Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/ea9594-0039-465c-9735-3ee3a5a5d79b/1/VTjpPIPAccNx2cfppG6A4vYqqA4.roa
File: VTjpPIPAccNx2cfppG6A4vYqqA4.roa (raw, json)
Hash identifier: T0DGMzC17L9fTV55oFybg9zPvag/0QGysCFJ2aLlI/s=
Subject key identifier: 55:38:E9:3C:83:C0:71:C3:71:D9:C7:E9:A4:6E:80:E2:F6:2A:A8:0E
Certificate issuer: /CN=512ba152c78bbdeabff6f87d088a2957cce42ac4
Certificate serial: 01904A5AF9600CDBB5FFE22F344B19ECE4E8
Authority key identifier: 51:2B:A1:52:C7:8B:BD:EA:BF:F6:F8:7D:08:8A:29:57:CC:E4:2A:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USuhUseLveq_9vh9CIopV8zkKsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/ea9594-0039-465c-9735-3ee3a5a5d79b/1/VTjpPIPAccNx2cfppG6A4vYqqA4.roa
Signing time: Mon 24 Jun 2024 13:06:34 +0000
ROA not before: Mon 24 Jun 2024 13:06:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42375
IP address blocks: 2a12:4140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/ea9594-0039-465c-9735-3ee3a5a5d79b/1/USuhUseLveq_9vh9CIopV8zkKsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/ea9594-0039-465c-9735-3ee3a5a5d79b/1/USuhUseLveq_9vh9CIopV8zkKsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/USuhUseLveq_9vh9CIopV8zkKsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4a:5a:f9:60:0c:db:b5:ff:e2:2f:34:4b:19:ec:e4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=512ba152c78bbdeabff6f87d088a2957cce42ac4
Validity
Not Before: Jun 24 13:06:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5538e93c83c071c371d9c7e9a46e80e2f62aa80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f0:c5:77:fb:07:9a:2c:d2:57:91:1f:4d:9f:
3c:a8:47:72:fd:d8:8e:73:5c:2e:07:81:fd:37:cd:
6b:85:7c:b8:3a:a5:f1:52:62:b3:01:30:e1:d8:c2:
5c:3f:d6:79:0d:a5:c6:df:03:83:aa:37:ab:20:9e:
44:51:f7:b3:17:9a:fc:d4:ec:b1:9b:97:80:f4:8c:
6c:8e:92:1c:28:96:44:5e:b3:78:96:d0:8a:47:71:
c3:c9:6e:18:87:2b:04:bb:95:25:ee:89:40:0a:71:
e5:53:75:c5:39:d9:82:67:f5:87:1e:16:fd:5e:15:
95:39:71:4c:e8:19:66:eb:43:3b:ca:44:b6:96:a5:
6b:a3:5d:e4:f9:10:5d:2d:cf:3e:ab:a3:17:3e:e2:
6d:94:f0:35:aa:cc:b2:ad:bb:da:cf:a6:b5:99:34:
21:00:a9:82:c0:64:e6:5d:ba:a0:b0:44:5f:2f:ca:
e8:4c:c9:46:c4:57:99:d0:f9:c1:b7:a7:7d:76:1c:
5f:42:e0:f2:1e:23:47:b9:8c:4d:c0:09:80:aa:08:
4a:80:ce:ca:8b:84:00:48:61:f2:15:17:fc:6d:b2:
a0:21:73:42:c0:27:6e:4b:de:e6:f6:39:52:0f:13:
4a:41:d1:2e:b0:0e:70:76:61:50:1b:c6:83:5a:f8:
f1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:38:E9:3C:83:C0:71:C3:71:D9:C7:E9:A4:6E:80:E2:F6:2A:A8:0E
X509v3 Authority Key Identifier:
keyid:51:2B:A1:52:C7:8B:BD:EA:BF:F6:F8:7D:08:8A:29:57:CC:E4:2A:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USuhUseLveq_9vh9CIopV8zkKsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ea9594-0039-465c-9735-3ee3a5a5d79b/1/VTjpPIPAccNx2cfppG6A4vYqqA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ea9594-0039-465c-9735-3ee3a5a5d79b/1/USuhUseLveq_9vh9CIopV8zkKsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:4140::/29
Signature Algorithm: sha256WithRSAEncryption
30:3f:31:62:ad:ed:80:d4:5f:1c:15:aa:bc:38:3e:51:24:b5:
c8:bd:64:8f:e4:56:75:02:df:3f:de:ae:7b:ae:05:ed:87:1f:
c5:3e:4e:00:8a:1d:44:05:c8:76:33:65:1b:e1:16:4e:2e:e3:
56:54:66:5c:76:40:ac:74:9b:97:d5:ae:93:ab:f0:1d:12:63:
ad:4e:22:a9:7e:f6:f9:37:8b:92:0a:f1:fc:80:e7:b0:5f:9b:
23:e9:01:23:ad:d5:5c:83:18:8f:f6:ee:e8:bc:cc:97:1d:c9:
0c:ac:c5:21:b0:45:78:50:6f:f5:83:3c:a3:d8:a6:91:c4:8b:
ea:a6:68:a1:e7:c4:16:fd:54:d2:87:67:bc:8e:51:ad:3d:d4:
4f:fb:2f:64:16:95:05:19:e0:a4:71:70:71:6a:e5:9d:5b:11:
f3:13:33:31:8b:1d:01:12:36:33:85:56:e7:bf:8e:41:68:7d:
ff:82:de:1b:ac:81:4a:1c:67:4b:bf:c0:37:39:4a:51:79:04:
1c:88:24:47:69:a3:ae:e5:8c:dd:b2:9b:66:6d:55:6d:fe:20:
1b:36:6d:51:4e:c7:22:77:24:17:a8:94:32:3f:96:1b:08:13:
32:ee:31:27:af:70:42:ef:18:81:32:92:71:8a:47:cd:35:bf:
b8:c8:0f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 10:40:34 2024 by rpki-client on console.sobornost.net