Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/GwJqzynd9enqa1AS43x154DWg7w.roa
File: GwJqzynd9enqa1AS43x154DWg7w.roa (raw, json)
Hash identifier: 2r1gHmUW0uOBh2yR2iL5fdEdYOe1/Zu3Jf5lEGb7YG4=
Subject key identifier: 1B:02:6A:CF:29:DD:F5:E9:EA:6B:50:12:E3:7C:75:E7:80:D6:83:BC
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC64A12047BD92E77B1B2D4958C801E5A
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/GwJqzynd9enqa1AS43x154DWg7w.roa
Signing time: Mon 01 Jan 2024 18:29:52 +0000
ROA not before: Mon 01 Jan 2024 18:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216270
IP address blocks: 2a12:bec0:460::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:12:04:7b:d9:2e:77:b1:b2:d4:95:8c:80:1e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b026acf29ddf5e9ea6b5012e37c75e780d683bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:53:93:d3:a3:a4:a7:0e:3d:3a:47:fe:f5:a2:
4e:85:6c:23:c5:26:89:dc:02:94:c8:cf:47:f3:86:
be:f4:14:c3:bd:d3:26:d1:8c:77:c7:bc:49:48:64:
be:e3:34:21:3e:62:da:2e:77:6e:13:56:a8:5d:b0:
17:74:82:99:55:1f:9e:f7:7f:aa:0f:53:fb:14:80:
fe:2f:61:0e:b2:9c:4c:96:16:ad:d5:22:ca:f5:cf:
86:45:7a:ea:96:62:18:b3:c7:7b:91:98:c7:20:41:
95:74:07:ce:26:03:4e:a3:05:0c:95:b9:ac:c4:5b:
b1:bc:90:52:bc:b1:a4:2e:16:df:7a:e2:e5:8a:ce:
be:2d:d0:de:3a:65:57:90:45:ac:c8:21:ea:ec:c8:
57:b9:38:05:0e:cf:ad:6e:82:bd:05:56:5c:95:63:
e9:8d:a1:67:78:94:8d:c9:c8:33:6e:e0:fb:0d:93:
f2:8f:c1:e8:1d:20:61:46:78:2f:30:de:03:31:e2:
9e:e0:99:64:63:47:8e:36:81:64:b0:04:ee:b6:c1:
c9:15:87:a4:59:cb:8f:61:ad:22:ef:74:9f:5d:1d:
ac:47:d8:42:eb:ef:bf:e1:ca:39:6e:2f:08:36:42:
9d:c8:de:33:d1:c2:08:00:e3:92:62:8f:0d:65:91:
2c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:02:6A:CF:29:DD:F5:E9:EA:6B:50:12:E3:7C:75:E7:80:D6:83:BC
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/GwJqzynd9enqa1AS43x154DWg7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:460::/44
Signature Algorithm: sha256WithRSAEncryption
85:1d:e8:6c:91:68:b7:84:68:05:02:f2:4e:cd:16:97:87:c7:
17:9a:29:3b:85:bd:d4:05:a3:b5:76:2d:97:63:27:24:f7:65:
26:9d:38:1c:4a:bd:8a:b9:19:81:a8:1b:a4:f6:76:68:20:9b:
6f:e0:d1:4d:55:aa:ac:75:3f:55:ff:74:27:fe:37:c0:05:89:
83:a4:0f:e0:76:2f:58:95:4a:46:71:9e:a7:0c:fa:ad:e2:fb:
91:30:37:d7:a0:ca:5f:77:ae:f9:e1:b2:c4:be:ae:96:68:ba:
3b:a8:e4:b7:0b:df:8f:85:4c:78:d1:5d:12:c8:16:67:ce:a5:
65:2d:d1:bc:ac:6f:96:1e:70:c6:c9:ed:fd:e6:57:63:0f:cd:
ad:b5:71:42:5e:02:75:f4:32:3b:6d:e1:fd:5e:0d:98:d9:ca:
d3:e0:58:9a:1c:26:e9:00:92:64:1e:5a:89:28:2d:06:de:86:
01:06:ba:55:90:c8:e6:0c:62:68:9d:18:7d:7d:a3:ee:d8:f8:
4c:e4:91:86:2f:ac:b9:95:99:c0:d4:84:85:7f:a6:94:f8:53:
0c:0b:5d:a0:32:e4:6d:10:4c:af:a8:ba:3c:57:7f:12:bb:11:
af:f8:37:94:10:35:01:1e:63:f7:ee:55:6d:16:4c:02:79:be:
d0:c5:81:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:01:16 2024 by rpki-client on console-ams.rpki-client.org