Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Z3nGAsUchWbvMUNXXliy9VOFjH0.roa
File: Z3nGAsUchWbvMUNXXliy9VOFjH0.roa (raw, json)
Hash identifier: F7ZtQNpxVla+hzyDkIAJ9nGs1KtQPpihUu46e2HfYzA=
Subject key identifier: 67:79:C6:02:C5:1C:85:66:EF:31:43:57:5E:58:B2:F5:53:85:8C:7D
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC64A0BC50F53F538E34372DC17154339
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Z3nGAsUchWbvMUNXXliy9VOFjH0.roa
Signing time: Mon 01 Jan 2024 18:29:50 +0000
ROA not before: Mon 01 Jan 2024 18:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211350
IP address blocks: 2a12:bec0:74ef::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:0b:c5:0f:53:f5:38:e3:43:72:dc:17:15:43:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6779c602c51c8566ef3143575e58b2f553858c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c4:6f:07:18:fe:21:f1:4a:2c:b0:46:ef:80:
ac:f6:ed:3c:cc:3a:00:1c:4a:86:42:ef:ab:40:57:
b3:29:f4:11:33:86:15:51:bb:7e:8b:8a:05:f2:71:
03:f8:db:a7:49:0c:dc:73:19:b7:04:c3:3c:8b:1b:
b1:0e:5f:66:d1:81:6d:7d:e1:79:fa:d8:c6:40:6c:
c7:52:04:ae:78:c8:42:ad:21:41:8d:fd:15:93:01:
8e:94:d0:1e:a2:b1:af:b1:d9:ce:c4:c4:4c:5e:fd:
17:c0:73:06:bf:9d:ef:33:6b:43:51:bc:e8:6a:18:
58:48:99:ea:33:64:50:44:52:2b:48:5d:2e:83:a4:
6d:24:cf:fa:05:71:46:fd:c0:a7:61:a2:ca:87:1e:
83:cd:eb:b2:ba:ea:8e:21:4a:e7:96:da:dd:03:77:
6e:68:22:68:9e:da:0f:37:3f:a5:ea:30:18:03:a9:
6b:0e:3a:bc:fd:ae:ae:cd:b1:21:e3:6a:c6:3c:74:
4a:17:e4:76:c9:76:4d:dd:91:7e:ba:54:26:fc:6d:
19:07:ab:c3:2e:57:40:ce:38:35:41:0e:4c:a8:29:
17:46:36:38:5c:17:29:90:68:fb:40:6f:12:46:88:
c1:d5:df:16:48:b4:e6:85:a7:4b:07:bd:f2:3f:b3:
40:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:79:C6:02:C5:1C:85:66:EF:31:43:57:5E:58:B2:F5:53:85:8C:7D
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Z3nGAsUchWbvMUNXXliy9VOFjH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:74ef::/48
Signature Algorithm: sha256WithRSAEncryption
8d:09:1f:ab:26:ad:b2:b9:67:3d:b6:9f:60:e1:2b:ca:f4:2f:
3a:15:76:1a:4d:5b:1e:2c:82:44:17:71:f2:06:fc:d6:a3:a6:
62:fb:bd:48:9c:ce:82:0a:91:ab:49:81:28:52:ad:5d:b9:fb:
e4:12:8c:56:a5:de:23:ea:5b:c7:3f:7d:67:40:df:3d:30:02:
43:74:90:96:2d:f4:0c:78:c7:89:a3:19:76:50:1a:16:26:d4:
e1:f2:69:ff:57:e7:cd:ea:ff:ca:d6:9b:c0:fd:16:4c:22:ab:
c0:49:65:ec:36:85:90:99:03:00:1b:1f:13:14:1a:ef:b2:e7:
71:a5:f2:fb:23:c2:a5:1a:e2:94:88:aa:81:3f:08:1c:9a:5d:
62:4d:60:25:be:65:55:44:80:39:74:88:8d:2c:72:41:a3:4e:
e2:03:59:51:31:59:49:fe:c2:a7:af:b4:73:c2:df:d3:67:aa:
49:b4:b3:fe:f1:8d:fe:3e:45:74:d9:46:8f:b3:e1:fd:4f:26:
cb:7b:86:be:29:15:10:7e:87:b4:c1:85:e7:1d:65:ed:30:f1:
5f:83:0a:fa:41:0f:1e:fe:38:21:96:30:c1:ff:a9:6f:14:b3:
3d:e5:43:cd:7b:0b:1b:17:29:32:e5:e9:20:21:c5:28:ed:47:
57:73:7e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 18:28:26 2024 by rpki-client on console-ams.rpki-client.org