Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/R0FacYtAxzHrUQLL_l8upeHhuH4.roa
File: R0FacYtAxzHrUQLL_l8upeHhuH4.roa (raw, json)
Hash identifier: TOocU9c6segSpP5KT+OR459aJNTigdi5kMI/dsKpkyc=
Subject key identifier: 47:41:5A:71:8B:40:C7:31:EB:51:02:CB:FE:5F:2E:A5:E1:E1:B8:7E
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC64A04DA114E5B65C71A6E25A91D6B97
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/R0FacYtAxzHrUQLL_l8upeHhuH4.roa
Signing time: Mon 01 Jan 2024 18:29:48 +0000
ROA not before: Mon 01 Jan 2024 18:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199948
IP address blocks: 2a12:bec0:140::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:04:da:11:4e:5b:65:c7:1a:6e:25:a9:1d:6b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47415a718b40c731eb5102cbfe5f2ea5e1e1b87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:95:b6:62:7f:a4:b9:b9:de:52:55:1e:d9:16:
53:47:06:93:71:2e:95:90:1a:2e:a3:ea:d0:3e:41:
6d:d1:6e:21:bf:a7:1d:d3:e3:a1:2e:cf:5d:bf:9a:
e7:5f:0f:be:3e:a6:9a:ef:2d:62:65:39:d4:24:45:
35:30:30:33:03:86:08:1e:32:c7:1e:85:e7:dd:e2:
62:2f:d5:f7:60:01:2d:72:ec:42:e2:d4:e3:e2:4a:
39:c3:ad:ce:d0:92:13:6b:e8:48:83:37:71:fb:1e:
d2:20:2b:d8:5f:ce:18:af:b4:16:0a:36:f6:f0:ad:
66:d8:f8:02:66:72:44:1d:91:fd:1f:ef:44:6b:70:
3e:e2:66:d9:ff:08:b4:67:26:fe:ab:c0:58:33:98:
88:ce:14:9d:da:5d:12:6a:20:9e:a7:9a:a5:bf:ea:
c1:cb:86:06:af:5d:2b:62:c8:e2:14:00:06:74:40:
27:bc:2b:32:c1:08:00:65:9d:82:5f:39:cf:bc:6c:
28:90:a3:25:71:99:e5:49:a8:0e:03:59:29:f8:5c:
c4:6d:6c:f7:3d:25:a3:05:2b:ad:b3:80:93:71:57:
dd:a1:b9:16:18:48:c6:5f:9a:59:89:9c:45:d7:3c:
b7:d3:64:05:00:8f:52:47:89:69:0b:9a:2c:10:51:
df:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:41:5A:71:8B:40:C7:31:EB:51:02:CB:FE:5F:2E:A5:E1:E1:B8:7E
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/R0FacYtAxzHrUQLL_l8upeHhuH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:140::/44
Signature Algorithm: sha256WithRSAEncryption
03:20:c9:cc:1a:69:34:6f:ce:09:57:33:46:37:e5:7c:f2:99:
d9:7e:1e:d7:5f:c2:85:ac:5e:cf:23:72:af:a2:c8:b5:fb:6c:
dc:4c:75:ba:e5:f2:df:82:58:32:22:84:96:93:60:a1:f4:aa:
6c:7e:51:69:ef:a8:a9:ed:44:7c:82:c1:de:6b:27:80:2c:d0:
7e:46:c8:62:1b:27:ac:4a:e2:3f:8e:ab:cc:24:14:a6:ce:30:
f7:f1:ce:40:7d:ce:a7:8b:7b:08:af:1b:b5:c5:6f:2d:e8:16:
5e:e1:12:3f:76:ad:ba:5f:08:7a:a4:ea:f6:a0:e1:7f:4b:9e:
88:2a:8e:80:43:b2:54:33:d1:ed:a2:6b:b3:ac:42:91:a7:33:
47:50:95:b0:b2:e6:17:da:04:e6:c0:95:84:64:b5:18:7c:5c:
8d:87:b8:d2:09:77:9d:7e:58:4c:64:bf:75:80:41:9d:1d:96:
81:42:82:d8:22:af:73:ca:86:cd:fd:dd:1a:69:02:69:17:2e:
0c:d0:ab:ba:f7:44:b4:82:cd:e8:10:ac:4a:a0:d2:2e:52:18:
6a:73:ab:bb:e8:10:db:64:39:bc:3a:b3:14:db:af:01:f0:e4:
3c:33:32:5a:5b:84:56:75:0c:63:b5:0a:60:3c:a0:08:d9:a6:
10:91:09:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:04:22 2024 by rpki-client on console-fra.rpki-client.org