Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/RrQue4COEB6Mr1Wkn3tVmKgvE0U.roa
File: RrQue4COEB6Mr1Wkn3tVmKgvE0U.roa (raw, json)
Hash identifier: Yq/vf3mGiSdf1lURFmxWnfSyYQ17s4IXYkwz0vNbc+o=
Subject key identifier: 46:B4:2E:7B:80:8E:10:1E:8C:AF:55:A4:9F:7B:55:98:A8:2F:13:45
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0190DA4208FD5421D31DB4D242C784BAD768
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/RrQue4COEB6Mr1Wkn3tVmKgvE0U.roa
Signing time: Mon 22 Jul 2024 11:44:39 +0000
ROA not before: Mon 22 Jul 2024 11:44:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214828
IP address blocks: 2a12:bec4:12b0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:da:42:08:fd:54:21:d3:1d:b4:d2:42:c7:84:ba:d7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jul 22 11:44:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46b42e7b808e101e8caf55a49f7b5598a82f1345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:37:ff:52:d7:1a:df:aa:87:28:62:58:62:9d:
f9:91:1d:c2:a2:e7:f9:e0:7c:2c:23:de:a0:d3:52:
9a:11:0b:ea:0c:5e:7c:9b:30:10:91:03:2c:ec:bf:
b1:48:76:72:2c:a9:f1:5c:21:45:f9:aa:a7:87:6f:
ac:29:15:cf:d1:ee:71:62:18:b0:44:99:83:3d:ec:
c2:dd:30:c3:2d:b6:26:1c:0f:82:f7:06:d1:de:b1:
95:5d:8c:5b:11:2c:98:85:62:f6:98:b5:83:3c:11:
d2:c9:a3:ee:38:63:50:a8:57:70:57:17:b4:83:a1:
e1:60:ae:28:15:d4:ab:7c:48:96:ee:07:fc:ca:18:
9f:86:22:96:91:82:dc:fa:90:3a:40:67:ee:39:f0:
01:e0:01:92:2f:74:f9:86:64:c9:b7:ec:03:2b:ff:
79:a6:9c:48:88:04:a8:80:8a:e0:5c:d8:19:7c:62:
df:51:6f:68:07:02:53:05:7c:28:c0:12:03:16:25:
3f:1e:22:45:2e:77:bd:5c:3f:a0:9e:cb:4a:76:14:
d8:3c:bc:45:4a:79:f2:e2:d4:6d:07:e0:fc:52:db:
ab:fa:09:65:4b:cf:79:db:1a:c4:f1:3c:db:11:df:
d3:39:2d:74:49:45:23:6c:0b:44:cd:54:aa:31:fc:
0c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B4:2E:7B:80:8E:10:1E:8C:AF:55:A4:9F:7B:55:98:A8:2F:13:45
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/RrQue4COEB6Mr1Wkn3tVmKgvE0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:12b0::/44
Signature Algorithm: sha256WithRSAEncryption
c0:3e:ca:1d:0e:21:41:aa:f7:a3:75:ba:03:16:14:01:80:45:
df:ed:5c:18:66:1c:55:a6:d1:bb:42:88:1b:ec:bf:bc:f7:54:
a8:bc:52:4a:40:f9:d3:e0:b8:62:0a:f8:42:fe:d2:12:da:3f:
0e:a5:f0:ce:bc:1a:01:d2:41:f7:b0:54:1d:00:2e:c8:39:29:
a1:2a:d6:bd:d2:5a:c4:6e:03:11:c9:66:f6:ca:0e:dc:1d:6e:
d6:74:67:9a:e1:43:69:70:82:7f:d5:55:f2:63:c3:99:fa:d3:
dd:bb:07:31:d8:b4:22:97:a3:24:c9:d5:f5:05:6d:f0:07:96:
94:9e:78:2f:b4:96:1d:6c:c5:12:45:bf:2b:73:10:3c:26:97:
ef:55:a0:c6:74:75:cd:5d:39:be:51:ff:b2:51:d5:35:63:d2:
87:e1:f7:ac:a6:c9:e6:ee:f0:44:30:46:ce:01:bb:9d:0d:a1:
70:6d:1f:c8:d9:84:d7:fa:8d:c5:6a:90:de:92:09:72:14:8d:
9c:bb:85:db:09:20:e7:9f:cc:b9:a2:a0:e5:48:98:97:00:21:
d8:69:ce:bd:e0:ad:e4:3b:99:50:2e:55:87:59:fc:1d:35:79:
5c:b7:50:bc:19:20:82:72:55:ef:b1:cd:c6:d1:92:e2:1f:79:
05:99:f7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:52:31 2024 by rpki-client on console-fra.rpki-client.org