Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/2F0E7qzMQ0_DVlvLFzv9eFcGdrI.roa
File: 2F0E7qzMQ0_DVlvLFzv9eFcGdrI.roa (raw, json)
Hash identifier: qq8cT2WE6HT4zNq3ilUCMpPeX9mzjbjA7nFwRifCKVY=
Subject key identifier: D8:5D:04:EE:AC:CC:43:4F:C3:56:5B:CB:17:3B:FD:78:57:06:76:B2
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018D8E7827BACA140059BF97986263868DE6
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/2F0E7qzMQ0_DVlvLFzv9eFcGdrI.roa
Signing time: Fri 09 Feb 2024 15:24:15 +0000
ROA not before: Fri 09 Feb 2024 15:24:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215563
IP address blocks: 2a0c:9a40:8500::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8e:78:27:ba:ca:14:00:59:bf:97:98:62:63:86:8d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Feb 9 15:24:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d85d04eeaccc434fc3565bcb173bfd78570676b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:53:17:46:67:22:67:ec:1a:38:48:5f:18:05:
27:0a:c7:c5:a2:d1:2a:a5:f1:00:bc:83:65:18:c1:
c1:63:aa:7f:a3:79:5b:a6:27:28:4e:50:31:1e:86:
c0:a9:7a:51:82:dc:ed:fc:68:b9:4c:19:37:d0:78:
10:c7:f9:f0:24:32:c7:22:df:7d:b9:0e:db:2f:f1:
0b:99:1b:36:12:df:df:06:5a:92:f4:6d:c3:a5:0a:
fc:63:2d:88:5a:e7:e3:12:24:e7:5f:fa:39:c8:30:
56:a9:d9:2a:07:6b:89:4b:11:d1:29:d3:07:40:9c:
46:dd:fd:0a:7e:13:19:0f:da:5e:0c:36:22:55:0a:
6c:a7:26:00:ac:57:26:5a:4d:6f:35:99:16:6d:ad:
13:63:a4:5d:aa:37:fb:b3:69:8d:55:82:83:d7:30:
53:cb:bb:e6:9b:7b:78:50:3f:86:c4:bc:85:1c:d1:
36:00:d3:9c:e7:6e:3a:b9:f3:e1:ad:96:7a:64:be:
68:27:d8:0c:63:ab:e6:19:3c:fc:4e:fe:b7:1e:07:
46:c0:ee:44:bf:e6:f6:94:e0:62:06:0d:58:da:24:
19:aa:9c:69:77:64:8a:f6:e2:bb:f1:0a:40:3c:b5:
c4:4e:d9:56:da:f7:60:56:97:60:31:38:59:f0:67:
f8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5D:04:EE:AC:CC:43:4F:C3:56:5B:CB:17:3B:FD:78:57:06:76:B2
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/2F0E7qzMQ0_DVlvLFzv9eFcGdrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8500::/48
Signature Algorithm: sha256WithRSAEncryption
b2:30:c3:9f:7d:62:48:3a:4a:2e:f4:73:0a:77:19:93:2a:8e:
ad:04:2d:e1:5b:d9:c9:fc:f9:0c:ef:93:59:cc:a3:41:0c:40:
88:52:7b:94:67:5e:47:9a:37:e5:5f:1f:a2:99:3e:87:8a:b5:
6c:e4:dc:91:66:17:37:cf:52:8d:f4:40:42:94:c3:34:cf:16:
82:69:05:4e:50:1e:79:6a:e6:b8:93:5e:e6:2d:fe:66:c7:6c:
30:aa:a8:70:89:69:e4:a2:df:00:b0:5b:9f:19:36:05:d9:dc:
9f:32:37:e3:02:a1:e0:98:a2:59:be:27:a3:b9:1b:36:61:15:
2c:98:a5:fc:b2:bc:d1:ef:54:26:eb:31:42:1e:7a:9a:35:c4:
60:14:81:cc:18:b1:c7:62:33:8a:d4:63:35:f5:90:e9:a7:68:
1d:6e:b5:fa:3f:4d:32:58:c0:43:71:c4:1d:1e:e5:4a:35:20:
53:a1:52:c6:88:10:98:09:24:5f:8b:1c:bc:f0:2d:92:dc:d2:
c7:63:a2:fe:20:fc:20:00:a8:0d:2a:d9:21:fd:b4:17:8f:4f:
9d:1a:09:3b:e8:aa:54:a7:e9:5b:76:8f:ee:7c:aa:b6:c6:b7:
dd:1c:6a:6c:73:be:ce:38:59:e0:83:6f:eb:86:91:8d:7a:1a:
1f:6a:d6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:24:46 2024 by rpki-client on console-ams.rpki-client.org