Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/cNdU8qZxOtzXFMBoLYB-bpvMhkg.roa
File: cNdU8qZxOtzXFMBoLYB-bpvMhkg.roa (raw, json)
Hash identifier: fpxo4MCki9NzPkjgS7eSRScufkxN/F5QnZkmhpgzpHU=
Subject key identifier: 70:D7:54:F2:A6:71:3A:DC:D7:14:C0:68:2D:80:7E:6E:9B:CC:86:48
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01933F1AEFCF806B968A9AB5F6A7E30F40B4
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/cNdU8qZxOtzXFMBoLYB-bpvMhkg.roa
Signing time: Mon 18 Nov 2024 11:49:10 +0000
ROA not before: Mon 18 Nov 2024 11:49:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199695
IP address blocks: 2a12:bec4:1620::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3f:1a:ef:cf:80:6b:96:8a:9a:b5:f6:a7:e3:0f:40:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Nov 18 11:49:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70d754f2a6713adcd714c0682d807e6e9bcc8648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:a1:e7:78:0d:05:03:d2:af:33:44:86:4c:
ae:bf:86:ab:b8:c8:4c:ef:8d:27:eb:04:65:1f:87:
a5:5e:8b:b6:c4:97:67:53:f6:0d:37:9f:7a:61:35:
65:85:fc:31:79:84:1f:af:67:65:d1:54:1b:68:47:
b4:b7:8c:bd:13:4d:6e:6b:43:2b:98:6c:8c:b3:2c:
22:cc:f9:b0:08:d7:5c:1e:db:1c:22:24:6b:c6:c2:
1c:f6:9f:59:e3:9d:3e:ab:c3:d1:ef:a5:a2:0c:c5:
9f:33:02:b3:b3:bd:8f:b7:6f:c2:ec:f5:7f:4b:b8:
cd:1a:eb:1b:cc:06:74:5d:ff:7e:57:34:80:dd:ce:
8d:ab:97:c3:c4:10:ef:e1:d4:7e:5d:6a:39:83:2e:
67:27:3b:95:4b:9e:2c:1a:10:7b:6a:44:a0:72:27:
a9:a1:ee:9e:ca:bf:dd:ae:e4:21:65:5e:7d:0b:5d:
60:de:df:20:ff:e0:42:0d:b9:43:b8:ad:aa:df:d3:
9f:65:17:1d:45:ff:a4:7a:2f:f3:29:e4:4e:55:a6:
c6:f0:f6:26:c5:0c:ec:28:a4:4c:81:05:6e:51:0f:
ac:31:ed:0a:6a:66:a4:37:ea:63:4c:25:12:be:fa:
4e:2d:d5:b2:4a:59:6b:0f:f6:52:75:ad:74:93:ee:
a5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D7:54:F2:A6:71:3A:DC:D7:14:C0:68:2D:80:7E:6E:9B:CC:86:48
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/cNdU8qZxOtzXFMBoLYB-bpvMhkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1620::/48
Signature Algorithm: sha256WithRSAEncryption
58:45:b0:6d:17:56:60:d7:05:10:69:52:e3:bf:c7:1d:01:64:
ba:3c:1b:e1:9e:b8:a8:f3:e9:50:75:38:e4:50:70:65:f5:04:
86:8c:fd:6e:cf:be:d9:4e:7e:b7:d1:7a:41:01:2d:25:2c:6f:
29:e9:e3:c7:3e:cb:77:02:a7:ec:ac:59:ce:b5:5e:89:69:e3:
6a:22:ab:b0:40:e2:9d:22:d6:37:e6:8c:bf:ff:e9:9c:2e:eb:
fc:3d:ce:f8:16:7d:a8:9d:c2:2d:5b:25:33:56:51:b9:03:54:
aa:bb:49:f6:44:68:87:6b:c4:5a:6d:e4:fa:b8:5e:2a:37:6a:
bc:ac:61:c7:eb:a5:80:c7:35:18:cd:fd:9a:0e:be:e1:23:dc:
b1:5d:4b:a3:60:ac:64:a6:f9:e7:34:f0:4f:3f:b9:6c:30:4a:
f5:f5:c1:93:7f:c5:cd:75:9a:6f:e6:a7:9a:5d:c0:3b:42:8f:
28:0f:93:8d:78:2c:71:10:6c:48:75:09:1e:10:8f:f0:62:b5:
59:95:be:17:66:7e:92:ca:04:40:dc:3f:92:31:b1:90:af:04:
33:6e:db:4d:b1:d4:bd:f8:46:c8:2b:a2:eb:51:cc:d2:e7:38:
ed:04:ad:15:70:a9:73:b0:65:9d:70:04:48:9d:9c:77:97:0d:
4b:df:76:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:13:26 2024 by rpki-client on console-ams.rpki-client.org