Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/LeLmaSlMoSy3Ft8thNkUQoBjluk.roa
File: LeLmaSlMoSy3Ft8thNkUQoBjluk.roa (raw, json)
Hash identifier: JGWQ5fpZ2wMcGa1GG+k552DKJ58mfT9c00RS21NS8kI=
Subject key identifier: 2D:E2:E6:69:29:4C:A1:2C:B7:16:DF:2D:84:D9:14:42:80:63:96:E9
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8DB6898BC2A1AE495FC8AC5EA865F
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/LeLmaSlMoSy3Ft8thNkUQoBjluk.roa
Signing time: Mon 01 Jan 2024 20:30:52 +0000
ROA not before: Mon 01 Jan 2024 20:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142561
IP address blocks: 2a0c:9a40:8c82::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:db:68:98:bc:2a:1a:e4:95:fc:8a:c5:ea:86:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2de2e669294ca12cb716df2d84d91442806396e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:be:43:08:9e:b1:51:2f:e6:ec:75:60:72:
9f:a4:0a:45:cd:da:3c:f7:cd:8a:2a:27:2d:a4:27:
01:5f:bf:dc:09:80:21:4a:66:d5:3d:97:5a:ec:cb:
6e:e7:ec:13:06:01:57:5b:14:7c:58:91:66:af:9d:
e3:ad:6c:a6:d9:52:33:fb:52:12:cd:24:4f:f0:8c:
b0:a8:89:e9:1f:a4:4c:c7:4e:26:f1:7e:1e:e0:20:
65:81:fc:71:65:85:4d:fe:58:23:46:db:b5:2a:4f:
57:41:8a:12:99:9c:9c:23:27:47:f3:c8:ae:e9:18:
25:b3:0c:4e:60:95:00:59:0c:fb:04:0c:33:aa:e0:
cf:00:30:eb:3c:6e:13:dd:2e:8e:be:b4:8f:50:56:
e8:bb:3d:6e:6f:86:78:64:9d:45:ce:d7:7d:6d:03:
8b:7d:cc:fa:73:43:fa:ba:9e:61:43:03:c2:61:6e:
27:c6:eb:df:3f:9f:e8:81:e2:1b:0a:b5:7b:05:de:
d7:dc:5d:85:33:78:07:0a:12:d4:10:2b:35:c5:74:
00:5d:50:7c:8e:14:64:04:8d:50:9a:d6:80:7d:bd:
80:a2:9e:b0:4b:d9:1f:c7:94:3a:2b:e1:b1:58:ed:
de:5b:27:f2:33:33:34:2e:8c:21:3a:8a:26:df:04:
68:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E2:E6:69:29:4C:A1:2C:B7:16:DF:2D:84:D9:14:42:80:63:96:E9
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/LeLmaSlMoSy3Ft8thNkUQoBjluk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8c82::/48
Signature Algorithm: sha256WithRSAEncryption
9b:0c:2a:23:c7:21:af:c9:54:c7:12:2d:c2:1e:8d:50:db:f6:
05:05:81:b1:67:69:35:f8:87:fa:1c:43:97:b7:a4:3c:6f:49:
f3:df:f8:82:8b:98:25:b2:b6:ad:56:e6:e4:cb:97:92:6d:fe:
9b:da:2f:27:dc:af:45:f6:1d:7b:b1:1f:c6:57:63:61:4c:c9:
a2:b6:fa:0d:f7:7b:a1:1e:c5:98:36:f5:5a:09:97:0e:3d:df:
62:86:20:02:d7:0e:28:a0:86:d9:72:ce:fd:23:66:16:d2:71:
2c:2e:9a:85:2b:cc:7a:e3:f2:91:dc:84:c2:ac:f2:93:55:2c:
fb:92:25:0f:5c:d6:0e:1a:09:14:c2:79:ce:b5:f1:c3:2a:6b:
11:c7:3f:9f:0d:07:5d:00:21:32:67:d7:2b:85:9f:9b:ae:31:
d7:6b:05:ac:bb:0d:69:09:44:ae:1e:73:90:7d:f0:1e:16:b7:
36:06:c1:45:e1:3c:cb:6d:e3:4b:f7:7b:94:74:98:62:f9:da:
75:89:c6:12:0a:eb:2c:9d:6a:b8:db:71:48:9c:8c:20:1a:5a:
74:ae:93:72:12:59:f3:25:df:51:df:7f:8d:2e:70:4b:0c:32:
c5:f8:97:54:be:b2:c1:df:e2:af:6c:11:74:a8:23:f2:a0:06:
47:8b:16:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:50:10 2024 by rpki-client on console-ams.rpki-client.org