Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/FoX8u8VJ39cNlW_9nUOgZKVR4BM.roa
File: FoX8u8VJ39cNlW_9nUOgZKVR4BM.roa (raw, json)
Hash identifier: BLUyP6yVOENDpTfTbpdWKEkvLxdGgOzFCw7SkTasDKI=
Subject key identifier: 16:85:FC:BB:C5:49:DF:D7:0D:95:6F:FD:9D:43:A0:64:A5:51:E0:13
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0191260989CC5124C1B61423E55A600B22C8
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/FoX8u8VJ39cNlW_9nUOgZKVR4BM.roa
Signing time: Tue 06 Aug 2024 04:54:04 +0000
ROA not before: Tue 06 Aug 2024 04:54:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215269
IP address blocks: 2a12:bec4:13f0::/44 maxlen: 48
2a12:bec4:1440::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:26:09:89:cc:51:24:c1:b6:14:23:e5:5a:60:0b:22:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Aug 6 04:54:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1685fcbbc549dfd70d956ffd9d43a064a551e013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:ce:f6:47:16:cb:48:f0:35:f6:c0:4d:6d:
0e:ed:db:01:80:31:82:f0:b1:3d:ce:46:bf:99:b5:
72:09:ce:a1:66:20:e0:4b:c6:f8:ac:54:8c:d7:bb:
6f:4b:26:73:57:cf:76:ee:a4:9d:be:66:91:74:61:
9b:6a:05:12:10:4e:5a:e4:1f:2f:6b:b8:91:e3:be:
74:a2:51:40:bb:b7:fc:84:4b:6e:60:94:da:d9:36:
f7:d6:32:7b:a3:ae:76:c1:65:3c:a3:0a:52:4d:57:
1f:9f:d8:ae:94:fc:26:b4:39:68:79:bc:4d:c9:5a:
ee:2b:dc:2c:9c:a9:d9:46:3e:62:93:dd:9d:e9:1e:
60:4e:44:46:ab:87:e1:eb:e8:f4:e5:e8:65:d7:33:
5f:f5:85:d1:97:6d:f0:52:47:f9:8f:2b:98:db:3a:
19:fa:63:0b:ba:26:a4:58:7d:cf:08:ed:bb:1e:d8:
45:6e:a0:7d:75:2b:3d:59:a4:af:29:24:fa:ce:12:
c9:e6:fb:48:0a:73:f7:ce:05:a8:1e:32:3d:c8:cd:
c8:ad:d8:9c:c8:19:cf:e1:6d:13:ab:ab:91:a4:30:
4a:50:47:2f:55:cd:ed:42:af:75:27:52:f7:ab:4b:
d3:89:fd:4e:27:bb:0b:5f:1b:4b:bf:15:1f:18:25:
d4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:85:FC:BB:C5:49:DF:D7:0D:95:6F:FD:9D:43:A0:64:A5:51:E0:13
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/FoX8u8VJ39cNlW_9nUOgZKVR4BM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:13f0::/44
2a12:bec4:1440::/44
Signature Algorithm: sha256WithRSAEncryption
16:f8:41:0a:b8:7a:07:ab:a8:cd:03:43:37:45:8b:cf:b8:80:
7b:19:03:10:45:07:dd:e1:5d:03:87:11:16:ad:24:be:5c:55:
f5:a8:90:c1:86:13:e4:3e:48:f1:9e:8f:fc:5e:61:43:4d:db:
bc:79:9b:14:78:74:19:d8:c4:99:4f:99:a9:d9:42:2c:03:27:
71:9a:90:55:25:7c:9f:f2:f1:65:f5:59:23:b5:f0:a0:8d:d7:
41:c6:e8:fa:bc:bc:49:65:4e:18:3f:bc:56:b9:7a:a0:a4:c7:
23:9a:c9:f0:3c:ed:1f:13:f4:0e:43:b8:f4:f6:52:dc:5e:8f:
d9:36:8f:e5:a0:cd:b7:f6:d8:f6:73:5c:0f:b2:4e:30:0f:64:
bc:3b:44:d9:b9:7c:a3:41:1d:8b:9d:08:d6:1e:8a:cf:41:6f:
3f:f7:9b:bd:36:73:92:66:e8:aa:2d:b4:65:5c:28:cd:fb:4f:
80:9f:c3:1d:b1:c7:ac:0a:31:59:6f:fe:30:30:ab:bc:a9:c0:
86:98:31:f1:d5:6c:6b:a7:c7:6c:bb:86:5a:cf:3c:8d:c8:e4:
ae:79:da:e7:3e:e1:75:50:3f:0a:62:29:91:53:74:e1:b0:e3:
c1:80:c1:78:de:a6:41:f5:0b:97:54:ed:7a:f8:ec:f4:4c:6b:
39:42:73:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:13:26 2024 by rpki-client on console-ams.rpki-client.org