Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/AaCHpWBx0R_lp9qmPb175MraY2U.roa
File: AaCHpWBx0R_lp9qmPb175MraY2U.roa (raw, json)
Hash identifier: 9j+QyC16JR8+X4Xw/fRu7FAGDrRvNCjnKmyW6Gp7fnk=
Subject key identifier: 01:A0:87:A5:60:71:D1:1F:E5:A7:DA:A6:3D:BD:7B:E4:CA:DA:63:65
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8E95B13B6FE7BEEA581935D8D77EA
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/AaCHpWBx0R_lp9qmPb175MraY2U.roa
Signing time: Mon 01 Jan 2024 20:30:56 +0000
ROA not before: Mon 01 Jan 2024 20:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207618
IP address blocks: 2a0e:7d44:f000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:e9:5b:13:b6:fe:7b:ee:a5:81:93:5d:8d:77:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01a087a56071d11fe5a7daa63dbd7be4cada6365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:71:a4:b7:52:2b:ec:b9:d0:c4:a3:c9:13:09:
81:aa:e3:75:f7:ac:a2:ae:5a:39:c5:58:69:d3:b2:
97:43:28:04:f7:2c:ac:c4:c7:56:6d:0d:76:63:a9:
33:63:4a:ab:0a:9c:a2:7f:9c:46:75:e4:cc:2a:b1:
b1:dd:54:ef:26:b7:11:c1:3b:10:a6:f5:f2:80:39:
b2:e3:ed:7c:1e:fb:25:b2:f9:45:e4:5b:0c:51:15:
8e:73:6d:ab:6f:cd:b3:86:01:3d:18:3d:27:50:43:
19:d7:41:f5:b1:38:b4:c3:a9:e0:39:18:26:f8:43:
60:4e:bd:07:45:3d:93:ca:5c:b4:a8:0e:86:30:ee:
5e:5b:3f:3c:57:41:2a:76:01:e6:1d:9b:5f:61:ba:
2b:a0:84:e9:05:9b:df:9f:e3:87:ce:2a:47:db:71:
e0:4b:06:30:b6:a5:b8:83:78:c3:e3:96:7d:d9:2b:
5a:a8:bd:a6:ca:3b:56:69:10:ce:99:6b:58:23:54:
00:6f:4e:55:9f:8c:7b:0c:21:5d:9a:35:59:48:7d:
ca:dc:2a:68:85:68:26:b4:63:1f:f2:00:62:c8:7d:
ae:0d:17:db:7f:b5:a4:2c:cd:45:5d:12:f3:7b:80:
4f:80:8c:2b:68:e3:b6:d3:0f:c0:8e:dc:4e:d5:12:
7f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A0:87:A5:60:71:D1:1F:E5:A7:DA:A6:3D:BD:7B:E4:CA:DA:63:65
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/AaCHpWBx0R_lp9qmPb175MraY2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7d44:f000::/40
Signature Algorithm: sha256WithRSAEncryption
96:01:f5:2b:53:fd:e6:dd:2e:59:31:cb:63:a0:32:06:b1:e9:
8c:67:7d:b3:db:ba:1c:76:d4:2a:a5:b3:02:e4:ab:63:c0:7c:
30:ba:67:7e:17:db:e5:49:70:f4:8a:a6:c3:33:a6:66:62:89:
23:5b:13:4e:8e:e3:e1:6f:9c:63:14:2e:16:e6:36:0e:cb:25:
06:c9:cd:77:db:be:2a:a1:b7:b6:b7:04:90:93:44:b1:53:04:
be:60:6c:92:9f:54:90:f5:5a:fd:b8:67:af:42:b6:87:da:76:
cf:b2:89:7e:1c:9e:65:3d:dc:3b:5c:24:c2:ff:89:ea:60:a2:
26:a5:31:d5:ea:05:43:9d:d1:74:8f:6b:30:c6:ba:e3:af:ef:
85:ec:3f:5a:3e:ee:b3:98:1f:e1:a7:e9:24:c5:ee:68:66:6a:
b6:da:12:9c:29:cc:bc:dc:53:a0:96:4f:8f:3c:cb:55:9b:d1:
60:cf:62:f4:56:10:0a:18:58:03:a1:7a:8e:ef:57:da:7d:77:
f2:1f:4f:3b:73:f4:d7:f4:16:2a:85:1f:46:4a:b7:53:72:83:
44:01:b2:b6:cb:46:17:8a:9e:bf:02:c1:e6:fd:47:c1:3c:97:
2a:c9:f7:40:5f:ab:e8:2f:a1:85:2c:2b:38:fe:20:c9:29:b5:
d9:aa:12:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:17:24 2024 by rpki-client on console-fra.rpki-client.org