Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/TK4vu63vgY7VIAPBpOCrByFJC-E.roa
File: TK4vu63vgY7VIAPBpOCrByFJC-E.roa (raw, json)
Hash identifier: G9jVQY4FrY9ni3GemuaHLztdz0aVOcksensV0U7pq1Q=
Subject key identifier: 4C:AE:2F:BB:AD:EF:81:8E:D5:20:03:C1:A4:E0:AB:07:21:49:0B:E1
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8D96630B728280870CBB38409D0DC
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/TK4vu63vgY7VIAPBpOCrByFJC-E.roa
Signing time: Mon 01 Jan 2024 20:30:52 +0000
ROA not before: Mon 01 Jan 2024 20:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61138
IP address blocks: 2a0c:9a40:8082::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:d9:66:30:b7:28:28:08:70:cb:b3:84:09:d0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4cae2fbbadef818ed52003c1a4e0ab0721490be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:39:cc:1d:dd:e0:7e:44:07:14:d6:b0:d4:7d:
6e:77:55:17:1e:03:14:46:c8:0e:6e:cb:8b:de:40:
00:d4:f1:a4:48:ac:fc:63:53:fd:81:55:f2:4c:24:
b0:85:0a:71:5e:a9:85:15:b6:87:b2:29:e5:db:25:
b9:d9:f7:29:ac:b6:c3:6d:f9:84:94:77:fa:27:7c:
f9:ad:c3:b1:17:0d:aa:c7:5c:e9:b0:b2:86:c4:f4:
58:3a:43:62:5e:aa:5b:53:72:61:6b:c1:6a:c9:f8:
d9:55:4d:41:5c:63:6f:5b:05:4a:1d:67:49:9c:59:
59:a7:24:80:ea:55:ec:d7:5f:a4:24:25:0a:60:4f:
ac:e1:4a:a6:f5:a1:98:59:bf:e8:fc:68:16:f8:d4:
7d:cb:d2:3e:ae:ab:4d:50:d6:c4:87:67:89:e1:0c:
20:c3:b3:1d:30:d3:36:15:c2:48:56:e2:73:61:41:
3d:01:f6:8f:01:18:e0:d8:72:56:3a:03:e1:ce:0b:
e0:b7:cb:17:c8:c9:c0:78:2b:1e:79:48:b7:9c:69:
08:ac:57:02:a0:5c:13:8b:57:fd:3a:1a:43:a4:28:
c1:ac:19:fb:1e:2f:43:04:96:71:82:b4:22:e3:f0:
11:2e:58:52:62:71:3d:84:77:1f:b7:af:1b:aa:5b:
84:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AE:2F:BB:AD:EF:81:8E:D5:20:03:C1:A4:E0:AB:07:21:49:0B:E1
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/TK4vu63vgY7VIAPBpOCrByFJC-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8082::/48
Signature Algorithm: sha256WithRSAEncryption
0b:75:9f:b0:d2:e4:41:66:24:f6:34:db:7d:a0:4e:38:c7:fc:
ae:ad:61:3c:3d:36:4a:9c:a3:24:93:3d:63:21:a1:9e:73:21:
4c:f8:9b:fb:24:48:76:4d:29:ba:d4:a9:fa:15:b1:a9:2a:d3:
cc:43:c4:d5:20:1d:04:7a:17:7b:50:de:63:8e:9c:b9:c5:11:
c2:1e:71:c6:da:e4:bb:d1:9a:e5:ff:f2:61:ba:73:26:59:82:
23:e6:87:78:38:23:43:4d:15:ca:80:7f:66:25:25:15:31:b9:
cc:05:ed:57:e3:51:22:31:1b:e3:aa:6c:15:3e:ed:bd:18:5e:
11:44:8c:69:43:07:2e:0d:ae:cf:54:ee:96:6a:c9:b0:0c:68:
62:f5:02:44:aa:2a:ee:e7:10:c4:98:fc:07:92:cf:57:21:e4:
55:68:3c:58:77:4c:74:88:e8:38:0a:4e:f8:e9:1e:b0:75:39:
80:78:de:5a:9a:b1:ef:5b:5a:a8:0b:d8:6a:a8:ae:0e:21:2e:
34:eb:bb:2c:d3:df:94:c8:6d:12:76:0b:f4:2c:03:c3:e5:6a:
34:6b:dc:d9:57:52:3c:33:66:83:3d:f7:4e:81:e1:b9:f9:83:
01:14:b1:0b:69:80:d7:92:d7:b5:d8:ae:04:df:82:76:a4:db:
88:25:ae:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:36:38 2024 by rpki-client on console-fra.rpki-client.org