Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Axk7cZ7JA2SFneaWP8upNDgrSC4.roa
File: Axk7cZ7JA2SFneaWP8upNDgrSC4.roa (raw, json)
Hash identifier: /vrDbmelpA7LJhMIy9usBgnUFYE7ThOmuFG4DD04XsI=
Subject key identifier: 03:19:3B:71:9E:C9:03:64:85:9D:E6:96:3F:CB:A9:34:38:2B:48:2E
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC649FFB95D6B80B82B7F086BAA0F009F
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Axk7cZ7JA2SFneaWP8upNDgrSC4.roa
Signing time: Mon 01 Jan 2024 18:29:47 +0000
ROA not before: Mon 01 Jan 2024 18:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198889
IP address blocks: 2a12:bec0:2c0::/44 maxlen: 48
2a12:bec0:2ce::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:ff:b9:5d:6b:80:b8:2b:7f:08:6b:aa:0f:00:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03193b719ec90364859de6963fcba934382b482e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b3:cb:31:5e:80:0c:5b:32:65:4e:47:e3:45:
86:3f:ed:a7:a8:5e:a8:2d:30:d2:a2:86:79:c7:60:
fc:e4:8e:6b:d7:7b:2b:74:64:78:ed:f4:e4:0e:8c:
50:49:b5:7c:7e:9a:7d:eb:22:65:89:43:45:d1:dd:
aa:57:48:f2:83:72:91:10:49:c7:f8:f4:bd:6f:97:
6d:a9:6c:e1:9b:da:5d:bb:f9:c9:b0:0c:b5:19:48:
e1:ed:29:cc:46:c1:31:e9:d0:83:14:ab:34:68:ed:
bf:15:2d:88:ed:01:2b:fb:76:41:37:69:8a:12:c6:
bb:0f:47:8a:28:3d:67:5a:d4:00:b7:cb:fa:aa:ad:
22:33:2f:bb:f6:8b:d3:ea:db:73:bf:bc:82:02:a7:
63:15:c7:73:35:ec:3a:89:4d:9a:b9:fe:28:48:cc:
9c:da:e1:bd:89:30:c7:bb:c6:62:1d:88:6c:ff:c7:
b4:c3:99:aa:bb:0f:1b:8e:00:90:4a:d6:2c:3d:64:
4b:e9:5d:b8:8f:cb:7d:2b:bc:28:58:0c:bf:9a:c1:
f8:d5:d1:c5:cd:05:37:4d:ba:87:7a:8f:b4:4f:18:
34:79:93:ab:16:f7:f4:cb:8f:c7:81:dc:d8:58:ed:
68:64:88:7b:a7:d6:86:df:bb:f8:fa:03:00:c7:74:
10:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:19:3B:71:9E:C9:03:64:85:9D:E6:96:3F:CB:A9:34:38:2B:48:2E
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Axk7cZ7JA2SFneaWP8upNDgrSC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:2c0::/44
Signature Algorithm: sha256WithRSAEncryption
12:49:d9:9a:28:e8:ed:08:c4:16:1a:bd:5a:be:48:08:5c:6f:
2c:67:f5:ab:a2:67:87:e9:45:f2:4b:55:46:18:8a:94:0e:d8:
75:24:94:a9:19:24:10:4e:c0:7c:95:75:ea:4f:e9:60:ed:cd:
9e:5b:ca:fb:af:16:32:88:2c:96:db:8b:48:3a:23:c9:94:4e:
3f:4c:3c:8f:5f:48:02:c3:6d:f5:7f:8d:91:f1:e0:ed:25:13:
9f:66:4b:73:04:17:88:bb:5a:e4:6b:3e:84:98:d0:5c:80:d9:
f1:28:08:00:8d:1e:28:1e:12:d6:b4:eb:54:83:0f:b9:c6:c3:
e2:be:39:7f:88:b4:d8:80:ce:ff:b6:2b:33:d2:08:53:c4:5e:
cc:10:bd:fa:c1:84:59:49:90:ef:f7:bc:55:5b:09:77:fc:a3:
1e:9f:12:cd:01:e5:ab:c1:7b:74:32:37:f3:00:a6:c4:ee:c5:
89:bc:e5:d1:0f:00:d7:a4:f4:3a:15:70:8a:7f:ec:b6:b9:62:
e3:b9:63:f6:04:71:bc:53:61:c8:c8:18:6f:33:2f:bb:12:b7:
76:53:b5:6b:1e:4e:6e:ce:00:45:06:24:32:50:76:28:a6:77:
79:b9:76:62:3a:ba:6f:86:6b:60:81:52:e5:ac:72:bc:03:84:
53:dd:ed:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:13:26 2024 by rpki-client on console-ams.rpki-client.org