Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/F22VyHKWQtWj8Omm7k6QT70efY0.roa
File: F22VyHKWQtWj8Omm7k6QT70efY0.roa (raw, json)
Hash identifier: WZ2EeXxzc///epVc9WJ5HjdEqYcNvq4MbErJxV4rl+M=
Subject key identifier: 17:6D:95:C8:72:96:42:D5:A3:F0:E9:A6:EE:4E:90:4F:BD:1E:7D:8D
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8D6A4ED6F264F3BD95B12FF6D21B3
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/F22VyHKWQtWj8Omm7k6QT70efY0.roa
Signing time: Mon 01 Jan 2024 20:30:51 +0000
ROA not before: Mon 01 Jan 2024 20:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49134
IP address blocks: 2a0c:9a40:8201::/48 maxlen: 48
2a0c:9a40:8200::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:d6:a4:ed:6f:26:4f:3b:d9:5b:12:ff:6d:21:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=176d95c8729642d5a3f0e9a6ee4e904fbd1e7d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:40:70:c0:f3:f1:90:a8:b2:88:ae:3d:41:1d:
8e:23:fe:e9:fc:46:71:b5:7c:0e:f0:67:76:82:04:
8b:63:9e:26:4b:f6:9d:4f:e2:d2:4a:85:d9:4f:f1:
12:fb:e6:64:71:46:48:c6:ab:cf:41:62:f9:d8:b6:
42:00:6b:3d:ff:23:b7:d9:99:c0:c2:8c:54:14:a2:
77:f5:53:89:7d:d2:4c:0a:da:ac:4d:69:32:9f:d6:
1c:15:8b:71:72:62:34:ad:a4:f6:96:65:a2:4c:18:
29:70:3c:83:b6:cb:d8:c6:18:a4:ec:ef:b3:06:4d:
8a:9f:49:74:ab:21:05:5d:b6:57:51:c0:96:b6:1d:
2f:62:3a:df:05:9c:5a:e5:d5:c0:5a:2a:e0:7c:6d:
3e:08:07:50:02:72:b7:32:12:f5:f7:99:32:5b:5f:
54:0c:e2:8d:b2:98:7c:d2:5c:27:1d:1a:be:ce:99:
1d:f3:0c:c1:4e:2a:45:54:20:82:35:79:55:ec:ce:
b0:d2:2d:90:ae:e1:b4:da:bf:a9:c8:72:2c:69:e7:
cb:d2:05:d3:19:09:49:57:59:61:36:13:07:b2:4b:
e2:91:74:61:95:6f:1e:41:78:19:16:df:62:14:f7:
2a:14:84:b6:0f:5a:8f:c3:58:48:59:10:97:8c:fb:
90:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6D:95:C8:72:96:42:D5:A3:F0:E9:A6:EE:4E:90:4F:BD:1E:7D:8D
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/F22VyHKWQtWj8Omm7k6QT70efY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8200::/47
Signature Algorithm: sha256WithRSAEncryption
8b:96:cc:df:f4:b5:1f:fc:a9:27:55:28:5b:f8:16:c4:41:65:
af:c0:c4:6d:b3:f2:20:06:57:60:da:c1:42:d7:c5:7a:99:db:
77:d9:45:b7:10:99:84:16:28:3e:a5:94:26:ba:5a:b1:7a:84:
01:d3:38:e4:33:e2:6c:b7:4f:c9:18:0c:a0:ad:9b:5f:e3:c4:
8a:17:6a:4c:4f:32:67:47:80:57:a3:9f:98:da:ec:36:2e:b0:
91:ee:e3:75:97:21:49:bd:28:1f:ce:d9:e3:6e:46:35:93:1e:
f4:4c:a6:12:ce:3d:8e:82:78:4f:19:bc:65:99:66:ed:0f:3d:
19:90:72:c3:e5:e9:ce:bd:31:24:32:ba:90:ed:17:4d:65:a2:
51:4a:b0:aa:44:85:f2:fa:91:d4:d2:63:9b:c3:0a:19:9d:e7:
bc:3c:40:bb:b7:b9:59:88:fb:6d:a5:bb:f3:75:91:f1:22:db:
f1:82:5a:5c:05:fa:4c:47:af:0c:be:50:54:e0:44:79:36:22:
7b:8b:33:0d:ee:fb:16:44:d5:a2:86:11:c8:3b:4e:df:a5:b6:
0e:80:dd:74:f4:75:de:5d:bf:4b:1c:03:96:e8:ec:d6:a9:14:
81:39:46:25:c7:de:fd:5a:8c:ab:45:18:0b:1c:12:bb:e8:3c:
0c:43:48:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:41:16 2024 by rpki-client on console-fra.rpki-client.org