Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/TTQxudc7QhQAQrCHS8tgjwWIiTU.roa
File: TTQxudc7QhQAQrCHS8tgjwWIiTU.roa (raw, json)
Hash identifier: 3DeKaeI81uulJl3nC3JXNA+G0n4JoaihqLaFLMZGfc0=
Subject key identifier: 4D:34:31:B9:D7:3B:42:14:00:42:B0:87:4B:CB:60:8F:05:88:89:35
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC64A0EF45DC185613C5B9D74DA7E45F4
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/TTQxudc7QhQAQrCHS8tgjwWIiTU.roa
Signing time: Mon 01 Jan 2024 18:29:51 +0000
ROA not before: Mon 01 Jan 2024 18:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216047
IP address blocks: 2a12:bec0:590::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:0e:f4:5d:c1:85:61:3c:5b:9d:74:da:7e:45:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d3431b9d73b42140042b0874bcb608f05888935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a5:f3:77:c3:4d:19:62:ad:f4:03:28:1b:45:
c3:0c:5b:3d:4c:62:ca:f7:38:ae:6d:ba:af:ac:3d:
47:3f:a2:a9:cc:f3:c0:21:39:43:e7:bc:d9:28:30:
8c:78:4d:ac:49:85:66:bc:7c:6a:a3:2f:d4:1e:4e:
bb:f7:6d:25:89:f6:7e:f0:3e:d3:8a:c8:3d:71:e1:
d9:87:59:cd:7a:a9:d4:6e:6c:9c:79:90:a2:92:61:
ec:f8:62:96:a0:6e:08:99:60:31:68:34:a4:a8:35:
ef:94:d1:66:e9:4e:9b:e2:10:b5:12:8f:e4:c3:84:
25:c0:78:bb:04:03:2a:1d:82:36:66:ca:0f:c8:35:
04:52:7f:14:48:87:15:9d:55:77:9f:a0:94:8b:d5:
5e:92:23:c9:4e:87:c5:8a:87:0d:ce:09:cd:72:b0:
78:51:38:80:32:a9:d1:ef:f0:28:05:25:c7:87:02:
32:c3:16:90:99:69:9b:fb:7a:00:db:d3:b2:42:2c:
a4:65:b5:d5:64:e8:9d:58:8b:a1:66:40:9b:2d:bc:
7b:6f:3e:1f:e4:ba:82:77:45:4b:ad:a7:10:e5:af:
9a:c9:0c:cb:7f:2f:fe:b7:19:65:e1:e3:e9:0a:de:
19:48:8b:a3:6a:51:0c:04:0c:47:b8:7b:c2:10:c1:
12:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:34:31:B9:D7:3B:42:14:00:42:B0:87:4B:CB:60:8F:05:88:89:35
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/TTQxudc7QhQAQrCHS8tgjwWIiTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:590::/44
Signature Algorithm: sha256WithRSAEncryption
57:d7:ce:43:72:a0:2b:2b:de:9d:8f:04:31:e3:11:4a:4a:76:
68:d5:b8:b7:e0:1d:fe:ae:36:3c:45:c9:fe:12:62:d3:53:0c:
5d:8a:ed:e1:a6:df:17:25:19:14:0a:51:89:d1:52:85:35:20:
0e:8c:0c:46:5c:6b:6f:44:e4:9f:aa:79:ef:8f:60:03:7b:24:
27:25:69:b6:e6:3b:ad:b9:5b:ad:7f:88:c6:41:07:a8:29:29:
69:13:0f:ef:2b:71:82:6f:33:08:82:ae:0d:f7:df:7b:e2:0b:
42:41:7e:e9:ff:af:15:3e:a0:8b:23:34:25:99:9b:0a:35:25:
f6:5e:76:f1:aa:d2:5c:15:18:2e:cf:88:bd:9d:ef:ee:19:31:
8d:73:18:ac:75:07:0b:1a:19:d4:a2:05:d7:7b:63:d8:24:5c:
c9:18:09:83:12:c6:7d:fd:7c:97:79:b9:f3:71:42:93:db:c3:
15:3a:31:ab:ee:90:d6:73:12:3f:39:80:a7:a6:e2:cb:b6:5c:
93:73:57:9c:7e:34:e7:a3:47:33:5f:89:be:a0:e2:84:44:fd:
d4:ba:47:40:db:9a:2e:a5:51:1e:28:ad:cb:c0:61:6d:38:44:
0f:76:5a:50:73:3e:d7:3a:cf:54:89:a7:6c:68:cd:02:f2:2d:
c3:42:ae:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:40:31 2024 by rpki-client on console-fra.rpki-client.org