Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/br2jvA30PDhkR2r_GTQpnarqy4c.roa
File: br2jvA30PDhkR2r_GTQpnarqy4c.roa (raw, json)
Hash identifier: XnLGsq5twOg+1fC2zBY92ucBqYhDSvEE4mJsom1LBu4=
Subject key identifier: 6E:BD:A3:BC:0D:F4:3C:38:64:47:6A:FF:19:34:29:9D:AA:EA:CB:87
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC649FCCEF7B41039602BCD83448AB065
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/br2jvA30PDhkR2r_GTQpnarqy4c.roa
Signing time: Mon 01 Jan 2024 18:29:46 +0000
ROA not before: Mon 01 Jan 2024 18:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58052
IP address blocks: 2a12:bec0:190::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:fc:ce:f7:b4:10:39:60:2b:cd:83:44:8a:b0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ebda3bc0df43c3864476aff1934299daaeacb87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:23:81:43:f5:52:70:81:d7:ee:8f:cf:55:78:
be:aa:85:75:12:f2:c0:22:eb:de:0c:70:35:01:2c:
09:e4:f1:7b:cd:03:36:ea:35:b3:d9:18:89:65:b2:
60:be:18:c0:c7:9a:60:ac:50:b0:01:42:00:f7:70:
0d:e7:d9:88:30:8a:9e:02:93:94:12:49:63:39:9c:
fd:64:b2:25:ea:33:90:c5:40:90:2e:ad:b6:64:2f:
5a:74:7a:72:ed:78:76:7b:f8:ec:b0:70:63:14:ca:
1c:6a:e1:96:bc:57:ef:9e:84:49:d4:7e:82:30:87:
74:c0:d0:31:5f:ab:bc:b5:d3:8b:9a:01:53:1c:5a:
27:e7:b1:55:e9:a1:c4:1c:c0:38:29:18:34:1d:0b:
e2:ea:de:a9:f8:43:49:71:78:6f:fe:59:ca:17:f4:
c7:43:cb:85:ab:f3:25:43:e4:58:a7:12:7c:95:79:
9c:82:b5:c5:9e:07:9e:49:4d:2f:54:c4:3c:10:d9:
26:9f:b9:52:5d:d7:c2:dd:c1:32:56:75:5e:6d:cb:
9c:ae:bc:38:b6:c5:15:0c:8e:c6:5f:f1:cf:f9:98:
da:3e:88:71:08:dd:87:1b:71:40:32:7f:6d:d7:6c:
8a:2a:b3:a5:69:c4:db:60:f0:9d:30:cc:6f:e0:46:
a0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BD:A3:BC:0D:F4:3C:38:64:47:6A:FF:19:34:29:9D:AA:EA:CB:87
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/br2jvA30PDhkR2r_GTQpnarqy4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:190::/44
Signature Algorithm: sha256WithRSAEncryption
90:39:f1:de:d9:14:2e:ba:9e:85:a3:be:b7:79:7d:62:4b:e8:
3d:8b:1f:ea:2e:b2:4c:69:9c:6c:1c:7e:73:07:72:36:1f:dc:
c8:aa:20:8c:e0:dd:3a:01:c9:41:6a:1c:54:5a:03:a4:ae:80:
9f:7c:02:4d:35:96:76:23:89:df:21:da:48:76:68:b3:fc:08:
a3:20:17:0f:2b:a9:49:8c:11:7a:b6:37:9b:cb:ca:1d:1f:f0:
44:fb:87:ad:e2:95:a1:e2:bc:b6:16:1a:27:7c:4a:d3:19:e8:
02:c1:d5:0f:33:ae:35:a5:d4:3a:b9:ed:4b:0f:93:53:1f:bd:
6a:85:52:a7:69:fe:f6:62:f6:97:d3:4f:18:e9:ab:bf:05:b2:
c4:27:82:27:27:f7:bb:2f:11:af:e3:2b:02:d6:b2:bd:50:81:
35:72:eb:70:f2:b0:64:54:37:47:3f:65:5f:9c:9d:96:f9:62:
ec:35:7a:5a:4d:02:73:4d:57:47:8e:c6:e5:2b:8d:1a:3f:24:
e6:2a:ad:1b:bd:08:f8:82:ea:35:27:d2:7b:b1:5b:8f:d3:36:
35:78:40:68:3f:d1:0e:50:79:29:48:76:cc:24:ce:77:0f:1d:
72:95:71:4d:54:a7:2a:c8:07:46:da:63:3e:7c:b7:94:8e:43:
f7:35:f8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:52:31 2024 by rpki-client on console-fra.rpki-client.org