Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/RbjzqUun0Idxe9C1koZu03Tc6-I.roa
File: RbjzqUun0Idxe9C1koZu03Tc6-I.roa (raw, json)
Hash identifier: jD3dqRELLe1hx2UZ8eHfmVPvv3UMHIFYFmds08C5kZ0=
Subject key identifier: 45:B8:F3:A9:4B:A7:D0:87:71:7B:D0:B5:92:86:6E:D3:74:DC:EB:E2
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8F61EC772F8542B057E298651A370
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/RbjzqUun0Idxe9C1koZu03Tc6-I.roa
Signing time: Mon 01 Jan 2024 20:30:59 +0000
ROA not before: Mon 01 Jan 2024 20:30:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215826
IP address blocks: 2a0c:9a40:9400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:f6:1e:c7:72:f8:54:2b:05:7e:29:86:51:a3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45b8f3a94ba7d087717bd0b592866ed374dcebe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:ef:a3:e8:47:05:53:c0:a5:51:9f:66:c9:
e5:19:3b:bf:f7:2a:0d:9f:5a:25:1f:26:08:7d:50:
3c:5d:c2:e7:6b:6e:2c:94:d7:56:2a:f8:09:b3:da:
eb:f7:23:e7:c6:02:45:55:43:c1:12:48:69:cd:4a:
fd:a9:f5:91:b3:19:4a:15:ea:3a:67:ca:1d:db:59:
8e:d9:b5:95:00:1f:95:7e:8b:df:88:5b:cc:ba:aa:
2f:36:0d:3e:0f:5f:b3:53:69:8a:e7:fe:72:57:9b:
92:3e:75:f9:7c:47:fd:6e:6f:37:ef:ec:76:5a:cc:
3e:b1:61:62:e6:2b:60:a3:f8:e5:12:4d:ab:1a:7a:
34:6a:99:f1:c1:7f:52:4c:df:ba:a7:cc:37:3f:4e:
f9:2e:9b:0c:e6:39:98:17:2c:f9:0d:07:49:a4:2a:
29:c7:34:5a:9a:54:95:0b:74:e7:44:59:ac:42:ff:
d9:57:9b:cb:7f:ff:fb:52:a2:b4:e5:6f:63:e7:96:
a9:e4:16:52:13:0a:0d:4a:92:93:10:02:ae:0e:ac:
10:95:2d:a9:dc:2c:56:bd:11:bc:0a:e9:93:db:de:
47:96:1e:9c:e2:1c:56:1c:a4:f9:49:81:6d:f1:c5:
9e:98:eb:e6:52:b5:76:36:e3:67:84:34:3c:4a:da:
a3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B8:F3:A9:4B:A7:D0:87:71:7B:D0:B5:92:86:6E:D3:74:DC:EB:E2
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/RbjzqUun0Idxe9C1koZu03Tc6-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:9400::/40
Signature Algorithm: sha256WithRSAEncryption
18:30:5a:e5:89:8e:86:77:26:50:ec:66:03:e7:0d:f0:83:94:
70:b9:e6:83:bc:f4:5b:a1:c7:65:2a:53:22:80:1d:27:f6:f4:
6b:4a:f5:2d:63:2d:6c:07:00:45:a0:32:9a:b6:29:21:80:b8:
24:a5:4c:06:57:f6:1f:83:8a:24:83:38:cd:cc:69:f3:d7:33:
d0:af:2f:1f:0b:5b:42:2c:77:1b:29:9c:60:17:b4:ef:7e:b1:
8b:5a:d3:f7:99:d5:d7:c1:07:fc:54:c8:e6:b6:5e:b9:7f:19:
0c:af:23:a4:15:5f:21:80:4a:1e:bb:5d:cf:a6:6e:e0:d2:92:
d4:ff:2a:aa:b9:39:3f:c0:cb:c3:68:c7:4f:c7:ab:a2:7a:40:
9d:29:18:6c:b5:a5:3d:c5:51:3b:da:d9:3e:82:5c:65:62:88:
bf:2b:94:1c:97:8b:82:29:f8:91:05:b3:a6:a0:11:2f:f0:83:
44:91:2a:28:a6:65:d4:be:06:89:c2:6a:00:a1:13:71:0c:8f:
a7:ab:7a:72:80:c2:2d:7e:51:be:bb:9f:6e:0f:97:03:63:e1:
a6:dd:ad:9d:3a:bf:06:e6:1a:4b:42:18:47:2b:ea:cf:f1:21:
63:4c:f9:29:53:a6:48:80:84:bd:4c:e4:3a:21:02:56:fe:5c:
f8:da:c2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 23:21:36 2024 by rpki-client on console-ams.rpki-client.org