:81:fa:c9:b1:88:4b:
20:01:aa:84:53:c3:f4:10:54:e3:55:db:9c:0a:88:
ae:b3:ae:f3:9e:20:68:79:96:73:52:63:7f:d4:1a:
cd:03:02:1b:15:e3:41:09:92:22:78:a3:95:23:e4:
17:21:cb:a3:6a:90:5a:37:cd:1a:c2:e2:51:84:67:
31:60:e5:ab:58:51:00:65:da:a9:26:56:49:74:d6:
39:47:5c:25:ca:17:b0:77:bf:ed:d9:33:53:19:85:
4a:58:61:26:0d:25:0b:02:69:5e:90:1d:d5:ae:69:
41:06:91:63:69:d5:8c:3e:7f:16:7e:de:6b:a6:be:
6e:52:ed:b5:c5:91:e9:80:44:82:76:ce:f7:55:34:
02:76:7d:5c:64:79:b1:85:29:0c:92:e8:2b:14:db:
40:17:ad:ef:67:c1:c5:f3:fd:70:52:25:e9:e6:c6:
9b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1D:A1:EA:B4:87:96:37:C7:91:62:05:20:04:B6:53:9C:A3:32:90
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/7h2h6rSHljfHkWIFIAS2U5yjMpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1520::/44
Signature Algorithm: sha256WithRSAEncryption
56:d8:1d:2b:6b:b8:32:b7:36:f5:da:75:2e:38:c4:22:4e:82:
cc:a7:c6:7e:2d:82:61:8d:02:73:f2:0a:03:e5:df:f7:6d:68:
51:96:a8:bb:cb:f7:3c:01:e3:41:23:2b:e5:fe:f7:28:c4:51:
22:68:41:fd:19:71:c8:43:c5:68:d7:33:a1:48:c1:30:b2:76:
6e:03:30:11:4e:3f:ea:f2:9e:6b:c8:16:ef:8a:73:59:a5:11:
93:20:b6:52:16:c3:7d:bf:be:69:a3:d8:98:62:88:20:d6:33:
94:fc:ab:36:13:7f:a8:7a:e3:0a:c8:d7:2e:69:eb:a3:fd:04:
c4:92:56:76:c2:56:41:46:76:ca:9c:5b:4c:b9:7b:fe:16:73:
48:a1:09:df:43:4d:06:b1:8e:e3:13:2d:af:47:9f:31:0b:1b:
4b:89:83:7e:87:44:c5:e1:4b:06:1c:1e:f6:f7:b9:24:25:22:
c4:50:33:bb:26:85:8d:3a:f3:bf:81:f1:90:9c:d8:30:1c:56:
ab:74:cc:c6:bb:a7:d4:ea:91:45:98:c6:87:e6:61:b2:d3:f3:
9e:5f:99:a9:2e:8d:3b:fc:44:2d:d5:96:f0:24:f3:e9:81:7d:
08:d7:c2:ca:74:0f:74:d0:52:03:83:48:e9:10:27:a7:d8:39:
e4:63:6c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:55:53 2024 by rpki-client on console-ams.rpki-client.org