Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/8aOfHTlrsTHLBaIp9XTP7Dii9gw.roa
File: 8aOfHTlrsTHLBaIp9XTP7Dii9gw.roa (raw, json)
Hash identifier: 5/qrW5SZGuVRvat2FQET1uE41C1MM+yX1VmjvMPw4R4=
Subject key identifier: F1:A3:9F:1D:39:6B:B1:31:CB:05:A2:29:F5:74:CF:EC:38:A2:F6:0C
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC64A03EAE2D3CD8C966A09D381DCDCB7
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/8aOfHTlrsTHLBaIp9XTP7Dii9gw.roa
Signing time: Mon 01 Jan 2024 18:29:48 +0000
ROA not before: Mon 01 Jan 2024 18:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199685
IP address blocks: 2a12:bec0:180::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:03:ea:e2:d3:cd:8c:96:6a:09:d3:81:dc:dc:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1a39f1d396bb131cb05a229f574cfec38a2f60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:aa:74:81:77:8a:6b:b2:f3:e1:a0:51:04:26:
f8:e4:31:9c:9b:8e:be:ff:74:b9:56:6f:99:f9:56:
a0:46:a6:ee:29:05:fe:46:c3:1d:a0:ef:96:ee:bc:
40:24:d8:df:bf:0d:7c:f8:3d:4c:98:90:fd:8f:b1:
df:73:00:17:5d:01:f1:aa:3f:87:23:27:ac:fb:d8:
ed:ba:6a:d5:d0:be:18:e8:e6:d3:8a:56:e7:96:9c:
f1:4a:8f:2c:e2:b9:64:05:98:51:f1:a7:61:85:65:
58:95:03:b3:33:fb:f6:14:a9:1c:3b:b9:f5:71:99:
81:4e:8f:3e:30:1d:c8:57:6b:54:67:7a:4d:b8:f3:
10:5d:15:e0:04:d3:32:e3:1b:97:60:e3:b4:b7:e3:
24:2c:12:b8:12:3f:a5:a8:23:25:22:ad:f4:bc:eb:
69:29:cd:0c:3d:9f:36:3c:06:c4:d1:6e:f6:c0:ac:
26:dd:52:9f:6e:82:30:01:bb:39:7d:f0:31:02:22:
01:85:52:10:86:8b:e2:84:f7:38:13:f3:ff:1d:86:
5d:13:fe:ff:5a:c6:70:62:56:17:a0:64:da:87:68:
d3:b1:e0:81:dd:2d:50:12:cd:38:e0:2c:d8:20:b2:
29:67:64:e0:15:78:3a:0b:4b:1f:5c:30:17:23:84:
12:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A3:9F:1D:39:6B:B1:31:CB:05:A2:29:F5:74:CF:EC:38:A2:F6:0C
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/8aOfHTlrsTHLBaIp9XTP7Dii9gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:180::/44
Signature Algorithm: sha256WithRSAEncryption
85:6d:ed:65:2c:06:1d:d5:b7:f3:17:4d:92:b5:e1:bc:24:f4:
6a:7e:0b:3b:7b:b0:a2:d1:cf:43:7f:1e:fa:21:05:1f:87:a4:
8d:f7:c4:0b:19:9d:07:c4:82:89:dc:22:a3:70:1b:70:29:b3:
38:06:6d:16:78:5c:ec:24:e6:01:93:db:5a:3d:64:21:67:0d:
ef:4c:b3:e2:81:66:19:22:6e:01:3b:74:94:19:3a:ce:e9:3e:
19:4d:c4:ca:ca:c8:d2:55:8e:23:06:b3:95:dc:8a:0b:04:04:
b8:dd:fa:20:22:34:56:9c:be:84:cb:87:80:cd:f0:fc:d1:d1:
56:03:b4:a0:0d:ad:4a:0f:48:04:53:51:7c:6e:f1:81:69:2c:
ad:16:3c:b0:a4:2f:5c:23:f0:03:53:d3:c4:05:c4:02:d3:77:
fa:f7:87:46:d5:d4:da:fb:98:e1:21:43:8c:93:be:5f:da:74:
69:d6:f7:26:2b:7f:93:4b:ac:c2:96:3c:0e:7b:73:4d:88:72:
87:19:d3:d3:6c:8e:a7:6b:08:5c:60:f8:90:e1:2b:5c:48:4f:
2b:39:fe:e5:93:52:3c:57:91:eb:62:31:95:fd:cf:eb:2d:90:
ca:e9:b2:f0:1b:e6:6e:51:f8:a2:a6:32:de:04:a2:52:3c:db:
40:ee:52:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:01:16 2024 by rpki-client on console-ams.rpki-client.org