Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/f-9KN0PgdrouK_YWxaWG0joMzKA.roa
File: f-9KN0PgdrouK_YWxaWG0joMzKA.roa (raw, json)
Hash identifier: X6G63K2AKPNXshy/EOfITcBgAftmS1G9Z74B/PP9Zp8=
Subject key identifier: 7F:EF:4A:37:43:E0:76:BA:2E:2B:F6:16:C5:A5:86:D2:3A:0C:CC:A0
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC64A0278139D5C1313EECD7B46BF1BA3
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/f-9KN0PgdrouK_YWxaWG0joMzKA.roa
Signing time: Mon 01 Jan 2024 18:29:48 +0000
ROA not before: Mon 01 Jan 2024 18:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199519
IP address blocks: 2a12:bec0:210::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:02:78:13:9d:5c:13:13:ee:cd:7b:46:bf:1b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fef4a3743e076ba2e2bf616c5a586d23a0ccca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6a:9a:e3:a7:c5:07:76:f6:4b:c2:bb:6e:26:
79:dd:94:62:ef:2e:f9:bc:b5:51:83:96:52:c6:6c:
7f:4e:e3:79:30:33:72:b9:de:4d:f5:cd:54:7b:04:
45:83:de:86:58:01:8e:f1:54:a4:c7:80:53:04:cd:
47:3c:f6:06:ba:5a:09:b8:e0:86:7c:2c:d5:74:1f:
5f:9e:7e:10:af:ae:b4:67:90:70:c5:e6:bb:2b:46:
06:ed:93:33:99:0f:a3:74:33:6c:28:78:d8:af:ff:
eb:80:ab:14:fe:d6:32:c8:19:5a:16:b2:4f:8a:ce:
c8:c9:c8:79:79:bf:9c:bc:33:5b:96:9b:ab:f6:5b:
35:a9:af:52:bd:be:ab:9c:c5:91:39:82:0c:46:21:
2d:64:6e:e8:90:97:58:d5:3e:af:7f:ef:83:e8:c3:
a2:b7:30:fb:a3:3b:44:6d:0f:9f:c8:e2:91:08:08:
dd:9c:be:87:c2:97:92:0f:d8:59:cc:1e:a4:76:e5:
7a:af:90:86:99:6f:f4:39:78:be:28:86:22:a8:0e:
32:d6:0c:0d:0e:aa:93:bb:2c:3e:f9:49:6c:87:52:
c7:23:ee:bf:9e:31:82:fe:2d:50:fb:85:98:e2:0d:
1b:cb:a3:06:0f:5f:d5:a7:80:ac:3b:a8:27:32:2e:
27:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EF:4A:37:43:E0:76:BA:2E:2B:F6:16:C5:A5:86:D2:3A:0C:CC:A0
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/f-9KN0PgdrouK_YWxaWG0joMzKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:210::/44
Signature Algorithm: sha256WithRSAEncryption
32:d1:79:57:4b:15:ed:07:70:5d:c2:7d:3e:92:a2:cb:f3:57:
dd:d3:7a:94:fe:63:e8:2c:d9:55:0c:f6:59:ce:6f:23:8b:0d:
37:78:b6:4d:c4:db:fc:44:35:d5:8a:00:ba:67:97:54:31:95:
ae:0f:58:f1:5c:cd:0b:fb:b8:c6:63:37:15:e9:1d:05:79:9d:
ef:69:bd:bb:a0:ab:4d:3f:fa:6a:84:20:b5:37:5c:01:fc:60:
65:09:cf:f8:64:af:5e:88:c2:0f:86:15:d9:00:99:e6:9e:27:
7c:29:fd:4c:db:f3:5a:82:38:fb:c6:77:3d:47:75:be:cd:50:
73:64:ff:4f:64:a8:61:60:9d:a3:3e:35:5e:4e:b7:32:28:21:
67:ba:c4:e9:52:a8:f3:b5:c6:25:ea:1a:e0:5a:f4:e4:c4:2c:
be:3e:8d:e4:b5:00:e2:54:5a:2d:1f:50:a1:3f:89:7b:50:8d:
d5:d8:47:67:e7:29:49:98:e7:59:fb:18:76:bb:d2:1d:60:ea:
3b:68:36:8b:d3:7f:da:d5:8c:45:bc:a0:42:39:74:e1:4c:3d:
93:84:c1:36:ff:d1:c4:75:ed:4c:2d:01:4b:a0:b4:34:9e:4a:
13:14:72:76:b7:ff:09:98:bb:fe:9c:e9:05:e4:60:c6:93:04:
5f:89:62:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 09:26:51 2024 by rpki-client on console-ams.rpki-client.org