Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a793cd-4952-4c4c-ab3f-1640e661c8d3/1/P2sHDsZKQzZHqUIQgZJB7m2qGFI.roa
File: P2sHDsZKQzZHqUIQgZJB7m2qGFI.roa (raw, json)
Hash identifier: n7LWUggYc1ThxGrvKw/4s2DfFn/FOBkEL2Zf9WAnERg=
Subject key identifier: 3F:6B:07:0E:C6:4A:43:36:47:A9:42:10:81:92:41:EE:6D:AA:18:52
Certificate issuer: /CN=35df1cdb6d457f1adb33ebbde019ea5b21dfb42c
Certificate serial: 01909E9AF76433056E80569E912123B516BB
Authority key identifier: 35:DF:1C:DB:6D:45:7F:1A:DB:33:EB:BD:E0:19:EA:5B:21:DF:B4:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nd8c221FfxrbM-u94BnqWyHftCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a793cd-4952-4c4c-ab3f-1640e661c8d3/1/P2sHDsZKQzZHqUIQgZJB7m2qGFI.roa
Signing time: Wed 10 Jul 2024 21:44:34 +0000
ROA not before: Wed 10 Jul 2024 21:44:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30788
IP address blocks: 2a12:5640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a793cd-4952-4c4c-ab3f-1640e661c8d3/1/Nd8c221FfxrbM-u94BnqWyHftCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a793cd-4952-4c4c-ab3f-1640e661c8d3/1/Nd8c221FfxrbM-u94BnqWyHftCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nd8c221FfxrbM-u94BnqWyHftCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9e:9a:f7:64:33:05:6e:80:56:9e:91:21:23:b5:16:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35df1cdb6d457f1adb33ebbde019ea5b21dfb42c
Validity
Not Before: Jul 10 21:44:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f6b070ec64a433647a94210819241ee6daa1852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a2:5f:5e:f0:ec:c0:7e:ce:7a:40:43:fd:47:
b2:54:77:94:16:1d:e8:49:7c:27:bb:ea:aa:8d:09:
c7:e0:3c:83:09:9e:d5:c3:bf:f1:e9:e1:8b:bb:1d:
ff:dd:e5:26:83:6e:9d:bc:61:86:fe:b5:30:ac:30:
a7:57:5e:de:56:91:d6:7e:e8:e9:49:46:ab:24:41:
4c:c8:6c:fe:fd:ef:36:23:4a:05:49:6a:60:ac:96:
ad:2f:56:b8:9a:35:96:28:ec:86:71:20:71:5a:94:
7c:5e:7c:b4:6f:82:93:8c:72:88:5e:68:78:1f:b3:
c3:0f:c5:78:70:4a:d6:34:cb:e0:a0:d7:8a:c2:d8:
d1:ea:c6:05:c8:75:19:e1:88:43:ff:05:34:af:c1:
3d:bd:98:d6:3d:07:c2:75:76:b6:24:49:cb:d3:24:
48:b7:c1:92:a8:98:8a:ab:8a:f6:ea:ab:32:ca:c3:
f5:bd:5e:7a:ca:21:0b:f5:c6:3f:15:14:f2:53:50:
4f:35:04:85:78:2b:75:98:f3:c4:fc:a4:28:17:b7:
57:0e:89:74:b2:60:c4:84:04:5f:5c:19:02:9c:f0:
b0:ee:ef:80:42:25:68:f3:73:8d:63:cc:08:09:16:
d7:c4:f0:21:ed:14:d2:9b:ca:f8:21:24:12:b8:e3:
91:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6B:07:0E:C6:4A:43:36:47:A9:42:10:81:92:41:EE:6D:AA:18:52
X509v3 Authority Key Identifier:
keyid:35:DF:1C:DB:6D:45:7F:1A:DB:33:EB:BD:E0:19:EA:5B:21:DF:B4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nd8c221FfxrbM-u94BnqWyHftCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a793cd-4952-4c4c-ab3f-1640e661c8d3/1/P2sHDsZKQzZHqUIQgZJB7m2qGFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a793cd-4952-4c4c-ab3f-1640e661c8d3/1/Nd8c221FfxrbM-u94BnqWyHftCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5640::/29
Signature Algorithm: sha256WithRSAEncryption
c7:ba:ec:09:94:cb:6f:c5:48:bd:b3:2d:57:b4:85:9f:d5:1f:
d4:cf:72:6a:5f:bd:1d:53:40:00:10:9a:5a:1f:b2:c8:91:a8:
86:4d:27:ae:92:29:87:6b:2e:b9:54:79:c5:ea:02:c9:3a:ba:
e2:2b:43:87:3b:99:38:4c:84:9b:e7:7d:c8:74:77:b8:8e:4e:
a8:09:39:17:3a:9b:0d:e9:c8:ce:4a:9d:d7:ac:1c:b6:ee:5a:
92:4f:03:23:6f:21:1b:07:1a:7b:fc:b6:48:55:3e:a2:cb:1d:
13:04:7d:85:cc:f9:0f:03:6c:60:30:42:41:65:a8:ab:46:6d:
66:0d:d2:aa:54:0e:19:e1:1f:95:65:69:64:c3:3c:01:5f:38:
71:63:b9:eb:c3:73:b3:2d:38:b2:df:5a:37:c7:8a:f5:31:d8:
4a:96:4a:e4:4e:d0:7d:87:23:8b:f5:a4:2c:4a:ba:f8:9d:6c:
2f:6d:8f:8e:f7:3c:d3:dc:90:25:79:3d:ff:4e:a7:28:da:da:
1d:c6:6e:22:5d:36:3a:79:a9:a0:87:6a:2a:63:02:52:a5:0c:
18:69:b7:61:4c:05:08:58:47:0a:78:56:62:5e:f8:67:85:ea:
4b:8a:c6:e7:41:02:7b:38:1e:e8:06:70:98:cd:c5:9b:37:90:
45:d4:ff:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:31:20 2024 by rpki-client on console-ams.rpki-client.org