Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/vfe_De7Y1SqF0FOI4CbDLVsDgrg.roa
File: vfe_De7Y1SqF0FOI4CbDLVsDgrg.roa (raw, json)
Hash identifier: hwSKQSQcbaHqxR6ElBW4tqoIe9E386LSwuE8iEmoF7Q=
Subject key identifier: BD:F7:BF:0D:EE:D8:D5:2A:85:D0:53:88:E0:26:C3:2D:5B:03:82:B8
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8F7EB492BF3F278861B43B9A6F11F
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/vfe_De7Y1SqF0FOI4CbDLVsDgrg.roa
Signing time: Mon 01 Jan 2024 20:31:00 +0000
ROA not before: Mon 01 Jan 2024 20:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216340
IP address blocks: 2a0c:9a40:8300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:f7:eb:49:2b:f3:f2:78:86:1b:43:b9:a6:f1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdf7bf0deed8d52a85d05388e026c32d5b0382b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bb:88:22:28:94:d8:7b:b6:42:5d:c8:79:c1:
bd:09:61:20:8f:c7:1e:53:8a:82:ec:fe:30:84:87:
ea:64:df:59:12:84:9f:f9:9d:f9:0e:f4:23:24:48:
e9:5c:7f:ac:26:8d:74:8c:55:e4:3c:58:e1:96:13:
f5:d3:a7:b4:85:af:8e:3f:a6:bc:82:11:b7:73:5d:
d8:9e:11:0e:81:6d:c9:21:ee:7e:98:0d:39:3a:13:
82:c1:f5:aa:cb:fa:c9:89:2c:53:24:f9:06:f7:3b:
ec:dc:f5:31:02:0f:b0:e6:4d:c8:a9:0b:ec:6a:fa:
7e:48:b2:0a:ea:03:3a:d8:b9:2e:3b:db:a0:99:a6:
0e:3a:81:77:88:10:09:0c:51:1b:6c:48:d2:fb:bb:
cb:3c:6a:18:7c:63:29:9f:9b:c8:48:2a:29:71:a4:
8e:bf:14:ff:e8:bd:82:51:fe:f1:53:5a:2c:2e:a9:
fb:75:25:ba:5c:76:e6:9c:e2:e5:75:11:09:a0:19:
47:31:25:36:b9:2a:92:a0:00:33:b3:77:e8:be:81:
41:3d:b1:7a:b5:c5:a0:73:69:4f:4c:41:4f:fb:c6:
17:b5:a0:40:10:be:e2:b0:1f:59:6c:0f:16:6a:1c:
7a:c8:22:50:f1:bf:ad:ce:89:a4:f8:6d:d8:59:77:
71:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F7:BF:0D:EE:D8:D5:2A:85:D0:53:88:E0:26:C3:2D:5B:03:82:B8
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/vfe_De7Y1SqF0FOI4CbDLVsDgrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8300::/48
Signature Algorithm: sha256WithRSAEncryption
78:9d:39:a0:f9:44:04:0f:57:a6:23:31:89:13:78:e5:51:92:
b4:2f:09:54:68:1e:39:cc:24:41:d2:d9:c3:a5:5a:a2:03:d3:
39:4b:03:12:52:c2:16:79:45:20:20:58:bd:30:21:7c:0e:fa:
61:02:93:c9:cf:c0:f0:08:99:cf:c5:d1:e6:6c:cb:91:4a:61:
76:3d:03:50:8a:51:29:4f:30:59:ee:57:95:08:9a:e4:39:34:
b8:21:97:0f:f9:81:09:5a:04:dc:8e:d1:8e:02:25:bf:8a:d5:
83:1e:4c:30:13:2c:7c:0b:05:b2:94:c9:33:73:55:3b:86:98:
ed:dc:ed:d1:d5:bb:66:b6:9a:58:e3:34:e2:07:07:7f:da:16:
ff:1f:ac:9a:ae:fb:9d:08:48:bf:50:6c:10:70:a2:f3:71:ff:
ed:74:18:2b:f7:ef:9f:63:ba:df:b1:47:7a:3c:b6:82:56:7b:
57:96:c6:ed:b8:3b:56:73:f9:e7:d4:d3:7a:51:4e:ee:cc:89:
e2:ba:61:8c:90:8a:3f:79:0f:39:72:18:c4:5f:ec:43:f8:ec:
85:f8:4d:e4:b9:d0:e9:a4:19:4b:fe:5e:73:62:db:fa:2e:ce:
5f:a6:cd:8a:79:6e:58:4b:22:9c:07:a7:9d:2b:4f:98:27:07:
c9:87:92:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:07:51 2024 by rpki-client on console-fra.rpki-client.org