Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/RjsIcBFwSyeCGO7lTskgIUErDdk.roa
File: RjsIcBFwSyeCGO7lTskgIUErDdk.roa (raw, json)
Hash identifier: mOF3u1KW9WO1/70UmE0sTVDc3+xNq58LNu2sh0+OmuM=
Subject key identifier: 46:3B:08:70:11:70:4B:27:82:18:EE:E5:4E:C9:20:21:41:2B:0D:D9
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8F6E7868CB7583801846FA6D2DE3C
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/RjsIcBFwSyeCGO7lTskgIUErDdk.roa
Signing time: Mon 01 Jan 2024 20:30:59 +0000
ROA not before: Mon 01 Jan 2024 20:30:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216052
IP address blocks: 2a0c:9a40:8480::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:f6:e7:86:8c:b7:58:38:01:84:6f:a6:d2:de:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=463b087011704b278218eee54ec92021412b0dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b0:34:35:cf:e7:cf:2a:7d:0f:ba:dc:3e:a2:
c0:d6:35:c6:60:60:7b:5c:74:78:00:75:8d:da:10:
7d:c5:5a:b5:81:a5:cd:01:a3:96:34:c1:b3:10:81:
64:6c:60:8d:c2:db:2a:a5:40:7a:74:29:39:6f:75:
ef:9b:e3:67:37:f0:42:57:d4:23:86:a1:0d:a9:c9:
71:4f:af:f9:03:f6:38:dd:31:ed:05:4c:e3:c0:34:
63:41:c1:3d:1e:c8:cf:47:59:fd:73:f8:b7:23:60:
00:f9:cd:d8:d2:e6:e6:72:15:c4:1e:1d:2c:90:9e:
11:0f:32:96:d8:c8:d9:fb:da:79:34:0a:81:53:0f:
4b:1a:0f:03:4c:d4:f9:8d:83:39:67:76:9c:4a:35:
2d:9e:f8:03:32:d2:f9:70:dd:ae:8b:c1:09:38:88:
99:92:eb:2e:c8:68:d4:fd:df:2e:23:ff:d3:02:ed:
17:6f:2c:28:08:06:94:fe:86:40:1a:44:4b:9a:35:
b3:76:e3:f6:5c:cc:a4:be:bd:be:15:de:51:49:49:
c8:ab:bb:fd:2d:89:4f:24:7e:ec:ec:5e:44:85:a8:
70:08:b6:8f:b0:ef:6b:51:41:48:04:fb:bf:bf:9e:
f7:23:15:86:07:94:1d:ea:f4:26:c4:a9:27:3b:2f:
3a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3B:08:70:11:70:4B:27:82:18:EE:E5:4E:C9:20:21:41:2B:0D:D9
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/RjsIcBFwSyeCGO7lTskgIUErDdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8480::/44
Signature Algorithm: sha256WithRSAEncryption
22:8a:af:da:4e:da:4f:ac:93:06:9b:e4:64:b9:cf:3c:5b:ff:
41:f8:3d:f2:dd:76:6e:de:57:2d:fd:cd:bb:40:95:65:c9:1b:
91:12:a1:b6:31:d6:70:d1:fc:d6:a9:e9:6b:71:13:d8:ed:9a:
ea:4a:b4:d4:de:10:c9:cc:a4:fb:2f:8c:22:6f:76:bb:48:2c:
b5:c7:96:23:ae:6b:70:bd:14:03:81:10:85:30:af:e4:75:57:
c6:26:55:f2:69:fe:7b:f5:c9:33:86:ad:d8:6b:b1:c2:df:58:
fa:12:1a:23:3d:31:ef:a0:a2:5e:13:61:13:4e:fb:22:cd:80:
60:d9:e4:e2:cf:51:09:7c:51:5d:25:b3:00:fc:18:4a:aa:61:
a7:17:21:ca:3e:a2:38:35:2f:b4:1b:2f:03:e6:3f:bf:0a:25:
79:9c:4f:43:07:15:ad:84:c4:a9:7a:7a:4e:c7:bc:1a:4d:07:
01:be:5a:64:4c:af:19:db:f6:2a:ef:46:e7:76:f9:bf:53:75:
56:ae:cc:99:12:12:7b:cb:15:08:9d:1e:ca:ee:a6:27:6f:84:
7c:ac:8c:c9:e9:07:4b:ba:5f:45:5f:25:a0:42:45:91:c5:0a:
02:11:45:21:a9:fd:db:1a:47:c1:79:1d:20:aa:95:f5:72:82:
21:74:9a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:17:24 2024 by rpki-client on console-fra.rpki-client.org