Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Df4J8YcM6GL96OlPFv8ZI9PFARo.roa
File: Df4J8YcM6GL96OlPFv8ZI9PFARo.roa (raw, json)
Hash identifier: OdHuMeFGWVNiF7ycFNjV+0fAjb6/t4KiU1yuSiZthwk=
Subject key identifier: 0D:FE:09:F1:87:0C:E8:62:FD:E8:E9:4F:16:FF:19:23:D3:C5:01:1A
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC64A09B55CA22E56D05876545529E077
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Df4J8YcM6GL96OlPFv8ZI9PFARo.roa
Signing time: Mon 01 Jan 2024 18:29:49 +0000
ROA not before: Mon 01 Jan 2024 18:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208328
IP address blocks: 2a12:bec0:fc0::/42 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:09:b5:5c:a2:2e:56:d0:58:76:54:55:29:e0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0dfe09f1870ce862fde8e94f16ff1923d3c5011a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:30:ff:91:5e:9a:f4:28:6c:55:c3:44:f3:
88:38:85:82:a6:70:b6:e2:25:b3:ad:fe:1c:3f:c0:
eb:0e:3b:3d:00:6a:6c:fc:6e:fc:2c:6b:6b:b0:2c:
11:f9:1a:17:15:74:c1:21:3b:c1:4d:2a:00:d7:dd:
d7:1c:53:7f:41:31:32:32:68:49:04:be:64:ac:8b:
b4:09:61:72:28:26:9c:b9:70:f5:80:33:d2:f1:0c:
21:3c:ed:e2:40:41:71:3b:b2:ed:87:b6:b9:3d:20:
0e:75:46:02:4e:86:f0:b8:4c:6b:27:87:e7:33:e2:
8a:c9:cb:bb:4d:4f:ff:58:f9:aa:88:9f:f8:a2:7f:
88:43:78:11:b8:97:ed:c8:e3:1e:f1:42:db:7b:9a:
b0:ad:f6:ac:ed:c6:7c:ca:4a:d3:c4:b6:26:d0:a2:
8a:93:2b:c0:8b:c8:36:87:b5:a2:22:da:1b:5a:d1:
1d:0f:15:89:1f:63:5d:c5:3c:71:e9:a1:2b:31:64:
ba:e2:78:2a:4a:a3:bb:07:37:8f:99:09:68:c4:a6:
74:89:4c:d3:77:76:ab:0a:b3:76:86:7a:8b:f5:0c:
71:6e:09:18:7f:00:ea:c2:e2:37:e8:a2:a5:6b:b0:
8c:fd:16:54:0d:41:c0:d2:94:c0:07:b9:23:63:b5:
7b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FE:09:F1:87:0C:E8:62:FD:E8:E9:4F:16:FF:19:23:D3:C5:01:1A
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Df4J8YcM6GL96OlPFv8ZI9PFARo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:fc0::/42
Signature Algorithm: sha256WithRSAEncryption
24:0a:b2:6e:2d:9c:27:08:be:6b:30:fc:32:86:89:2f:e3:4c:
5f:b0:f8:34:3d:ef:83:7a:20:ff:96:79:af:ae:cc:10:62:b9:
5e:be:73:3a:e2:8e:5b:c3:00:55:be:a5:31:22:e4:e2:16:a4:
ba:b3:cf:82:24:7b:32:be:cf:38:04:50:71:70:b5:e4:d0:41:
5c:fb:2d:2f:95:fa:ca:a5:23:ed:71:32:56:6c:e6:1f:c2:14:
dc:a0:27:da:85:26:46:3c:41:f5:cb:81:21:30:03:c1:c0:81:
fa:e1:f1:32:31:3e:8f:0b:8b:50:c4:67:73:7d:20:22:60:9b:
7c:c1:72:ae:6f:2a:66:76:66:a4:7f:03:38:89:08:f7:8b:e2:
f9:2f:0a:71:87:c6:a8:98:36:f0:91:79:e5:b9:f9:32:3b:d0:
89:5c:f1:7d:fb:6e:1c:eb:d2:d9:b9:9d:63:d3:d4:1a:34:d3:
3b:ae:77:23:20:05:62:0f:d6:5e:d2:c3:a7:1e:c2:35:52:7f:
8a:7a:81:dd:67:d1:9b:32:b6:11:52:2d:fa:85:6d:05:33:15:
60:b8:ad:5b:fb:01:81:1d:09:64:5e:8e:66:80:6e:8d:81:ec:
64:2f:bf:81:86:40:0b:b3:7a:f2:31:68:ef:21:74:82:c4:fc:
14:89:4c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:01:16 2024 by rpki-client on console-ams.rpki-client.org