Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/8FADziswSTyfhoigcLF45kg4_I4.roa
File: 8FADziswSTyfhoigcLF45kg4_I4.roa (raw, json)
Hash identifier: 0jmZehsrLsQxCtwMFwVM6ZRSZeDE1CO48drXUgXcp9E=
Subject key identifier: F0:50:03:CE:2B:30:49:3C:9F:86:88:A0:70:B1:78:E6:48:38:FC:8E
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CF44FD1B9953804C271082AAE9B060BBF
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/8FADziswSTyfhoigcLF45kg4_I4.roa
Signing time: Wed 10 Jan 2024 16:58:40 +0000
ROA not before: Wed 10 Jan 2024 16:58:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215752
IP address blocks: 2a12:bec0:640::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f4:4f:d1:b9:95:38:04:c2:71:08:2a:ae:9b:06:0b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 10 16:58:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f05003ce2b30493c9f8688a070b178e64838fc8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:41:81:24:8a:95:27:d5:2b:37:36:e6:5e:78:
7b:ec:56:3c:95:3e:fc:72:ed:cb:f8:39:c4:5d:3a:
8c:cd:d4:ad:95:3e:e9:28:40:cb:c4:2e:00:c5:f8:
2b:bf:8f:b8:23:28:2b:97:9c:ea:66:b5:46:a4:cf:
48:76:c8:03:89:e3:dd:30:4b:ea:34:59:b4:af:e1:
e6:4f:78:0a:ed:2a:cc:aa:ea:78:c9:a1:61:e0:f6:
9a:2e:ef:ca:ed:34:dd:ae:e2:47:c4:f4:87:1a:a2:
73:b9:c8:7b:d9:04:f2:5d:94:f7:f3:b9:9c:60:9e:
cb:58:91:9f:36:31:51:1e:72:b4:fe:40:51:a6:6a:
9d:b5:f2:14:36:44:c9:16:36:e8:0a:36:b5:f6:d3:
e9:8c:17:94:ba:d1:db:31:1d:87:a0:6f:92:70:a5:
4c:3e:24:b4:8d:7e:ac:ad:05:2b:ba:aa:db:d8:01:
70:fa:5d:71:0d:30:fc:2d:91:53:7f:90:1f:c8:5d:
15:95:f9:2c:48:18:14:1a:55:fd:20:a1:bc:ba:37:
13:3f:2e:6a:0e:bf:84:59:11:f4:06:33:4d:bc:9a:
01:5b:e4:b1:b1:00:02:8e:51:a6:fd:68:e4:20:5b:
47:96:9e:e4:35:7a:3b:11:21:0d:fd:70:94:e9:77:
86:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:50:03:CE:2B:30:49:3C:9F:86:88:A0:70:B1:78:E6:48:38:FC:8E
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/8FADziswSTyfhoigcLF45kg4_I4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:640::/44
Signature Algorithm: sha256WithRSAEncryption
bb:54:6e:9a:15:fa:cc:41:2b:4b:1d:45:21:e0:9a:ef:a6:b3:
1b:bc:c2:86:9d:62:6f:72:44:94:c7:e3:6b:a5:44:86:b7:43:
b6:00:7c:c6:d7:79:db:7c:12:79:02:bf:94:1b:7e:42:48:9c:
4e:06:5b:2c:22:68:c6:96:07:dd:b1:a1:3a:8b:89:7b:aa:57:
c4:62:a6:9d:da:5a:ab:80:c6:64:9e:c5:04:7b:94:88:0e:c2:
00:de:f5:93:62:05:8c:5e:5a:77:7f:da:89:01:a5:07:53:18:
b6:e3:f9:ea:69:04:ef:88:8b:c9:90:1c:bb:76:0d:85:27:cf:
32:e2:2d:49:6d:4b:5a:a0:b8:19:5f:5d:d6:1e:76:a8:3c:13:
c0:d4:a2:f4:22:0b:27:46:2c:3e:e5:0e:5f:f4:64:94:90:47:
0a:b8:57:ae:af:71:af:27:49:85:4e:67:d3:5d:18:95:b2:a2:
ed:46:e3:18:51:27:e1:dc:b7:60:e9:8a:b6:4a:18:ab:d7:c2:
cd:07:09:75:c1:ad:90:1d:3b:3d:77:3f:c3:a6:9e:3b:d2:88:
5d:c3:4f:22:e0:9a:eb:f3:69:d4:0c:d3:63:83:92:94:d8:20:
fc:3a:5c:31:a9:7d:2a:3d:d7:91:0d:a3:82:12:f7:fb:27:df:
15:ab:1b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:40:31 2024 by rpki-client on console-fra.rpki-client.org