Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ubmJ4TK895pViU_tSu4AQtyG2bw.roa
File: ubmJ4TK895pViU_tSu4AQtyG2bw.roa (raw, json)
Hash identifier: mlqRzfA93whiH78+Dkxq+/5NnxOPWJFs6ESP31vlUNw=
Subject key identifier: B9:B9:89:E1:32:BC:F7:9A:55:89:4F:ED:4A:EE:00:42:DC:86:D9:BC
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018FC5CEE9A9E630F951B4374698D91BC9A1
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ubmJ4TK895pViU_tSu4AQtyG2bw.roa
Signing time: Wed 29 May 2024 19:23:42 +0000
ROA not before: Wed 29 May 2024 19:23:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3280
IP address blocks: 2a0c:9a40:8086::/48 maxlen: 48
2a0c:9a40:9086::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c5:ce:e9:a9:e6:30:f9:51:b4:37:46:98:d9:1b:c9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: May 29 19:23:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9b989e132bcf79a55894fed4aee0042dc86d9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:73:8e:8f:fd:d2:59:56:06:02:45:67:3e:b1:
f6:52:02:06:bc:c4:56:f9:1b:ac:f4:ac:c4:49:df:
8c:c4:b4:fb:98:53:79:56:14:e7:6f:73:ec:38:b9:
5f:bf:34:c7:ed:35:98:2a:d6:b4:92:2c:60:c9:3a:
2d:fb:62:0d:dd:42:a9:4f:92:c0:de:01:98:7f:87:
47:7e:9b:43:dd:23:dc:34:8a:65:85:2f:b1:07:6c:
21:3b:60:b3:0c:80:0f:3f:ce:9d:80:28:e2:12:4b:
7f:ad:58:06:5e:ae:31:4e:da:e4:c5:23:b0:7c:8b:
3b:94:4e:24:b9:f7:5e:ac:0f:89:5c:87:cd:87:05:
e9:a2:cb:d0:cb:12:11:ef:88:34:7e:b3:c6:28:89:
fe:9c:a9:95:73:43:db:6f:f7:02:4f:28:21:d2:5a:
28:29:9c:6f:51:8d:a4:76:38:5a:78:a4:e8:99:db:
7b:f5:f9:8f:3c:7d:71:c0:27:90:94:26:a4:bb:a4:
e7:b5:91:6c:bc:60:7b:c5:b9:fd:37:af:74:66:4c:
f7:51:8b:f5:80:e8:69:8a:fc:21:de:70:41:4f:b4:
69:8d:84:ab:42:70:9d:96:30:0d:ef:75:29:33:9d:
33:1a:6e:b0:45:a4:e8:10:27:2a:b5:fa:3d:7f:cd:
7c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B9:89:E1:32:BC:F7:9A:55:89:4F:ED:4A:EE:00:42:DC:86:D9:BC
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ubmJ4TK895pViU_tSu4AQtyG2bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8086::/48
2a0c:9a40:9086::/48
Signature Algorithm: sha256WithRSAEncryption
13:7d:f6:a2:4e:35:f5:19:0d:4a:b0:b3:c4:d0:c3:46:f6:9e:
60:be:a5:d4:a5:c5:43:a1:2d:82:51:c1:99:d9:57:c9:3f:37:
34:3b:07:2e:af:fc:96:e2:b5:c5:88:e7:71:a8:98:d1:0e:71:
b0:a4:8f:05:77:cd:ab:b1:65:6b:0b:36:74:6f:10:9b:7b:7d:
71:20:b4:ba:00:73:71:f3:8b:2d:79:7b:52:b3:11:98:a1:a5:
d0:a2:8e:8a:48:04:a0:a5:28:9c:66:f1:ef:6f:b3:bc:b4:8f:
7c:fd:15:e7:0e:44:9d:67:85:ed:9e:b9:e4:4a:b2:22:d2:66:
5a:94:e7:59:7e:65:50:87:ad:73:44:29:77:aa:aa:5a:ca:e4:
ed:ac:1c:5e:f1:47:0b:3d:74:3d:8d:e4:63:a5:9a:08:6a:a1:
9b:f7:ae:fe:9b:ad:de:e7:22:41:04:77:c5:90:cd:6a:75:dd:
c2:1f:f7:ef:e3:9d:71:8b:f8:4b:ed:2d:d5:ce:aa:eb:97:c4:
57:71:1b:cd:db:aa:1e:93:e8:90:0a:21:7c:3f:85:c4:e0:94:
bb:15:fb:c7:d0:05:19:f2:37:f4:5c:a8:62:d5:ba:3d:e3:b6:
f9:9b:2d:0a:64:90:8c:c4:47:c4:29:18:5d:2b:61:75:3b:9c:
3a:9d:b9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:21:27 2024 by rpki-client on console-ams.rpki-client.org