Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_F71V1iv2Sa2ge7P_Dpf2KuyBTs.roa
File: _F71V1iv2Sa2ge7P_Dpf2KuyBTs.roa (raw, json)
Hash identifier: ERYGbMkybX24ebJho/ay8r2wCxoYrpZjMLDoUmx1w+c=
Subject key identifier: FC:5E:F5:57:58:AF:D9:26:B6:81:EE:CF:FC:3A:5F:D8:AB:B2:05:3B
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8DA3E3164509BB0D2C50C268BFAE1
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_F71V1iv2Sa2ge7P_Dpf2KuyBTs.roa
Signing time: Mon 01 Jan 2024 20:30:52 +0000
ROA not before: Mon 01 Jan 2024 20:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136620
IP address blocks: 2a0c:9a40:8080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:da:3e:31:64:50:9b:b0:d2:c5:0c:26:8b:fa:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc5ef55758afd926b681eecffc3a5fd8abb2053b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:59:8b:43:95:db:5c:ef:ea:84:54:52:02:98:
2b:fa:78:5d:5c:5d:20:cb:aa:e3:a0:4a:67:68:1c:
c2:dc:fd:ff:98:54:7f:ea:44:39:d5:43:4a:75:61:
c5:99:f7:0e:b4:74:bb:aa:08:76:64:7e:dd:01:e9:
e7:67:7d:db:d2:98:82:dd:64:15:eb:38:91:ea:c3:
92:e1:b4:f8:f7:c3:e8:da:1c:4e:e1:5c:a6:ea:19:
d4:de:e2:94:54:4e:72:2b:08:51:45:73:60:a2:d1:
96:a5:bf:e6:1c:a2:2a:90:09:1b:2d:32:21:5a:65:
57:bd:fb:e6:be:6d:cf:02:3e:79:91:e2:29:14:97:
5c:ad:c0:37:b4:5b:d8:c4:1a:9c:c0:17:18:a3:e5:
ac:fc:f8:b3:4e:94:1c:65:2d:e8:97:12:4a:de:d3:
26:69:d9:04:14:19:e9:e1:db:87:ab:2e:e7:3a:60:
e9:1e:c8:9f:1b:0f:6b:79:e0:01:cb:30:1d:4a:05:
b8:11:8e:f2:c3:26:6c:2e:ef:0a:59:df:f6:c1:9d:
30:dc:19:dd:e5:b1:9f:c6:9b:58:9a:03:5e:d8:91:
4b:04:76:1f:56:bb:4e:6d:90:ad:9e:14:a7:9c:0a:
c2:cd:b1:44:bc:3f:6b:eb:04:43:45:a3:49:08:22:
c5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5E:F5:57:58:AF:D9:26:B6:81:EE:CF:FC:3A:5F:D8:AB:B2:05:3B
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_F71V1iv2Sa2ge7P_Dpf2KuyBTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8080::/48
Signature Algorithm: sha256WithRSAEncryption
48:e8:e8:b6:34:f1:13:3f:39:1a:5a:67:88:95:ed:ce:23:02:
2c:3b:74:c0:28:b9:db:51:3c:5d:3d:e8:75:30:7d:85:a3:c3:
ba:f7:3f:ca:1a:74:3e:92:38:3d:f3:95:07:1d:d4:cd:de:06:
61:b0:f6:1d:b3:6a:13:a0:ad:b5:f7:4a:70:ac:14:de:2d:08:
85:e0:27:b6:7c:7a:e8:f1:a0:28:36:14:ee:37:91:e9:c4:f4:
32:5a:95:dc:a4:ac:4d:57:f8:a6:8a:8b:74:eb:de:ce:51:a5:
99:c3:5f:a3:66:7d:ce:f2:90:01:c5:0d:3f:d1:f5:50:2a:bd:
2c:22:8d:a3:ed:c3:cf:df:53:a5:2e:e8:dc:5f:4f:04:97:21:
f0:ad:eb:10:9b:72:f0:69:6c:e5:b2:87:8f:c5:0d:b0:d5:90:
5e:10:6a:e8:9e:e6:3a:d8:1f:a0:71:74:09:2a:e8:7a:75:f6:
0a:ba:9f:7a:ca:82:db:39:fb:a1:33:dd:ce:7a:a9:fd:54:95:
ce:c3:6f:10:b1:b2:07:ad:9e:32:c0:1f:59:e7:24:7a:cb:38:
58:73:09:ee:68:57:89:d7:6e:dd:cf:91:72:79:fb:7f:11:04:
ac:c2:68:4b:33:02:fe:dc:c4:fd:d7:bc:fb:f7:3e:9b:60:8b:
a9:9f:fe:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:59:22 2024 by rpki-client on console-ams.rpki-client.org