Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/G3dAEd49H19eqVwMq7kY1NK4YPU.roa
File: G3dAEd49H19eqVwMq7kY1NK4YPU.roa (raw, json)
Hash identifier: K1I1qP7rEF6jgj/n3FqWtJR4FpibXZFIvuzCrczliPg=
Subject key identifier: 1B:77:40:11:DE:3D:1F:5F:5E:A9:5C:0C:AB:B9:18:D4:D2:B8:60:F5
Certificate issuer: /CN=f0e729a54cc76b889c832e0d1395894af7c0e5fe
Certificate serial: 018CE4D0F363CCF7563E03002DC8ECA3ACA2
Authority key identifier: F0:E7:29:A5:4C:C7:6B:88:9C:83:2E:0D:13:95:89:4A:F7:C0:E5:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OcppUzHa4icgy4NE5WJSvfA5f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/G3dAEd49H19eqVwMq7kY1NK4YPU.roa
Signing time: Sun 07 Jan 2024 16:45:48 +0000
ROA not before: Sun 07 Jan 2024 16:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197730
IP address blocks: 2a12:5340:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/8OcppUzHa4icgy4NE5WJSvfA5f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/8OcppUzHa4icgy4NE5WJSvfA5f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OcppUzHa4icgy4NE5WJSvfA5f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e4:d0:f3:63:cc:f7:56:3e:03:00:2d:c8:ec:a3:ac:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e729a54cc76b889c832e0d1395894af7c0e5fe
Validity
Not Before: Jan 7 16:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b774011de3d1f5f5ea95c0cabb918d4d2b860f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e8:2b:bc:02:fe:6d:1e:5b:d7:13:32:f2:52:
93:c2:0a:02:d1:1a:a9:d6:4e:a1:e1:37:d5:3f:52:
d9:ca:95:f7:d1:74:3f:a8:a1:60:15:0a:a5:d4:0c:
d7:c7:c8:77:dd:dd:61:ed:da:ad:68:85:c0:37:57:
c1:9c:2f:c8:18:31:c5:64:12:63:85:7b:66:a4:ee:
37:c0:0e:ae:71:78:91:4a:54:8f:19:7f:39:e9:19:
72:75:50:44:5f:b8:24:57:9b:d0:3c:bc:c0:67:30:
da:12:0b:bd:28:e7:32:cc:cb:c0:40:de:77:06:96:
a8:1d:d8:b1:f5:05:b9:2c:43:7f:1d:fb:cd:38:9d:
5f:e0:f9:f1:3f:6d:44:c4:6e:b3:8f:fd:9a:88:2c:
85:ed:df:b0:79:8a:54:62:17:ae:bc:51:22:4a:16:
f2:99:e8:8c:e1:d5:7d:33:ee:26:e1:54:83:1f:41:
7c:c3:5d:2c:8a:ff:43:df:2b:20:d0:80:fe:a2:ca:
5d:47:81:81:49:a9:b0:2d:2c:36:16:e7:d2:3f:80:
1e:89:19:a8:a0:96:1f:4a:d7:75:44:91:d5:7f:49:
70:62:f3:28:01:3f:be:c1:50:51:cd:d9:ce:3d:0a:
32:36:e0:78:83:bf:98:89:b8:e1:4a:59:88:21:52:
0d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:77:40:11:DE:3D:1F:5F:5E:A9:5C:0C:AB:B9:18:D4:D2:B8:60:F5
X509v3 Authority Key Identifier:
keyid:F0:E7:29:A5:4C:C7:6B:88:9C:83:2E:0D:13:95:89:4A:F7:C0:E5:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OcppUzHa4icgy4NE5WJSvfA5f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/G3dAEd49H19eqVwMq7kY1NK4YPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/8OcppUzHa4icgy4NE5WJSvfA5f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5340:3::/48
Signature Algorithm: sha256WithRSAEncryption
98:8f:ee:95:27:15:da:8a:bc:68:36:c6:87:07:4e:56:49:ba:
6e:bf:99:bf:3a:76:2f:5f:cd:ad:93:54:8b:2b:8b:3e:55:e5:
78:21:f1:08:6d:b9:38:85:c7:39:84:2b:f0:aa:66:a9:e3:2c:
4e:98:b4:4d:95:da:c2:5e:a8:67:a6:58:d3:a8:57:c5:8f:0d:
cc:0b:00:58:b4:8b:4d:39:07:17:de:3d:e9:ce:68:e8:60:02:
d4:4f:e4:3b:a9:b8:59:9b:68:37:fa:07:d6:43:8b:5b:52:56:
42:7a:23:a4:7f:45:8e:f5:40:dd:1e:2e:55:87:71:ce:db:78:
6b:14:a7:a7:c7:8b:0b:30:d3:fe:96:88:bf:ac:00:3d:44:b8:
78:bf:ad:35:6a:75:a0:ac:05:55:b5:80:6f:ae:35:23:3b:7a:
0a:14:d2:fe:43:d2:7d:ef:8a:c7:6d:4e:1a:e2:13:0b:1d:93:
dc:d4:2e:b3:bc:42:a2:d8:6f:7c:4f:25:51:57:a0:33:85:bd:
a4:44:2b:dd:58:89:86:d5:6b:87:8c:f7:10:d2:a7:0f:7c:10:
fa:b1:0b:99:ce:04:c1:ec:09:1c:73:4d:7b:94:f7:c8:da:f3:
f1:9f:65:2c:aa:a1:1b:d1:5d:bc:c3:bd:7b:68:61:97:68:41:
64:39:3e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:40:11 2024 by rpki-client on console-ams.rpki-client.org