Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/oHvmv3U6sU1EJdOmWWPlBhHAf_s.roa
File: oHvmv3U6sU1EJdOmWWPlBhHAf_s.roa (raw, json)
Hash identifier: EIqn9E/7SJNtlLtJcLSxS+qB3KvI+YAbWSeNYWX9BYg=
Subject key identifier: A0:7B:E6:BF:75:3A:B1:4D:44:25:D3:A6:59:63:E5:06:11:C0:7F:FB
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC64A0496467BB64CE727BB2477D5A1A1
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/oHvmv3U6sU1EJdOmWWPlBhHAf_s.roa
Signing time: Mon 01 Jan 2024 18:29:48 +0000
ROA not before: Mon 01 Jan 2024 18:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199765
IP address blocks: 2a12:bec0:540::/44 maxlen: 44
2a12:bec0:150::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:04:96:46:7b:b6:4c:e7:27:bb:24:77:d5:a1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a07be6bf753ab14d4425d3a65963e50611c07ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d4:7d:49:59:c4:0d:2c:27:5f:00:63:f0:d3:
13:fd:fb:67:f4:3c:5e:02:cb:38:8f:47:b6:5b:cf:
69:20:ff:1f:ca:1f:b3:ef:78:64:e4:40:9a:0f:76:
49:f3:74:39:da:eb:8f:78:f7:5b:98:ea:f0:75:4a:
30:14:18:39:31:2f:a8:68:0b:9e:fb:25:0e:03:67:
43:d3:c8:b5:8f:0c:0e:4b:40:1b:10:ce:91:74:d5:
90:01:bf:c3:18:78:00:bb:78:c4:a9:67:38:a7:fe:
63:f1:24:3d:d9:92:6f:c1:f1:6e:65:f5:36:7f:5f:
bc:e3:6c:ab:9c:3b:51:df:3a:2d:3c:34:2f:18:76:
9c:c5:14:b1:b5:3d:b6:6b:ea:c2:93:1d:0e:55:fa:
33:48:1f:46:0f:0b:4d:9f:90:39:64:ac:22:95:58:
e7:19:6d:2b:1e:69:24:b7:0f:a8:28:42:13:46:2c:
3c:71:b2:49:be:5d:10:27:69:53:61:fd:0a:db:12:
ce:71:23:d8:e3:9b:f0:ab:a3:5b:35:2e:aa:9e:6e:
4e:21:fc:7e:fa:be:a7:59:72:bd:b1:4e:03:c7:6b:
1c:86:e2:20:22:5a:02:c3:08:65:69:f3:44:8e:7a:
ff:8b:a5:ae:c6:9d:fc:df:79:0e:48:fc:e6:ab:47:
2c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7B:E6:BF:75:3A:B1:4D:44:25:D3:A6:59:63:E5:06:11:C0:7F:FB
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/oHvmv3U6sU1EJdOmWWPlBhHAf_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:150::/44
2a12:bec0:540::/44
Signature Algorithm: sha256WithRSAEncryption
3b:b1:db:83:5c:f7:55:d2:42:2a:f0:df:0a:91:59:b1:43:ea:
e2:06:0b:14:3f:67:19:91:b7:42:7d:5a:5c:05:25:13:b5:91:
13:5f:92:66:ca:0b:5b:78:46:df:cf:13:a4:9a:de:27:72:8e:
13:38:a0:72:b5:88:57:a1:0f:35:8a:0d:02:2e:07:96:51:51:
0c:c1:d7:bc:92:e5:cf:eb:21:89:b9:56:4e:99:46:09:c5:13:
51:f1:0f:e8:32:06:59:ad:66:f7:3f:de:4b:da:3d:7e:a9:dc:
40:99:7d:b4:0b:6a:2d:90:3b:8c:b4:33:8b:3f:83:0d:0a:49:
66:ed:28:27:45:3f:ad:16:af:fa:24:42:6d:9a:3d:4a:85:5c:
d6:e3:e5:f4:b8:17:72:32:48:ef:ad:aa:18:9c:44:01:60:79:
a8:93:a8:f0:eb:f6:dc:61:19:fc:97:eb:7d:17:ce:45:c3:7b:
c2:cd:32:18:06:53:17:37:de:70:70:ab:69:73:99:f2:19:c1:
7b:d5:96:71:51:84:e9:a4:1e:70:ff:33:24:d9:f5:7b:ca:ee:
f0:5e:9b:69:94:67:20:d2:f0:93:ff:11:05:d8:67:f4:28:34:
c7:e7:df:ec:59:56:67:0d:d8:98:3f:56:1a:0a:cf:e4:8a:9c:
79:55:4a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:01:17 2024 by rpki-client on console-ams.rpki-client.org