Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/8ev07ko75fEqRXNtirPSafssy-k.roa
File: 8ev07ko75fEqRXNtirPSafssy-k.roa (raw, json)
Hash identifier: 7o1lQs109FFLrasfwNQX/ZWgg1TLg0ftwHxCBap6b5Y=
Subject key identifier: F1:EB:F4:EE:4A:3B:E5:F1:2A:45:73:6D:8A:B3:D2:69:FB:2C:CB:E9
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8EC8F310BFE671BA73BAAF6AEDDF1
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/8ev07ko75fEqRXNtirPSafssy-k.roa
Signing time: Mon 01 Jan 2024 20:30:57 +0000
ROA not before: Mon 01 Jan 2024 20:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210633
IP address blocks: 2a0c:9a40:8170::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:ec:8f:31:0b:fe:67:1b:a7:3b:aa:f6:ae:dd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1ebf4ee4a3be5f12a45736d8ab3d269fb2ccbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:45:30:b4:10:2c:0a:f6:01:77:ca:db:7f:03:
8b:38:ba:5c:3b:5b:7a:47:41:8b:63:b1:18:31:77:
9c:ff:ff:13:e3:d8:95:a4:6b:ad:92:f4:c8:5a:64:
30:59:9b:d8:58:ef:e6:83:11:26:30:d9:a0:90:8b:
68:19:f5:19:1f:ce:da:84:8b:17:16:84:31:52:bc:
6d:63:13:74:4d:28:1f:ff:38:bd:d5:d9:16:17:d7:
40:3e:15:c4:1b:05:76:13:19:5c:bf:3d:fd:6c:d7:
e9:0b:2e:e6:a4:9b:f8:da:41:9e:ce:34:c7:b2:ca:
72:75:72:39:81:fe:12:c6:ab:58:f3:af:b6:1e:36:
da:2b:59:95:65:cd:9c:6e:fd:15:aa:4e:34:d7:31:
7d:34:60:06:75:90:02:a0:42:2b:cc:d5:44:de:19:
ec:9a:08:e8:46:e7:39:d6:f9:e9:94:59:d7:4d:38:
98:9d:ec:86:79:5b:ea:0f:d1:fd:e9:65:5a:e2:fe:
8f:6b:1b:6f:9c:4f:a1:3d:a3:f5:94:bf:04:eb:76:
3e:69:99:46:b7:8b:77:0a:2a:0e:eb:2d:e0:9e:32:
ec:63:19:7f:88:6d:02:92:97:fe:ae:ae:90:1e:c8:
54:45:ba:6f:81:df:f8:fd:03:2f:47:b1:af:f1:40:
0d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EB:F4:EE:4A:3B:E5:F1:2A:45:73:6D:8A:B3:D2:69:FB:2C:CB:E9
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/8ev07ko75fEqRXNtirPSafssy-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8170::/48
Signature Algorithm: sha256WithRSAEncryption
63:72:d6:93:d9:6f:07:f2:9d:5c:c7:66:34:43:f1:24:13:33:
c3:09:2a:76:db:d8:be:ae:a3:8b:d0:e9:1a:9e:f4:9f:d8:8f:
c8:5b:be:cb:2d:7c:aa:93:80:d6:98:ab:42:f6:2f:8c:b7:6a:
dd:eb:c7:c2:69:82:f8:e3:c0:0d:f8:5a:48:af:ea:d0:db:75:
4d:a4:b3:f7:d5:8d:ce:b2:7f:8b:cc:57:2e:8f:68:3b:52:e3:
ce:ed:f2:bf:27:0c:5e:50:66:18:73:dc:13:42:e0:8e:b6:ff:
72:65:af:f0:ed:2e:c3:1e:d3:e5:ba:e7:7c:58:64:49:f7:00:
d9:14:1f:32:b4:e6:fe:90:1f:11:7f:c0:1e:f3:17:4b:f8:a6:
d2:b0:ce:60:e4:5b:27:fa:b7:3c:01:2b:8c:ef:7d:71:40:27:
37:d2:6c:d4:23:a7:06:b7:6c:9d:54:99:aa:fb:6b:a7:7e:cc:
10:38:cf:5c:85:73:b7:0e:fe:9e:14:5c:48:15:31:81:ae:3f:
e6:a1:2e:8a:db:2c:57:93:95:62:91:f2:35:83:cf:c3:13:df:
32:4e:dc:45:59:44:76:1b:a9:9f:9a:b6:f2:8e:20:f7:60:cb:
2f:97:1f:05:ef:6e:c5:5e:4a:7b:f2:56:9d:9b:b8:70:de:29:
3f:f5:e0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:41:16 2024 by rpki-client on console-fra.rpki-client.org