Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Y5J5NqEXsPM2rJbI1_xrj6aO8-E.roa
File: Y5J5NqEXsPM2rJbI1_xrj6aO8-E.roa (raw, json)
Hash identifier: f90fpbWEdlSe5jI4nYVJFZENHx9xnfuGcH6Mw4D8Jgs=
Subject key identifier: 63:92:79:36:A1:17:B0:F3:36:AC:96:C8:D7:FC:6B:8F:A6:8E:F3:E1
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8DF7969383C98B4EF7BF0AB9FF772
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Y5J5NqEXsPM2rJbI1_xrj6aO8-E.roa
Signing time: Mon 01 Jan 2024 20:30:53 +0000
ROA not before: Mon 01 Jan 2024 20:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199109
IP address blocks: 2a0c:9a40:8320::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 15:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:df:79:69:38:3c:98:b4:ef:7b:f0:ab:9f:f7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63927936a117b0f336ac96c8d7fc6b8fa68ef3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ab:37:6f:e2:bd:bc:e0:28:9a:f4:a1:7e:cc:
e9:04:05:c6:36:0d:f9:01:e5:a8:8d:b2:0b:2b:44:
6a:9b:36:33:36:c7:3f:62:c6:7b:db:7a:92:3b:32:
6e:85:39:79:7e:d2:65:17:2f:94:53:a1:a4:a0:53:
0a:56:94:48:01:6f:fe:02:8e:a8:a0:43:31:34:f0:
95:39:fa:ff:fc:3d:e3:d8:b1:aa:59:c6:af:0b:76:
43:74:45:f3:c2:0f:42:a1:8e:88:05:fd:be:75:4d:
05:b9:da:2d:87:9a:18:17:ec:a9:67:9c:8f:60:60:
66:17:85:86:28:36:2a:75:fe:b0:7c:1b:26:e9:92:
de:a6:0e:21:23:e0:5b:21:ba:4d:ab:00:43:cb:d5:
26:c3:97:17:43:e7:c0:57:69:42:42:a4:00:e6:f3:
e3:dd:4f:61:41:02:97:67:9e:e2:2b:51:26:10:ef:
c8:ec:d2:89:07:68:0e:05:6a:a8:6c:db:a9:22:39:
d4:cb:f0:4a:e4:25:1d:44:55:eb:25:7e:cd:19:3c:
81:9b:4c:f9:b7:14:7e:69:0f:ca:22:6e:3e:05:62:
08:08:d7:2d:b1:3a:16:a3:ef:6a:26:69:c4:e1:90:
b5:9d:5a:4f:66:b7:2c:77:cd:d5:80:31:15:83:76:
45:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:92:79:36:A1:17:B0:F3:36:AC:96:C8:D7:FC:6B:8F:A6:8E:F3:E1
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Y5J5NqEXsPM2rJbI1_xrj6aO8-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8320::/48
Signature Algorithm: sha256WithRSAEncryption
7d:83:0d:3a:a4:26:17:1b:cb:41:b5:db:eb:63:f3:df:20:6c:
c5:81:51:ef:ec:5b:3c:6e:5e:ab:a5:e1:8f:c6:0b:ee:f0:0f:
09:bf:8f:34:23:e6:c4:e2:7b:ce:88:b4:78:af:48:07:a8:d0:
ee:02:80:fc:ba:13:9e:e0:18:27:6e:8a:b0:5f:06:0f:88:b2:
54:b5:ab:4f:9a:cb:7d:c6:44:aa:88:4a:c1:39:6b:36:f3:ea:
dd:f3:d4:df:68:e6:3d:38:fb:69:7d:2d:bd:60:a7:6a:1a:09:
ba:38:ba:e3:32:2e:e0:0c:e8:e8:fc:8b:0e:36:ae:6f:3d:5b:
1f:f6:be:45:1f:b4:83:23:34:96:20:05:9c:38:41:d4:96:20:
bd:48:00:9f:26:0c:1d:a1:67:20:c6:7c:17:42:03:4b:86:1d:
dd:71:24:db:4d:75:c9:96:bb:01:46:3f:87:12:77:5e:7c:f5:
f6:ed:76:50:70:00:80:68:83:40:d4:21:46:2d:e9:fd:ab:70:
89:c0:e3:44:2e:25:ba:5e:55:ca:f6:28:23:eb:96:65:72:d1:
db:2b:c2:34:ec:cc:e9:45:0e:58:84:3f:4c:cd:1b:12:af:df:
5b:52:71:1a:32:6b:d7:2e:9f:97:a9:52:11:a4:4d:ac:04:0f:
6f:68:4a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:30 2024 by rpki-client on console-fra.rpki-client.org