Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/F6SBUfhTbQs6eh8hbec7-mQvHn8.roa
File: F6SBUfhTbQs6eh8hbec7-mQvHn8.roa (raw, json)
Hash identifier: H9ZPWm3MjvzpDBl5y4YzTUF54Ae1TRqmpLB5IIwPiHA=
Subject key identifier: 17:A4:81:51:F8:53:6D:0B:3A:7A:1F:21:6D:E7:3B:FA:64:2F:1E:7F
Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Certificate serial: 018DCBC5B6F96D8FBF01C77E8DB6F56A430E
Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/F6SBUfhTbQs6eh8hbec7-mQvHn8.roa
Signing time: Wed 21 Feb 2024 13:05:48 +0000
ROA not before: Wed 21 Feb 2024 13:05:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 2a12:1780::/29 maxlen: 29
2a12:8dc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cb:c5:b6:f9:6d:8f:bf:01:c7:7e:8d:b6:f5:6a:43:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Validity
Not Before: Feb 21 13:05:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17a48151f8536d0b3a7a1f216de73bfa642f1e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bd:a4:c4:6e:d9:56:79:93:ef:67:dc:79:ba:
60:4b:db:b0:ac:d9:65:32:41:80:f1:6f:6a:7c:f7:
c5:89:2f:be:b0:94:ec:c5:4b:a4:79:86:4b:de:00:
15:0e:0b:c0:44:e4:ba:1d:39:3d:ea:be:14:e4:78:
a1:49:4b:45:9d:91:ca:fd:2b:60:d8:65:1c:20:b3:
4b:69:f7:23:ac:e1:08:64:6b:26:cc:f2:ee:ea:1d:
e4:70:0c:36:5c:2e:df:a6:44:34:50:f0:9a:76:52:
1c:2d:eb:1e:f9:04:03:98:f3:0b:36:17:61:0f:31:
47:21:5d:ee:dc:8f:d3:f7:f1:35:cf:f0:2c:16:9e:
87:09:54:2c:67:11:46:3e:57:1d:2e:08:c6:83:e2:
3f:22:3f:f6:4e:bc:d0:10:30:de:52:69:94:70:c4:
f9:fa:ff:74:42:30:ef:63:6e:ac:fe:d4:1a:d5:5b:
10:53:8e:c7:9a:17:b8:72:59:b8:ee:0e:c1:88:56:
ee:be:a3:20:5d:18:2c:91:5f:c7:ee:e5:d2:53:27:
87:d1:84:0c:d0:57:64:40:a2:3b:8e:55:41:1a:c8:
33:5c:9f:dc:20:ad:3a:11:f0:e6:eb:97:48:8a:b4:
db:cb:5b:f1:92:2b:3f:b2:28:cc:eb:3a:33:92:94:
6c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A4:81:51:F8:53:6D:0B:3A:7A:1F:21:6D:E7:3B:FA:64:2F:1E:7F
X509v3 Authority Key Identifier:
keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/F6SBUfhTbQs6eh8hbec7-mQvHn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:1780::/29
2a12:8dc0::/29
Signature Algorithm: sha256WithRSAEncryption
a4:5f:63:cc:cf:19:a8:c2:18:d1:c5:d5:7f:2c:c0:8b:45:8f:
a5:26:ad:1f:57:26:cd:b9:b8:17:d7:a9:59:fa:e8:96:68:2c:
04:d6:39:da:3b:4f:bf:61:92:95:ae:bf:64:94:b9:39:fb:88:
36:ec:38:07:05:65:35:21:2c:7a:8d:e2:7e:dd:7f:c2:e0:9c:
4e:59:05:82:79:63:b1:a6:6e:f1:81:05:35:a7:d1:28:9c:7a:
36:57:43:36:2a:5d:e2:7d:83:7f:3e:e4:c9:7f:02:e8:c5:a8:
ca:e5:e7:78:36:8a:a0:ed:be:c5:f6:5a:c6:64:16:dd:cb:52:
52:cf:21:8f:cf:78:05:56:58:2a:7a:12:95:f9:3e:87:1b:88:
1e:c6:ce:08:ae:74:f5:87:33:b5:70:e1:8d:e7:9a:1d:99:94:
5d:1a:6e:63:09:30:ec:17:e9:88:f7:63:a2:4b:6b:89:1a:4a:
38:51:aa:6a:e5:58:54:50:f2:f6:af:06:ac:ab:be:4f:6d:54:
13:74:70:68:8a:b8:d9:f2:72:6e:41:e8:02:80:0c:7f:7e:29:
63:3b:2f:78:e2:a5:4d:16:d5:a5:a1:89:aa:d9:95:cb:07:b3:
11:fb:91:18:5f:78:63:fb:67:a0:f3:6a:49:36:a4:38:81:4a:
4b:81:18:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 04:20:20 2024 by rpki-client on console-ams.rpki-client.org