Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/spH0azAft9cyw9Lu1DHKyY0U9Us.roa
File: spH0azAft9cyw9Lu1DHKyY0U9Us.roa (raw, json)
Hash identifier: Y8HHXJm9vza8R52glpv00YC19x4KZ+rRhmPbZVnrTCE=
Subject key identifier: B2:91:F4:6B:30:1F:B7:D7:32:C3:D2:EE:D4:31:CA:C9:8D:14:F5:4B
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01913BF346B1B8C9B9E0CEE64ECFA889DCF5
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/spH0azAft9cyw9Lu1DHKyY0U9Us.roa
Signing time: Sat 10 Aug 2024 11:01:24 +0000
ROA not before: Sat 10 Aug 2024 11:01:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216402
IP address blocks: 2a12:bec4:14a0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:3b:f3:46:b1:b8:c9:b9:e0:ce:e6:4e:cf:a8:89:dc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Aug 10 11:01:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b291f46b301fb7d732c3d2eed431cac98d14f54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3e:c9:3c:5c:db:e2:e1:86:48:b4:8d:b2:1d:
dd:14:0d:db:42:ce:54:d8:aa:b9:00:7a:4f:43:50:
11:fa:c4:63:27:81:80:69:bb:4d:35:2f:8c:58:18:
6c:c7:7e:46:37:4c:ad:78:82:95:83:c7:e9:86:22:
89:44:fa:26:4f:ea:42:60:c5:7b:2f:a3:00:bf:ad:
7d:6e:0e:af:e2:af:79:11:d5:aa:59:1c:ed:b5:5d:
6f:ea:dd:3c:e9:5b:2c:d8:d0:49:5f:a3:16:bb:7f:
93:6b:a5:84:0c:ea:ab:76:ca:19:97:71:50:b9:e1:
c7:99:0d:88:de:4f:ee:00:a7:24:3c:d7:72:8a:34:
41:04:da:0c:af:d2:5e:c2:62:5c:ab:9d:41:07:c0:
a9:e3:b2:93:c7:ee:aa:5f:3f:e8:3b:77:a2:cf:1a:
39:c9:91:83:ca:d5:a9:fe:a5:3b:f6:98:88:86:90:
0b:1c:04:20:20:bc:5d:fa:c5:74:7b:ae:c9:1a:2e:
74:a7:b4:7e:80:4d:0b:5a:5e:20:3b:0b:67:4b:17:
c6:97:6d:fb:61:dc:c5:79:c9:e5:6c:52:2a:43:30:
e5:b0:6d:84:bf:f2:18:25:ab:35:26:c9:2d:e2:23:
82:c7:24:e1:7d:92:da:53:11:67:71:8a:ea:a8:39:
88:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:91:F4:6B:30:1F:B7:D7:32:C3:D2:EE:D4:31:CA:C9:8D:14:F5:4B
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/spH0azAft9cyw9Lu1DHKyY0U9Us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:14a0::/44
Signature Algorithm: sha256WithRSAEncryption
02:03:c5:2f:21:5b:c5:17:0b:29:2c:de:0b:66:fc:a9:21:ba:
74:34:78:f6:c9:0b:9c:7d:c8:85:aa:a7:ac:20:4f:e0:d9:29:
56:6e:97:e3:d3:36:7b:b1:31:1f:00:41:5b:7e:db:bf:19:1a:
f9:f1:6e:a8:75:4d:8f:21:c6:53:f7:48:a0:96:c6:d8:cb:4b:
97:0c:40:7a:77:42:94:05:f0:b6:65:85:2c:af:42:dc:07:6e:
67:1d:e3:3f:a9:7f:6e:19:b5:3f:2d:74:e0:13:8e:2d:2e:e5:
41:65:7c:b0:9c:e3:92:6b:49:30:96:93:5e:b1:61:5f:28:d0:
02:90:bc:3d:57:15:f5:9a:50:e0:b1:0c:e7:70:38:53:c0:9e:
5d:c7:79:31:73:8b:96:ff:63:fd:db:a9:70:cd:f5:e4:49:96:
41:9f:c2:84:a8:6a:ee:37:9e:6b:ea:e0:91:58:e2:be:02:d2:
f5:bd:fe:1d:e0:83:4a:d4:35:c0:59:6c:21:8c:a6:f2:b6:3d:
69:39:c7:1d:bc:61:36:e9:91:1d:01:26:87:fe:38:31:6b:ab:
2f:5f:ae:af:2a:d5:4e:a5:5a:01:d8:48:a8:d4:c4:a6:ad:ef:
a9:0f:9a:4b:79:43:af:cc:c4:c2:98:b8:a4:cc:f3:bc:a7:96:
e5:90:dc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:52:31 2024 by rpki-client on console-fra.rpki-client.org