Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/iSFh8zWtoBDnNwdaMQkbHwk12W0.roa
File: iSFh8zWtoBDnNwdaMQkbHwk12W0.roa (raw, json)
Hash identifier: 35OOZ7sxDWZmEXcViPGqBe/Zz2bG3qaVAI/OPCp/oCI=
Subject key identifier: 89:21:61:F3:35:AD:A0:10:E7:37:07:5A:31:09:1B:1F:09:35:D9:6D
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018F646C66B1A13839C13ABC63CA1116071B
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/iSFh8zWtoBDnNwdaMQkbHwk12W0.roa
Signing time: Fri 10 May 2024 21:32:56 +0000
ROA not before: Fri 10 May 2024 21:32:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205102
IP address blocks: 2a0c:9a40:8420::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:64:6c:66:b1:a1:38:39:c1:3a:bc:63:ca:11:16:07:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: May 10 21:32:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=892161f335ada010e737075a31091b1f0935d96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:b2:d0:09:d9:ba:cd:a6:38:c3:26:95:ed:
4a:f4:2b:30:bb:ac:83:7c:a7:16:c6:5b:89:0d:76:
70:de:74:5f:13:2b:2e:d3:50:a7:11:83:1d:e9:a7:
37:da:92:c6:c7:de:22:57:85:69:0c:bb:9e:93:ca:
05:d5:d9:71:71:8d:fb:fe:3e:06:3d:99:90:0a:36:
a0:4c:8f:ae:0b:4d:c2:10:eb:41:0f:68:45:84:1f:
73:a1:81:44:01:b6:ee:c4:34:8f:26:6b:92:c3:81:
54:5c:28:a4:98:6b:86:08:63:f3:95:08:1f:f7:1c:
90:03:91:05:08:79:23:b9:5b:bd:64:55:04:e0:15:
1b:6b:40:e2:84:b4:d2:13:73:53:87:d5:36:84:53:
bc:49:d6:d6:75:16:81:ed:10:58:74:cc:e9:26:38:
4d:be:75:e7:e1:94:27:78:8f:f9:ca:5d:45:f3:9a:
80:e8:8e:e7:f8:a5:68:2b:15:fb:eb:05:ef:79:cc:
b7:ee:6e:c2:b3:34:34:70:be:02:28:60:42:07:2f:
d9:66:00:f0:3f:65:7a:81:e0:fa:1f:cd:ae:6f:82:
e2:ea:d6:62:c8:8a:e4:16:a8:a5:66:73:3a:28:a3:
40:1e:a2:f8:fb:35:ad:4c:5a:5b:89:90:24:6f:70:
74:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:21:61:F3:35:AD:A0:10:E7:37:07:5A:31:09:1B:1F:09:35:D9:6D
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/iSFh8zWtoBDnNwdaMQkbHwk12W0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8420::/44
Signature Algorithm: sha256WithRSAEncryption
0d:d4:e0:b8:a7:84:fe:35:4f:5f:a2:d2:39:58:9e:60:39:9c:
3f:ef:e6:d5:8b:a5:37:94:35:29:7a:c0:41:01:0f:81:4b:b2:
b4:46:b1:17:5d:96:a6:41:20:53:fb:07:e4:6d:a0:68:a3:98:
67:7e:30:8a:11:ef:55:26:f4:6b:ea:e0:f9:06:a1:1f:f1:e1:
f5:49:10:af:b5:4e:51:2f:3b:b6:6d:8b:67:9b:ad:31:04:44:
cc:3d:bb:09:7d:4e:0b:3d:af:f1:10:1a:e8:0d:7c:54:d6:56:
d6:c9:4c:2c:ff:5c:6c:8f:cf:d7:98:1b:7d:bb:ca:58:27:76:
30:d6:24:b6:57:25:03:e8:f2:6c:80:f6:fd:f9:29:70:e3:62:
f2:72:08:60:9c:64:6d:fe:13:9a:2a:b2:59:23:e8:6c:09:50:
29:5d:87:59:05:71:80:13:7b:e0:76:50:c7:b2:c6:8e:54:14:
f9:b3:96:e9:11:e0:39:38:e8:8b:4c:f3:f7:5e:b5:42:70:cb:
9b:f5:f7:fd:06:2e:f7:4d:69:14:2f:ec:92:39:af:86:45:83:
a8:f0:1e:39:11:c4:3e:c9:10:65:35:ea:b7:11:c4:6d:e5:05:
fb:ee:ca:ed:bf:9f:17:e3:cb:c6:18:d5:b6:8d:30:99:3b:88:
0a:f0:f9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:24:46 2024 by rpki-client on console-ams.rpki-client.org