Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/GoTlTFoCYVS97pCf_4twlVphmXM.roa
File: GoTlTFoCYVS97pCf_4twlVphmXM.roa (raw, json)
Hash identifier: 2Zy8dEW9b49ueiMxmV/C8WGdJ7b3jo7VUx6fA5mBeCM=
Subject key identifier: 1A:84:E5:4C:5A:02:61:54:BD:EE:90:9F:FF:8B:70:95:5A:61:99:73
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018D8E7911D81F40A670630277DAB73E3E7C
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/GoTlTFoCYVS97pCf_4twlVphmXM.roa
Signing time: Fri 09 Feb 2024 15:25:15 +0000
ROA not before: Fri 09 Feb 2024 15:25:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53356
IP address blocks: 2a0c:9a40:808b::/48 maxlen: 48
2a0c:9a40:808c::/48 maxlen: 48
2a0c:9a40:8200::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8e:79:11:d8:1f:40:a6:70:63:02:77:da:b7:3e:3e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Feb 9 15:25:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a84e54c5a026154bdee909fff8b70955a619973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:14:c4:de:c9:41:cd:e9:4f:5f:46:c0:c1:67:
d1:3e:c6:4b:b5:67:3a:35:39:84:dd:bb:57:27:84:
37:54:36:0c:91:be:79:a7:c0:4c:6a:78:0f:99:85:
7e:62:ac:62:02:6e:87:6d:20:f2:e4:6e:52:04:39:
50:78:f9:e7:66:2e:30:a3:84:43:72:21:7a:e0:a7:
49:86:9b:54:1e:b2:29:0d:fe:89:90:1f:52:98:cd:
32:86:a8:9c:96:b1:e8:d3:95:fd:ad:a2:29:03:d4:
f5:87:d0:5b:d1:26:c2:30:75:ce:a3:e9:d4:79:81:
52:0c:30:d0:8b:b4:90:9c:94:20:d2:ed:07:63:44:
a8:06:b7:4e:d0:11:5e:b0:1a:b3:34:37:e6:15:12:
8d:3d:3b:f0:2c:37:bb:7d:4d:6b:5a:a8:56:15:1d:
b3:b6:55:1e:d4:90:3e:14:5e:04:39:84:b2:b7:c5:
9c:d6:c2:2b:04:3f:fd:60:f0:54:38:4d:2d:1f:69:
e6:32:af:74:80:30:6b:b2:2c:23:8a:9b:95:e0:01:
36:fd:c2:40:b3:48:47:fa:50:ed:99:d4:51:96:cc:
6a:fa:78:9e:ab:5d:87:98:3e:4f:02:49:66:b6:ec:
ac:26:9b:d5:c0:46:48:08:96:c1:5d:79:95:86:15:
e8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:84:E5:4C:5A:02:61:54:BD:EE:90:9F:FF:8B:70:95:5A:61:99:73
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/GoTlTFoCYVS97pCf_4twlVphmXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:808b::-2a0c:9a40:808c:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:8200::/47
Signature Algorithm: sha256WithRSAEncryption
17:bc:5f:3d:d8:47:52:cf:51:bb:e7:00:ad:a1:4e:9c:05:e5:
19:da:41:4e:0e:08:dc:4e:71:51:af:d0:e4:dd:ae:c9:d6:9f:
c2:42:de:6b:da:9d:78:9e:11:0e:46:a8:96:37:b2:0e:35:bf:
d1:cd:f6:15:54:80:1e:f3:18:09:65:c5:22:e7:2c:42:48:4f:
44:b7:55:ae:14:b3:ba:55:ce:64:00:54:78:50:b2:3b:f5:10:
13:bf:d9:ac:be:64:3c:e3:29:09:76:48:3d:36:f5:46:b0:e1:
23:43:a3:d8:47:e9:da:c3:67:f3:4e:e5:f1:70:25:b0:73:49:
02:5b:3f:a3:3a:e8:3e:04:81:55:c9:7e:97:58:f0:93:cd:c9:
da:ab:38:6a:77:3c:30:4f:6d:1b:39:2b:99:b6:8e:46:a3:65:
c5:56:7d:eb:8c:76:35:89:e4:0a:16:7c:49:e0:34:16:39:9a:
06:c5:94:12:fd:d3:35:05:b8:e3:7c:36:51:a2:54:d1:aa:dd:
8d:a6:c1:96:e1:1a:59:75:d6:7b:53:70:6c:2b:64:0d:80:11:
fe:6d:11:8b:f3:f1:87:33:86:a0:dd:c7:05:34:95:b0:bb:92:
05:cf:b3:8e:38:f8:f1:80:d6:be:0e:1a:ef:f3:e3:83:03:92:
34:38:18:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:17:09 2024 by rpki-client on console-fra.rpki-client.org