Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/JjWqIufL7AyOLHsBXtQIGNJMpeU.roa
File: JjWqIufL7AyOLHsBXtQIGNJMpeU.roa (raw, json)
Hash identifier: FZ7S7+q7JaMqXC2HGehDqLxx1VeKhAMp4kouck/Op6A=
Subject key identifier: 26:35:AA:22:E7:CB:EC:0C:8E:2C:7B:01:5E:D4:08:18:D2:4C:A5:E5
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018D8E747E9B7BC0AE057ECE134D8B75C616
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/JjWqIufL7AyOLHsBXtQIGNJMpeU.roa
Signing time: Fri 09 Feb 2024 15:20:15 +0000
ROA not before: Fri 09 Feb 2024 15:20:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215541
IP address blocks: 2a0c:9a40:8510::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 14:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8e:74:7e:9b:7b:c0:ae:05:7e:ce:13:4d:8b:75:c6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Feb 9 15:20:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2635aa22e7cbec0c8e2c7b015ed40818d24ca5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a4:ce:b6:a9:65:db:af:5d:ed:98:86:64:8a:
4e:3f:e3:ad:26:c5:41:8c:41:71:25:94:b9:c3:04:
f3:eb:a9:fc:bb:37:48:9e:16:ce:8e:7a:e3:27:10:
30:ae:e0:b9:b9:22:9f:b2:25:de:36:3c:ae:31:71:
d9:de:b3:36:be:d7:db:7c:a7:37:c8:14:8c:cc:b8:
2e:64:13:0f:d3:62:5c:f9:9d:43:60:f9:d8:c4:25:
bf:78:d1:11:0a:15:dc:2c:59:45:08:9c:94:3f:df:
ef:e6:d3:ea:2d:82:b2:0f:79:8a:82:98:c3:5c:7a:
36:eb:0c:72:55:f5:19:54:2e:f0:32:4b:34:16:38:
f1:a0:e4:07:f7:e0:bd:9b:07:81:0c:66:65:87:e0:
8b:9a:e9:80:06:2f:97:26:40:fd:d0:68:1e:d4:9e:
18:01:18:39:6c:27:9b:e6:bc:a5:61:8f:d0:5d:ef:
5d:c9:41:f1:0c:85:3e:a3:bf:ef:c3:d7:a6:58:6c:
75:30:9d:63:b8:3a:55:37:6b:6e:d9:d1:16:ca:4e:
00:a4:6c:d6:e0:9f:c0:73:16:ae:80:55:00:19:a9:
fd:ea:30:43:49:33:fe:bb:fd:54:35:33:7d:5a:48:
41:08:d6:8b:10:f0:7a:cc:97:32:ff:7c:b2:1e:cc:
ee:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:35:AA:22:E7:CB:EC:0C:8E:2C:7B:01:5E:D4:08:18:D2:4C:A5:E5
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/JjWqIufL7AyOLHsBXtQIGNJMpeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8510::/48
Signature Algorithm: sha256WithRSAEncryption
cb:b3:7a:c3:64:28:e1:03:73:25:42:99:75:7a:01:1e:61:2e:
d2:21:24:c0:10:a8:da:fd:1e:47:15:0d:d6:61:7c:bd:b3:93:
0e:03:d2:54:3e:02:64:6e:75:75:48:6d:db:c8:18:33:62:37:
97:65:55:3a:65:6e:ac:e3:04:3c:2f:45:75:dd:08:fe:31:1d:
60:89:6f:26:db:ab:e7:91:09:5e:60:50:bc:af:cf:44:ff:c0:
c2:a3:cd:d6:b6:9a:75:ba:07:17:a0:26:c7:ea:50:7e:5c:2d:
dd:2c:58:67:7a:c8:7d:03:a2:90:ff:f3:5c:b3:bd:bb:19:8a:
05:0b:86:7e:d5:4c:7b:a1:4e:cb:3a:b7:a0:ec:46:a0:9c:e3:
d9:22:c9:83:4d:4d:7c:dc:14:1c:ba:85:f1:60:ce:81:aa:91:
cd:87:d1:79:14:32:72:1e:57:cf:f9:8a:fa:88:06:ef:e1:6c:
ee:25:5a:6f:b2:37:5b:84:a1:30:eb:05:30:62:80:83:52:96:
8a:48:b3:f7:0a:c7:59:42:b8:7b:84:ea:aa:79:e1:23:ab:f0:
76:cb:f1:68:81:cb:73:1f:65:0e:53:51:b6:12:00:f6:be:e4:
f1:76:1f:4e:d7:47:6e:15:70:ce:6d:f3:28:fe:55:d0:d6:2c:
78:a2:69:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:38:46 2024 by rpki-client on console-ams.rpki-client.org