Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/MQtf7OntgfHCmicdHXnXlksNdIY.roa
File: MQtf7OntgfHCmicdHXnXlksNdIY.roa (raw, json)
Hash identifier: FGWJiM0Tiiv3ytiN4gBHGzK/EQdBxmIHEebUnhkO/hg=
Subject key identifier: 31:0B:5F:EC:E9:ED:81:F1:C2:9A:27:1D:1D:79:D7:96:4B:0D:74:86
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018D54A0C89817E3A6C23B861A7313F2A804
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/MQtf7OntgfHCmicdHXnXlksNdIY.roa
Signing time: Mon 29 Jan 2024 09:50:39 +0000
ROA not before: Mon 29 Jan 2024 09:50:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215652
IP address blocks: 2a12:bec0:660::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:54:a0:c8:98:17:e3:a6:c2:3b:86:1a:73:13:f2:a8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 29 09:50:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=310b5fece9ed81f1c29a271d1d79d7964b0d7486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f8:5a:28:93:52:0d:51:57:85:68:5e:2a:a4:
26:ac:75:65:59:8d:6a:56:12:16:a6:f2:38:3d:8e:
26:c0:50:1d:3a:26:24:21:c9:4c:89:b2:37:f0:2f:
26:9a:e9:24:24:0e:c7:bc:c5:07:ee:bd:93:d1:6f:
99:8d:e0:bf:f6:b8:89:69:e2:1c:9b:50:bc:25:ad:
72:7c:97:c5:40:53:fa:7e:f4:25:67:74:06:64:fd:
2b:d2:20:c9:63:c3:30:18:25:aa:3a:d6:f2:57:05:
ba:62:0a:2a:0c:a9:69:71:02:e1:25:5b:b0:22:fd:
ed:d2:e5:87:cd:d2:46:4b:2c:9e:78:a6:db:47:25:
a6:89:17:d6:8c:c1:ae:9d:a3:3a:96:4e:e4:5c:47:
12:18:5f:ad:df:6a:6b:bc:d8:9e:bd:6d:46:81:22:
28:f1:40:3a:17:b4:d1:53:01:da:71:dc:d6:4b:29:
3d:0c:74:56:3b:4a:20:24:00:8f:a9:12:47:5f:09:
66:bf:37:56:c3:41:0b:86:a0:54:02:32:85:b4:38:
f9:3b:f5:51:1e:c2:cd:f9:85:4d:aa:73:2a:92:16:
ef:36:5e:d5:81:45:b8:2e:4a:fa:9b:b8:a6:55:84:
5e:81:30:a5:dc:1e:c5:12:66:c2:aa:b2:00:a2:b4:
9a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0B:5F:EC:E9:ED:81:F1:C2:9A:27:1D:1D:79:D7:96:4B:0D:74:86
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/MQtf7OntgfHCmicdHXnXlksNdIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:660::/44
Signature Algorithm: sha256WithRSAEncryption
2e:c9:28:79:dd:09:4b:f2:d7:21:80:ab:45:8c:e7:a1:2e:f0:
a4:66:6f:a7:bc:2f:a3:9f:f2:9e:7a:12:3f:63:48:d7:c0:65:
6a:fa:32:8d:59:11:74:22:77:4a:28:d8:32:1c:72:5c:a8:df:
88:ea:4d:dc:23:b9:b4:4f:99:43:33:5d:d9:1f:cb:ba:12:7b:
9d:5d:e7:4d:ec:e3:6a:9f:fd:72:cd:12:98:56:79:7b:d2:f3:
7e:9f:ea:12:09:71:69:cf:11:d6:0f:ff:b5:c2:a3:77:67:81:
d3:e8:80:cf:85:34:9d:c9:11:46:e9:ca:b9:64:10:db:8c:8a:
51:35:c1:9d:c1:d5:72:a0:24:ac:55:c1:76:33:5e:f1:1c:df:
c3:44:0f:c4:9c:4b:25:60:91:85:a4:76:f4:70:d8:a7:b9:84:
9a:30:3d:17:d7:55:cf:eb:b8:b4:09:81:83:97:a2:e2:1f:0f:
3e:21:62:07:5b:4a:34:f7:1d:b6:fb:01:34:9d:46:d3:89:09:
c6:b2:86:11:0d:88:01:20:73:3c:9a:2b:03:50:19:3e:2f:8c:
38:04:25:09:a7:d7:0b:7e:07:e1:c6:ab:11:13:5c:e3:86:19:
ca:58:a2:79:ac:bc:fb:d5:a9:71:c4:34:0f:89:19:f9:cf:48:
1e:c8:38:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 09:26:51 2024 by rpki-client on console-ams.rpki-client.org