Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Dun8NJiIzEbXnp3LARMRGn9ujuc.roa
File: Dun8NJiIzEbXnp3LARMRGn9ujuc.roa (raw, json)
Hash identifier: Ev1K+v1CrNjzWr1qEzUtmaxqZ/Fv6xHz2ofjksdHMew=
Subject key identifier: 0E:E9:FC:34:98:88:CC:46:D7:9E:9D:CB:01:13:11:1A:7F:6E:8E:E7
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8DE230967F8AE1F7FBED4DF8FA3F3
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Dun8NJiIzEbXnp3LARMRGn9ujuc.roa
Signing time: Mon 01 Jan 2024 20:30:53 +0000
ROA not before: Mon 01 Jan 2024 20:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198005
IP address blocks: 2a0c:9a40:83d0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:de:23:09:67:f8:ae:1f:7f:be:d4:df:8f:a3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ee9fc349888cc46d79e9dcb0113111a7f6e8ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:93:5c:bc:53:a7:1b:09:9e:e4:57:95:c4:12:
81:7b:c4:9d:44:a2:9a:3c:a1:98:85:59:14:21:af:
60:5a:39:92:28:c3:ac:3e:be:48:45:1d:77:f8:5d:
07:71:00:8a:58:9a:ad:0f:ed:2a:29:e8:3c:37:d8:
f8:70:bb:e3:e5:05:30:a8:8c:af:5a:89:ce:06:d1:
28:68:78:9d:3f:60:16:ff:8a:b6:30:9f:fe:f8:6c:
3d:a0:9b:de:d2:fb:4b:45:3d:d6:4c:86:01:67:ee:
7d:39:3e:b9:45:02:0b:7a:28:1a:41:56:f1:e6:af:
43:0e:77:ce:f8:3c:0f:e1:b0:40:e8:09:61:5b:ac:
79:ce:c1:e8:c8:0d:28:36:7d:1f:0e:c8:66:87:6d:
91:93:48:ee:53:a6:43:20:d2:0a:e1:69:d3:31:89:
da:b2:9a:c2:fe:72:27:6a:f8:62:0f:db:7a:4b:ba:
d0:ea:99:e1:3b:44:94:30:59:73:69:cf:3a:33:ee:
fe:a6:63:ad:61:cf:9b:99:73:b8:57:cf:34:75:35:
32:6c:ff:49:c9:75:4b:ad:34:9b:7b:29:18:2a:33:
7e:13:cc:bf:96:0d:3f:ce:8b:1a:5a:43:9f:84:ab:
70:1a:aa:d4:94:ba:43:aa:4d:23:11:ba:7e:ab:44:
98:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E9:FC:34:98:88:CC:46:D7:9E:9D:CB:01:13:11:1A:7F:6E:8E:E7
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Dun8NJiIzEbXnp3LARMRGn9ujuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:83d0::/48
Signature Algorithm: sha256WithRSAEncryption
38:eb:e8:54:8e:f5:99:b2:cc:45:13:17:eb:9e:23:fc:18:9d:
6c:ee:7e:99:a7:c6:16:35:b8:a4:a9:da:c6:98:15:bf:5d:61:
1b:96:13:a2:ae:4a:ae:71:0b:6a:31:40:a4:a0:0c:29:22:1e:
25:fd:95:9b:f0:3d:77:b5:66:01:2f:1a:88:56:c4:c8:22:4c:
4c:1b:1e:f1:31:20:5a:0b:58:86:91:74:86:2d:e1:f7:52:1b:
d0:79:75:09:a5:19:4d:73:4d:ea:04:c5:6f:a9:3b:8e:bc:35:
c1:55:c1:76:b1:1e:72:b4:aa:4d:9a:8e:74:1d:9d:a4:31:04:
b9:51:ac:17:97:59:1f:cf:32:25:84:9b:16:a7:b1:25:b8:cc:
46:16:df:a7:5e:fc:6d:90:f2:09:84:98:7b:e8:98:1c:fe:ba:
3e:d2:bb:fd:09:a9:99:6f:06:38:0d:9e:5b:1c:6d:86:c4:5b:
53:2d:c7:98:ef:be:7f:35:b4:6f:e2:f8:48:4e:0a:f4:3b:cf:
b4:8f:05:a1:92:b0:27:60:b2:cc:45:83:38:75:de:d4:08:55:
14:2a:7e:d2:88:4c:13:cb:a9:b3:a9:85:f5:2a:f2:1c:ab:5b:
95:22:59:89:c8:33:77:4d:09:e7:1e:50:d8:0f:01:81:6b:8d:
7d:5b:62:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:46:03 2024 by rpki-client on console-fra.rpki-client.org