Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/B1wLhmX5JxN6CJzC018KfVrSxOM.roa
File: B1wLhmX5JxN6CJzC018KfVrSxOM.roa (raw, json)
Hash identifier: p9A3rDGy4PbbkuvDVpNVJl4EmU8Sk5ZxG9RZB8pCrmM=
Subject key identifier: 07:5C:0B:86:65:F9:27:13:7A:08:9C:C2:D3:5F:0A:7D:5A:D2:C4:E3
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01906890323000CC42396588333C742F97B6
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/B1wLhmX5JxN6CJzC018KfVrSxOM.roa
Signing time: Sun 30 Jun 2024 09:53:18 +0000
ROA not before: Sun 30 Jun 2024 09:53:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150787
IP address blocks: 2a12:bec4:13c0::/44 maxlen: 44
2a12:bec4:13c0::/48 maxlen: 48
2a12:bec4:13c1::/48 maxlen: 48
2a12:bec4:13c2::/48 maxlen: 48
2a12:bec4:13c3::/48 maxlen: 48
2a12:bec4:13c4::/48 maxlen: 48
2a12:bec4:13c5::/48 maxlen: 48
2a12:bec4:13c6::/48 maxlen: 48
2a12:bec4:13c7::/48 maxlen: 48
2a12:bec4:13c8::/48 maxlen: 48
2a12:bec4:13c9::/48 maxlen: 48
2a12:bec4:13ca::/48 maxlen: 48
2a12:bec4:13cb::/48 maxlen: 48
2a12:bec4:13cc::/48 maxlen: 48
2a12:bec4:13cd::/48 maxlen: 48
2a12:bec4:13ce::/48 maxlen: 48
2a12:bec4:13cf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:68:90:32:30:00:cc:42:39:65:88:33:3c:74:2f:97:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jun 30 09:53:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=075c0b8665f927137a089cc2d35f0a7d5ad2c4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:22:8a:d2:cb:c7:c2:81:e6:d6:b4:ae:7c:8d:
4b:f8:8a:ce:7b:7e:12:c0:3a:e5:45:fb:91:86:32:
45:ad:6e:1f:4c:ad:f0:11:3a:8d:42:a5:e9:75:62:
5b:31:c4:39:95:27:24:3b:18:d0:2a:b1:88:f3:0a:
5d:ca:86:cf:df:26:b0:cb:5b:d8:72:eb:1f:3d:49:
97:80:c6:12:de:8d:ea:db:5c:32:e6:e5:62:f8:29:
4c:2a:de:88:56:b7:e9:10:5d:04:d5:a6:71:da:ed:
b9:b9:63:fd:c0:5c:87:0d:b0:ab:61:80:52:0c:12:
fc:03:2f:49:1f:5f:28:b5:c3:b7:92:08:1f:7e:12:
9d:c9:9a:5f:bc:86:e6:a8:9c:98:c0:b4:79:30:63:
1e:e2:85:d1:6e:1b:06:10:bd:c9:6a:24:42:16:e2:
24:9f:33:39:47:01:9c:80:30:81:96:06:85:80:f8:
eb:3b:47:0b:c5:e7:2e:30:f4:85:8b:65:b4:b8:c9:
62:7c:54:18:85:d0:23:10:7f:21:e6:08:1b:0a:20:
a2:fe:86:01:10:05:0c:17:6a:47:36:96:79:de:89:
e5:90:89:a2:5d:ac:2f:01:8c:e2:57:ec:71:30:c5:
f9:7f:87:f2:e0:01:34:1b:67:fa:16:ec:62:e0:b6:
9e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5C:0B:86:65:F9:27:13:7A:08:9C:C2:D3:5F:0A:7D:5A:D2:C4:E3
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/B1wLhmX5JxN6CJzC018KfVrSxOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:13c0::/44
Signature Algorithm: sha256WithRSAEncryption
bf:9e:98:eb:89:90:47:a5:f1:c3:20:08:66:39:30:e0:af:84:
a3:cd:f2:3e:ea:79:9e:13:20:5c:d1:98:64:7e:75:21:0c:7c:
b4:0e:d1:db:30:37:65:c1:6a:65:13:fe:17:35:2c:f4:71:14:
f7:e0:47:14:fa:45:cc:3f:c0:6f:3e:ec:d8:c6:87:66:33:d6:
86:66:42:0a:ae:f3:36:68:b8:c1:85:d4:5f:3e:6d:f9:ca:9d:
3f:56:68:bc:70:22:b8:06:6f:2d:ce:05:9f:5a:46:b2:5e:72:
68:4f:0f:13:e8:9e:6b:d2:f5:41:c2:8b:99:7d:26:c2:b0:a9:
0f:92:fa:4e:8f:c9:e8:e5:78:50:94:7b:1d:70:43:82:4c:ae:
85:16:38:24:2d:7f:9c:ed:f2:63:f7:42:d7:1d:bf:e7:af:30:
b0:30:1e:88:5c:a9:59:78:50:48:ea:37:17:2b:64:2e:df:6e:
6d:52:98:49:41:5a:f3:c4:67:30:ae:f7:07:de:8d:fa:71:ae:
d4:54:06:5b:0b:f5:79:c4:7d:f0:14:27:c9:63:23:0e:08:d1:
6f:27:23:aa:4e:f3:1d:de:ed:08:36:37:6a:3d:22:18:b8:3c:
79:e3:dd:32:3e:64:07:98:ee:2e:52:82:46:bc:5a:29:01:01:
d2:b2:96:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:13:26 2024 by rpki-client on console-ams.rpki-client.org