Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/TcfpmpyR0UCEYENYGjJvkrK9aB8.roa
File: TcfpmpyR0UCEYENYGjJvkrK9aB8.roa (raw, json)
Hash identifier: InaiAlNqullLEXM36qEIzzK5m8JqqY8G6T0fov8zDP8=
Subject key identifier: 4D:C7:E9:9A:9C:91:D1:40:84:60:43:58:1A:32:6F:92:B2:BD:68:1F
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8EF2AFD8D8C70D1B4DABC9BDB2D0B
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/TcfpmpyR0UCEYENYGjJvkrK9aB8.roa
Signing time: Mon 01 Jan 2024 20:30:57 +0000
ROA not before: Mon 01 Jan 2024 20:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212704
IP address blocks: 2a0c:9a40:8078::/45 maxlen: 48
2a0c:9a40:8070::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 06:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:ef:2a:fd:8d:8c:70:d1:b4:da:bc:9b:db:2d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4dc7e99a9c91d140846043581a326f92b2bd681f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8f:fe:ac:38:00:0e:9c:6b:af:90:79:d2:43:
45:da:64:c0:33:f0:88:5a:88:b0:3b:2b:93:83:a0:
cb:6e:89:8b:dd:e3:0e:0f:df:d2:ca:19:68:a2:21:
16:64:fd:10:d5:10:51:bb:7c:10:d7:50:17:e3:c6:
0a:b0:92:78:20:86:7b:c6:21:07:15:a2:73:2f:fe:
ef:5f:c8:92:a8:ce:a8:18:30:0b:5f:b2:37:2d:88:
e6:28:0b:73:73:01:f2:94:ab:5f:f3:f7:8d:9f:31:
0a:75:7f:e2:8e:9f:8c:b7:b7:72:f0:f6:60:04:fa:
83:fa:e0:5d:d9:65:b4:73:73:db:03:19:2f:e2:19:
7e:5c:28:24:7b:f6:12:3c:09:2d:de:ab:27:e4:cd:
c6:a9:af:f7:8f:7f:c3:ae:b7:74:78:f0:1a:cf:2b:
ae:d7:a1:05:c3:5d:24:b3:7b:ae:45:c5:0b:1e:73:
a4:8e:69:02:8f:ff:bf:06:72:b5:2e:ae:28:b2:28:
ec:66:7b:33:9a:da:61:93:13:b8:3e:65:78:51:f7:
5d:f0:bc:c9:59:13:c3:67:0e:f8:46:e0:9c:d4:c1:
ff:3d:20:39:89:a9:6f:65:e2:49:d2:88:de:d3:44:
cf:ec:ac:77:a4:2b:1b:80:31:8a:d0:0f:21:26:26:
3b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C7:E9:9A:9C:91:D1:40:84:60:43:58:1A:32:6F:92:B2:BD:68:1F
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/TcfpmpyR0UCEYENYGjJvkrK9aB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8070::/44
Signature Algorithm: sha256WithRSAEncryption
0f:11:33:4d:79:2c:77:18:55:ae:62:60:c4:25:f9:c2:58:8e:
32:28:71:0f:08:b4:d7:b5:49:86:dd:fb:6d:08:52:a5:33:c0:
25:57:fa:55:7a:54:36:d3:71:86:45:3a:b0:2c:1b:32:22:dd:
29:4f:41:60:90:30:83:a8:f3:65:3b:93:0d:77:70:94:c6:ae:
ae:7a:15:1e:33:c8:85:fd:86:d9:7b:02:52:2d:81:c2:d4:95:
bc:32:eb:e9:a9:9c:63:13:fa:e3:c3:41:cb:de:78:da:3f:b6:
76:9a:d6:da:9d:bc:08:8e:c3:5d:21:05:2c:50:cf:a3:8c:48:
26:aa:3b:97:12:af:44:24:8a:14:9d:31:65:1e:75:a1:af:3b:
2e:16:96:aa:05:93:a0:70:dd:82:fd:12:06:bf:33:9d:a9:c0:
96:8d:68:44:da:ef:6a:78:e2:e1:23:7b:49:1e:c5:54:c4:c5:
8a:d0:72:85:65:02:b1:ab:49:c4:7f:60:1d:10:66:9e:5b:3d:
cc:6c:9b:f8:e8:a5:2b:4c:4f:78:0e:09:cd:73:2f:4c:de:b5:
3e:82:f2:b7:31:f9:65:fb:6d:83:c4:a0:97:ae:61:78:c8:cd:
29:7b:2b:14:d4:ce:ab:fb:cc:e9:b3:4e:dc:90:4b:9a:b8:bf:
a9:2e:7e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 13:15:17 2024 by rpki-client on console-ams.rpki-client.org