Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/IriBAsztmMTsJzZBkeCLEWibi-U.roa
File: IriBAsztmMTsJzZBkeCLEWibi-U.roa (raw, json)
Hash identifier: lKB9U4ICQZYWubfKtUeDa0mhHh91zQaLc02V0xJ2Koo=
Subject key identifier: 22:B8:81:02:CC:ED:98:C4:EC:27:36:41:91:E0:8B:11:68:9B:8B:E5
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0191CDED3EC37FF73D5D47878AA147CD4D21
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/IriBAsztmMTsJzZBkeCLEWibi-U.roa
Signing time: Sat 07 Sep 2024 19:19:22 +0000
ROA not before: Sat 07 Sep 2024 19:19:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214891
IP address blocks: 2a12:bec4:1280::/44 maxlen: 44
2a12:bec4:1480::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:cd:ed:3e:c3:7f:f7:3d:5d:47:87:8a:a1:47:cd:4d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Sep 7 19:19:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22b88102cced98c4ec27364191e08b11689b8be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:31:1d:93:37:9d:9b:c3:f1:f4:6d:92:86:6b:
03:18:18:95:e6:62:71:b7:84:93:6d:0e:75:0e:42:
ea:e1:7f:c7:28:e7:db:39:68:bd:6c:15:52:bd:cf:
61:34:67:fa:19:28:ae:d2:93:26:a4:02:db:e5:27:
e6:75:c2:37:71:b9:73:18:f3:5d:0b:c6:be:79:54:
0c:0e:e1:1e:62:08:4f:f9:a1:ae:50:91:2f:af:cd:
00:a4:04:4f:84:7c:28:ab:c4:ad:3d:be:85:3f:10:
48:6a:46:af:2b:55:3c:e9:be:93:e2:8b:bb:d8:4a:
8e:8b:dd:83:42:de:94:d3:e6:48:a1:a8:27:f4:68:
2c:ef:b7:c1:1d:59:81:bd:3f:8e:38:55:fc:1e:a9:
8c:2b:58:2f:62:c7:cb:56:7e:23:a9:1b:b5:a9:1a:
95:72:2b:4e:a7:8c:be:fa:62:07:42:56:de:ad:c9:
c7:37:f0:aa:ca:f7:d1:ab:12:3a:bd:fc:f7:a2:cd:
48:0a:5e:9e:3f:d8:a0:17:33:55:31:44:1e:15:eb:
41:12:ea:08:09:eb:a4:15:b2:c5:7a:dc:10:23:49:
98:ce:77:d2:44:5e:82:92:b7:3e:9b:66:72:a9:db:
c3:dd:4c:e4:1f:9f:df:dd:4d:dd:1b:53:4c:35:fc:
4f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B8:81:02:CC:ED:98:C4:EC:27:36:41:91:E0:8B:11:68:9B:8B:E5
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/IriBAsztmMTsJzZBkeCLEWibi-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1280::/44
2a12:bec4:1480::/44
Signature Algorithm: sha256WithRSAEncryption
06:3a:73:4c:86:5a:b1:7d:fd:91:2a:69:db:7f:ce:3f:50:17:
6c:9b:db:83:81:ba:5a:90:54:ac:cf:a6:b7:df:d2:dd:99:1e:
a5:39:6b:bc:65:81:87:ba:d7:84:66:3e:85:70:c8:1a:97:da:
10:1b:5d:60:85:00:dd:53:fe:d8:fd:d3:85:7f:6f:06:2c:80:
00:38:ab:a6:bd:b4:ea:1d:d6:57:f3:a5:a0:ec:25:d2:6a:41:
21:e7:98:ba:07:c1:4e:7c:7b:4a:68:88:6d:69:64:ea:db:ca:
c6:c4:c9:26:d8:b0:e2:c2:90:fc:96:21:78:69:17:b8:4b:ce:
44:42:0e:38:21:e0:24:c5:e1:9b:1b:dd:c6:10:7b:de:84:19:
86:01:0e:42:6e:ed:3a:bf:5e:d7:13:dc:b2:c7:23:88:24:23:
13:bc:d5:bb:1b:a9:60:a8:fe:bb:1e:eb:ea:bd:02:de:56:74:
7b:cb:b9:94:60:b7:f3:c5:bd:20:a7:79:4a:85:79:46:ea:b7:
6b:16:6a:5b:75:a0:7c:6d:43:29:50:bf:47:55:f7:f2:44:8c:
92:5b:51:a4:1d:f0:4d:30:09:17:c1:30:27:11:26:aa:2e:ec:
68:b1:3a:2e:b5:e9:28:9f:55:5c:97:f0:38:61:b6:38:e0:7b:
b8:50:1b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:52:31 2024 by rpki-client on console-fra.rpki-client.org