Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ALrr2On_pajk4QzS6BSgWf0a-pA.roa
File: ALrr2On_pajk4QzS6BSgWf0a-pA.roa (raw, json)
Hash identifier: 4RJNammXDksYSfwlH63ANvSKtwftS1+iSPXywaNW610=
Subject key identifier: 00:BA:EB:D8:E9:FF:A5:A8:E4:E1:0C:D2:E8:14:A0:59:FD:1A:FA:90
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01900B7CEC436EEBA5C0FD46ABB66E71F897
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ALrr2On_pajk4QzS6BSgWf0a-pA.roa
Signing time: Wed 12 Jun 2024 08:07:34 +0000
ROA not before: Wed 12 Jun 2024 08:07:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214726
IP address blocks: 2a0c:9a40:8470::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0b:7c:ec:43:6e:eb:a5:c0:fd:46:ab:b6:6e:71:f8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jun 12 08:07:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00baebd8e9ffa5a8e4e10cd2e814a059fd1afa90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:74:38:7c:b7:ed:85:da:72:37:c1:a7:9e:d6:
a8:22:8e:f6:a0:e6:00:a4:28:f7:6d:9b:33:e1:43:
4c:36:73:3e:08:e5:df:f0:a3:3d:8f:37:29:8d:49:
bc:d4:ff:eb:33:a3:0f:e0:72:18:4b:7b:08:d8:8a:
f4:2f:87:be:8f:aa:9b:58:0a:c9:54:ca:c8:75:82:
de:92:7e:69:8c:19:d1:30:89:d9:bc:4d:62:66:ca:
7b:84:af:1a:c2:de:04:46:1e:fb:72:68:5d:26:14:
0b:ea:ad:53:cf:8e:a1:b5:3b:01:72:84:a8:e1:e4:
c0:a2:39:9f:f1:95:28:35:45:f0:38:0b:f4:be:f5:
ad:59:ad:6b:15:0d:e8:3d:ab:b9:3f:d1:c7:af:0b:
67:94:d9:13:96:77:33:90:61:ed:fe:ce:5a:83:59:
f2:02:c1:80:be:9b:73:de:5e:e9:e3:fd:04:92:3a:
85:b9:a6:a7:f2:0d:4d:15:27:d6:4c:68:a3:64:26:
b3:4f:89:86:e3:ee:f0:83:9d:4b:78:58:6b:b7:26:
93:3d:53:70:d2:14:3f:e5:48:22:56:ab:8c:45:57:
32:c3:b8:7b:9c:ef:06:7d:06:aa:23:44:d7:86:fa:
f7:ea:2d:f4:63:3a:46:37:de:e5:04:43:5a:52:65:
17:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BA:EB:D8:E9:FF:A5:A8:E4:E1:0C:D2:E8:14:A0:59:FD:1A:FA:90
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ALrr2On_pajk4QzS6BSgWf0a-pA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8470::/48
Signature Algorithm: sha256WithRSAEncryption
4f:20:03:1f:90:d0:63:36:fa:5b:6c:83:da:ef:c7:27:55:0b:
50:83:95:59:0c:e2:a8:77:8b:53:57:5f:a0:9b:93:98:2b:85:
57:63:04:cd:06:c2:d6:cf:7e:c4:e4:f4:c2:c8:ba:06:23:e0:
3f:96:e7:42:f0:61:11:94:68:40:fc:6f:a2:19:5d:6a:14:e6:
c1:f9:ab:9e:a9:57:7d:c5:ae:c0:38:2d:39:9e:ae:c7:a2:7c:
44:83:b3:0d:8d:35:10:34:ca:6f:fd:95:62:bd:27:47:b1:5c:
f7:94:7e:94:49:32:b5:cc:0f:f2:69:4c:a7:15:71:d9:3b:94:
7e:10:05:17:8d:dd:63:4c:d8:4f:cf:74:33:6c:19:16:57:ea:
e3:6b:56:cd:e9:44:b5:6b:d7:15:6b:32:42:f1:ec:a4:8d:47:
b1:b8:e2:a3:11:b6:d3:02:4a:b2:6b:c1:8b:7c:7d:ba:3b:23:
85:5a:64:aa:d3:d1:36:18:62:e9:64:cd:0d:79:14:4f:84:4a:
07:fc:57:56:75:44:c4:8f:fc:97:d0:70:19:b6:0b:42:ab:d6:
39:7f:5f:8c:33:8b:10:e2:40:74:18:31:fe:10:1c:63:e3:1a:
f7:29:eb:57:0d:a6:ca:21:5a:49:36:b6:ab:c0:b0:af:41:73:
28:f5:2c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:59:21 2024 by rpki-client on console-ams.rpki-client.org