Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/L9sXF2HXav_I5OgFCiumVXHeWvc.roa
File: L9sXF2HXav_I5OgFCiumVXHeWvc.roa (raw, json)
Hash identifier: W76ZEL1VuxZDvZvNA/iGcL8WNrLs4wLN5CvrY1eSfCQ=
Subject key identifier: 2F:DB:17:17:61:D7:6A:FF:C8:E4:E8:05:0A:2B:A6:55:71:DE:5A:F7
Certificate issuer: /CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Certificate serial: 018CE3D7ED0CB951AFA0ACB6DC9EFC2CD2C3
Authority key identifier: 63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/L9sXF2HXav_I5OgFCiumVXHeWvc.roa
Signing time: Sun 07 Jan 2024 12:13:48 +0000
ROA not before: Sun 07 Jan 2024 12:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43350
IP address blocks: 2a0f:2b86:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e3:d7:ed:0c:b9:51:af:a0:ac:b6:dc:9e:fc:2c:d2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Validity
Not Before: Jan 7 12:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fdb171761d76affc8e4e8050a2ba65571de5af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:85:a3:58:02:60:d1:f3:e3:6e:79:28:2d:6a:
35:45:e0:8f:9c:52:6d:53:78:ce:ff:58:f2:74:c7:
55:54:69:39:ac:40:07:79:0c:48:48:bd:86:06:40:
2d:3a:e3:83:e4:04:cd:1e:2b:f9:76:41:ab:db:39:
91:3c:ce:df:35:9e:57:4e:1e:56:5d:af:02:c7:6b:
dd:70:2a:d5:80:45:2d:4d:d4:ac:32:7d:e9:73:2e:
c7:52:c4:b0:6f:af:4a:bb:05:8e:c5:ae:8e:e7:72:
10:a0:75:1c:80:3a:73:88:ff:36:95:ff:68:e8:d1:
7b:6c:aa:5f:a1:d1:dd:ee:0b:64:35:36:be:e6:97:
40:49:24:94:2c:f8:95:b4:18:63:d3:d8:be:f2:69:
8a:00:05:9a:8a:c7:e6:2e:3f:9f:30:67:4a:9f:17:
77:1b:f3:4f:c4:01:f2:53:fb:da:1e:d3:6d:12:20:
59:ee:48:17:4e:c6:8d:02:b4:c4:97:85:7a:b2:2e:
b1:44:fb:97:13:0f:38:6f:57:60:f4:e4:ee:f8:60:
61:df:ad:bb:e2:cc:0b:bd:b9:fe:15:af:4f:4c:72:
41:2e:7d:2d:09:ec:66:bd:9c:26:94:cc:1b:c2:b7:
be:16:b9:be:10:af:99:c8:71:b6:db:42:17:c1:41:
fe:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DB:17:17:61:D7:6A:FF:C8:E4:E8:05:0A:2B:A6:55:71:DE:5A:F7
X509v3 Authority Key Identifier:
keyid:63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/L9sXF2HXav_I5OgFCiumVXHeWvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:2b86:10::/48
Signature Algorithm: sha256WithRSAEncryption
1f:47:00:1b:03:c1:6f:30:55:d4:3e:d8:e3:0b:59:a0:7c:85:
b4:d1:c3:c5:97:04:ce:9e:63:7f:f6:2e:d8:0e:84:c8:5b:92:
20:c0:c8:a0:e8:27:d9:4e:46:10:40:78:ab:44:c8:14:3c:fe:
a9:75:fa:6a:d3:66:e6:b3:c5:36:6b:73:f7:5a:6b:78:91:07:
76:9f:90:ba:8f:dc:32:71:d3:27:23:1d:56:d9:c7:41:89:d6:
1b:56:2a:a6:7b:0a:4f:a7:a8:0a:7f:00:43:9a:17:b3:33:c8:
74:b2:e3:16:b7:c9:30:56:ff:f8:c2:5a:89:2c:3e:6f:f9:43:
95:e5:97:b8:a2:64:af:8d:10:07:e0:c8:dc:4f:74:e5:76:aa:
e4:70:7a:ee:aa:4d:84:b0:cd:cd:88:00:08:82:41:f7:8f:44:
62:91:7c:b5:21:e7:ef:57:30:15:3e:e3:fc:63:21:22:3e:f3:
54:08:c3:81:2e:77:f4:75:f8:1f:09:5d:7b:cd:46:43:97:d5:
e7:b4:eb:32:22:20:bf:46:39:06:16:b9:74:29:ee:99:a4:b5:
8e:93:f6:61:9b:83:b6:6b:11:2f:1a:39:be:50:9b:72:c9:7e:
e4:0a:44:87:bc:41:45:9a:ab:18:65:79:47:9d:a5:59:10:67:
f5:f4:90:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 12:30:00 2024 by rpki-client on console-ams.rpki-client.org