Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/VXJNjJVe0RfbYUnjZK_RoOZXWlU.roa
File: VXJNjJVe0RfbYUnjZK_RoOZXWlU.roa (raw, json)
Hash identifier: cqtViOhhljjAqKI2GJMR9ARaMgf2wSNygqcG79ycuzE=
Subject key identifier: 55:72:4D:8C:95:5E:D1:17:DB:61:49:E3:64:AF:D1:A0:E6:57:5A:55
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0191C454E22166357B84CBEDEFEDED4FE053
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/VXJNjJVe0RfbYUnjZK_RoOZXWlU.roa
Signing time: Thu 05 Sep 2024 22:36:22 +0000
ROA not before: Thu 05 Sep 2024 22:36:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 2a0c:9a40:8a90::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c4:54:e2:21:66:35:7b:84:cb:ed:ef:ed:ed:4f:e0:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Sep 5 22:36:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55724d8c955ed117db6149e364afd1a0e6575a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7e:f4:b0:3a:60:02:34:46:69:d4:42:0e:66:
cf:a7:d9:5d:85:f6:0a:74:40:68:4b:ce:e8:e1:2a:
40:e7:eb:14:01:17:cd:6d:50:65:df:33:53:1c:3f:
51:cc:a9:34:41:fc:24:e9:96:d0:4f:c0:e0:58:dd:
a6:1c:62:72:17:20:75:75:6d:e2:85:f6:e9:5a:73:
a6:56:36:c6:07:d1:2a:32:ee:a6:09:6e:c1:88:e8:
7d:86:00:e7:99:81:20:93:ca:3c:49:03:c4:1f:3c:
4d:5a:ee:46:6a:32:4f:36:a8:c9:6c:38:9a:ce:69:
2d:df:6b:73:af:f8:e3:7b:e4:a2:56:9a:dd:15:32:
b3:60:2a:4c:e6:7e:d1:cc:19:66:2f:45:55:69:c8:
c6:f0:a3:0b:55:11:c5:83:9a:52:3d:ab:d3:3a:62:
44:36:ae:56:4c:72:3f:0f:cf:6b:2a:27:64:1a:68:
cd:40:5a:fd:b4:58:b7:c3:2f:78:4d:f2:68:8d:60:
69:c6:e5:78:b8:f2:4c:62:89:cf:9f:c7:85:8d:4e:
8e:b9:73:96:6a:14:ff:fe:f4:d7:13:90:69:f8:0c:
de:b5:4a:a7:21:9f:2f:25:af:f4:f8:0d:31:38:d3:
77:cc:f1:08:d7:a3:60:c4:25:c0:90:21:91:cc:80:
22:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:72:4D:8C:95:5E:D1:17:DB:61:49:E3:64:AF:D1:A0:E6:57:5A:55
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/VXJNjJVe0RfbYUnjZK_RoOZXWlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8a90::/48
Signature Algorithm: sha256WithRSAEncryption
90:ab:15:1e:53:a6:2a:17:9a:f1:44:81:e7:b6:67:01:c3:9d:
72:f6:41:21:b5:59:eb:75:67:28:fa:33:22:fe:61:68:63:d7:
b9:a5:c0:b0:c1:96:7a:43:34:f9:3b:6f:ad:8f:7e:37:9b:4f:
f0:cf:f0:ef:8f:4f:be:5f:4a:c8:12:af:5c:6c:47:fc:4b:94:
0b:c1:12:b4:66:f3:45:ac:3f:1b:5a:bb:fc:66:a0:05:79:d4:
11:34:44:dc:f8:c7:3e:a5:ea:75:49:7d:a0:fc:49:ea:5a:b9:
5f:3f:7e:3a:e1:34:bf:63:41:be:b5:fb:c9:0c:da:fa:b8:5d:
16:49:0f:6a:ed:bf:ab:bc:cc:6a:c2:eb:61:4f:11:80:03:4b:
e4:ed:a0:62:7b:10:66:45:de:a3:fc:3d:de:ac:f9:f6:0c:ac:
c7:41:36:ec:5a:95:2d:ba:bc:cc:f8:04:6a:06:14:07:a8:f0:
7a:0e:17:44:02:4f:f2:17:89:0e:a9:05:b8:9e:1a:2b:0d:f0:
86:e2:31:53:33:4d:35:27:9d:15:1e:a0:b7:db:9f:94:7c:4d:
c6:9f:4e:03:4b:9b:c8:7d:8d:f9:56:aa:8f:b3:d2:f7:4f:35:
d7:e9:75:ca:4e:04:f4:19:cc:c8:27:30:cf:e8:a9:24:1d:63:
f0:38:d3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:23:33 2024 by rpki-client on console-ams.rpki-client.org