Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/x21Jtp4_WL1yPgj616WVsPKbJXg.roa
File: x21Jtp4_WL1yPgj616WVsPKbJXg.roa (raw, json)
Hash identifier: Rzm6r/Ljf0b/t/XH3ZW3NHP7ov9lvBef5KhKQNNd58g=
Subject key identifier: C7:6D:49:B6:9E:3F:58:BD:72:3E:08:FA:D7:A5:95:B0:F2:9B:25:78
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01930779C6EE3A88CA3324EB5FDF0C211E02
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/x21Jtp4_WL1yPgj616WVsPKbJXg.roa
Signing time: Thu 07 Nov 2024 16:34:01 +0000
ROA not before: Thu 07 Nov 2024 16:34:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213898
IP address blocks: 2a12:bec4:15e0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:07:79:c6:ee:3a:88:ca:33:24:eb:5f:df:0c:21:1e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Nov 7 16:34:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c76d49b69e3f58bd723e08fad7a595b0f29b2578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:28:65:79:ef:eb:0d:3f:3f:1d:c0:58:15:
0c:bc:c4:21:a7:5e:c6:1f:9f:b4:4b:d4:42:d9:fb:
ca:6b:fc:5c:30:4a:5b:e7:64:ea:72:7f:de:27:b3:
ee:73:05:6d:d0:8b:21:52:ff:46:fd:05:d0:96:64:
97:6a:bf:0e:0e:4c:b3:37:55:ae:2e:c0:11:73:58:
cf:02:43:c1:ae:70:de:da:b3:a6:a5:f9:f7:08:b0:
5e:2f:f7:1b:0c:c1:19:ac:9a:41:30:74:68:4b:f8:
ae:7f:42:91:4c:2e:57:b7:18:59:c6:c8:14:2a:34:
b1:57:1f:dc:b2:b3:a1:49:6a:71:f7:bc:96:2d:88:
68:b5:7d:ca:c4:af:27:21:fc:08:5a:71:cc:5f:9c:
33:d4:b2:ed:d2:39:01:08:b0:12:77:8a:20:d0:ee:
aa:82:57:20:c4:ec:22:5d:43:7d:be:08:a9:07:33:
52:3d:5c:01:ae:a5:cf:0d:0a:e1:22:79:e8:de:1b:
c2:31:e3:3a:d3:ce:76:a4:fa:98:00:53:63:ce:f9:
0f:1f:c0:3f:24:c5:e7:2f:0f:a7:3d:91:46:bf:f6:
a5:3e:bf:87:f9:a8:c2:ca:b4:7f:fb:0b:c7:a3:4e:
71:93:31:cf:91:97:ae:e4:e7:dd:27:45:7b:d9:3d:
c7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6D:49:B6:9E:3F:58:BD:72:3E:08:FA:D7:A5:95:B0:F2:9B:25:78
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/x21Jtp4_WL1yPgj616WVsPKbJXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:15e0::/44
Signature Algorithm: sha256WithRSAEncryption
68:1e:95:37:24:2b:2e:a8:7b:7b:fd:36:6e:7f:c4:a9:d9:42:
14:ed:e8:ab:1a:de:9e:f1:d4:b4:b0:7a:55:b1:9b:4d:72:e0:
2a:f8:e7:a5:dd:81:6f:61:30:dd:ef:63:a7:39:1f:08:20:3e:
2d:b6:be:93:55:04:1c:f8:48:7a:bd:b1:19:93:10:51:2a:df:
c8:4d:54:ec:62:78:b5:a6:ae:9e:6f:eb:85:1c:9a:f2:0f:39:
6f:e4:94:2c:64:70:3d:6e:fb:22:d1:55:40:f1:f9:b1:10:b9:
a6:29:0a:c3:fa:d5:8d:dd:77:ae:6e:ec:0c:0d:ad:50:16:ce:
1f:5e:c0:bc:8c:3a:36:47:2c:54:4c:38:d4:07:e2:bc:7c:b0:
40:76:94:e0:3f:b5:c4:26:86:95:13:e4:c5:ad:95:5b:79:3a:
d1:f1:6b:a0:63:b6:79:71:83:c8:03:66:94:7a:93:ff:83:48:
a1:11:fd:a0:2f:2b:b3:96:ac:a5:0f:35:af:f3:f3:84:61:aa:
bd:2e:87:ff:62:ae:0c:9d:0e:38:b8:50:e8:f5:76:c8:38:72:
30:95:18:0a:55:48:3b:6b:90:ea:36:7f:ef:61:9b:27:df:73:
71:66:c6:99:13:2a:5c:8c:8e:78:6f:f2:6a:42:25:1c:27:00:
8b:52:98:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:47:01 2024 by rpki-client on console-fra.rpki-client.org