Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/7d-ItvSvZ-ScjPJW4sJXScv-xpY.roa
File: 7d-ItvSvZ-ScjPJW4sJXScv-xpY.roa (raw, json)
Hash identifier: yKdvftVOzKaji02dQ6gyEx9kV/lyaqrrxwevrRYcc4E=
Subject key identifier: ED:DF:88:B6:F4:AF:67:E4:9C:8C:F2:56:E2:C2:57:49:CB:FE:C6:96
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8E28B18CA3A8D1A260E7DB62A8F07
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/7d-ItvSvZ-ScjPJW4sJXScv-xpY.roa
Signing time: Mon 01 Jan 2024 20:30:54 +0000
ROA not before: Mon 01 Jan 2024 20:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200708
IP address blocks: 2a0c:9a40:83f0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 14:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:e2:8b:18:ca:3a:8d:1a:26:0e:7d:b6:2a:8f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eddf88b6f4af67e49c8cf256e2c25749cbfec696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ea:cd:97:2c:91:2c:4c:7e:5b:a4:51:53:0d:
84:d7:fb:da:7d:f3:e6:1f:c5:13:2f:10:50:2d:53:
9a:52:12:da:ab:42:34:c7:64:91:d6:1c:dd:52:ed:
56:66:4c:db:eb:1e:6a:9c:fd:bb:f0:a8:0e:e3:1d:
50:6c:6c:03:9f:db:73:f8:d1:09:fd:73:d5:14:44:
14:ee:82:5f:d3:1b:f6:96:c1:92:d2:29:3c:2b:6f:
2e:e6:d2:f6:78:42:46:78:36:72:b4:d2:ec:c4:c4:
fb:13:d5:b1:cf:0c:fe:af:15:f5:3d:42:10:54:85:
3d:8e:44:fb:33:a8:b6:6e:55:6a:56:ac:a0:92:78:
20:d8:c5:3e:70:ff:ff:9e:5b:3f:87:05:a5:85:9c:
9e:53:8f:cb:44:78:be:d3:97:c7:cb:37:85:4d:c9:
c4:f3:a3:84:9f:1c:67:7a:af:af:7a:8e:43:6d:2e:
c6:81:36:4c:b9:93:37:6b:fd:41:bd:e0:db:78:c6:
c0:d4:ed:c3:4a:c6:bf:fd:de:28:83:65:dc:8d:f7:
bb:4c:bd:87:c8:66:64:f1:c3:a9:ef:eb:f4:7b:25:
fe:76:f6:0c:c5:52:e4:3c:14:89:ee:83:c4:38:e5:
a6:2e:d1:14:ea:bf:c3:97:1c:e5:4c:9c:2a:78:13:
ae:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DF:88:B6:F4:AF:67:E4:9C:8C:F2:56:E2:C2:57:49:CB:FE:C6:96
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/7d-ItvSvZ-ScjPJW4sJXScv-xpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:83f0::/48
Signature Algorithm: sha256WithRSAEncryption
58:39:d5:d0:a8:98:d1:42:b7:6d:89:00:58:b0:d9:6e:dc:d9:
76:e9:81:6b:ed:80:f5:75:7d:78:83:32:36:af:d2:ab:16:79:
76:3d:23:bb:ec:cd:99:7a:11:9b:71:a2:18:b7:55:54:1d:76:
4e:eb:1e:64:9a:d3:34:f2:5b:fb:03:92:84:01:f4:60:43:4a:
75:3b:18:f6:54:94:6c:ca:c1:8d:ff:6d:55:5c:a8:9a:bf:34:
fd:68:b1:6f:ef:19:7a:4f:04:c3:b7:4e:9c:72:35:53:48:dd:
3f:39:27:83:ff:56:e6:fb:ae:67:bc:cb:ca:e0:13:9a:57:5f:
5d:c2:ce:9d:a3:69:89:51:37:73:ed:5e:7d:a1:cb:8a:55:fa:
60:aa:a9:a8:df:88:dd:c6:28:68:6d:fb:61:33:1e:07:81:8c:
56:f1:cf:c8:59:45:d2:52:9a:df:13:30:e1:70:1f:43:a7:25:
73:96:32:8f:70:e7:db:67:f0:9c:2c:a7:93:41:f5:34:c8:ae:
c8:c1:b9:6d:65:c9:c3:e2:ad:1b:96:aa:06:c2:5b:3c:78:fa:
42:2c:63:ef:08:47:d1:38:b6:f0:93:90:a4:c7:e6:a6:f7:69:
ba:c5:5e:11:62:55:bd:fc:48:50:b9:0d:c6:2c:35:96:45:6f:
58:3a:74:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 21:48:14 2024 by rpki-client on console-fra.rpki-client.org