Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_QzVT4tf81-H8ChsaMKnxisa6jU.roa
File: _QzVT4tf81-H8ChsaMKnxisa6jU.roa (raw, json)
Hash identifier: kaVpIbuWKXFSEuZOSYEaZGVInlBSKj3z3BnWxHiw41g=
Subject key identifier: FD:0C:D5:4F:8B:5F:F3:5F:87:F0:28:6C:68:C2:A7:C6:2B:1A:EA:35
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CF49650B246F49DF65D92EF728AA78E50
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_QzVT4tf81-H8ChsaMKnxisa6jU.roa
Signing time: Wed 10 Jan 2024 18:15:40 +0000
ROA not before: Wed 10 Jan 2024 18:15:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62403
IP address blocks: 2a0c:9a40:8ca0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 15:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f4:96:50:b2:46:f4:9d:f6:5d:92:ef:72:8a:a7:8e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 10 18:15:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd0cd54f8b5ff35f87f0286c68c2a7c62b1aea35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bf:19:83:bb:8a:36:2a:ef:2f:b2:4b:cf:a9:
a0:ee:03:45:97:8a:01:6c:11:09:28:a2:a6:eb:02:
bb:1d:39:e4:6c:1b:9f:ea:e4:e5:54:3e:e9:a3:3f:
c1:f7:df:d4:69:78:3d:b2:a3:43:14:f4:1f:75:92:
0e:f4:83:28:ce:de:74:7c:ed:db:10:8b:27:39:6b:
77:b5:22:c2:aa:6f:0e:6e:2c:96:7a:e2:ea:49:09:
02:15:c7:19:a5:a3:be:56:f2:5c:89:53:39:a4:9a:
a6:95:99:6e:0d:39:57:e7:6a:e1:27:71:20:14:47:
bf:ed:e8:d4:0b:46:d3:83:91:20:2a:c8:d4:b2:37:
ba:0b:e4:67:84:ca:77:b4:5e:bb:44:f8:87:4e:f1:
f2:d3:ca:ff:a7:b6:3b:3d:38:8e:1b:6b:68:91:7e:
1f:5c:ca:0d:37:55:2c:e4:86:94:b6:66:40:29:ed:
20:13:ad:a0:19:5e:7f:5c:3d:6c:9e:05:94:98:a1:
32:43:35:c6:78:f0:98:aa:fd:d4:4a:d7:d2:1c:57:
26:88:2b:d7:2a:4b:d9:06:58:19:7c:18:71:f2:9f:
05:8f:e6:42:05:7e:52:92:6e:9a:ac:9f:54:6f:ad:
79:96:99:f0:65:ea:a7:52:85:9d:d4:2a:7a:2b:8d:
08:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0C:D5:4F:8B:5F:F3:5F:87:F0:28:6C:68:C2:A7:C6:2B:1A:EA:35
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_QzVT4tf81-H8ChsaMKnxisa6jU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8ca0::/48
Signature Algorithm: sha256WithRSAEncryption
3e:ec:8e:b3:36:ec:82:f4:51:58:57:74:49:c8:82:e1:e4:07:
e9:42:f6:01:f1:f8:ee:00:f3:33:04:23:23:42:e1:b7:e4:52:
41:bd:a2:07:15:91:ac:5c:99:ed:1a:7b:87:61:18:f7:1a:0e:
e5:ac:c2:6a:5a:70:ce:c8:08:e7:cd:ec:fe:cb:4b:01:0c:56:
47:68:ea:73:c0:78:32:41:4c:93:60:6f:d8:84:39:42:3d:2d:
0c:91:1b:86:b8:ea:3d:a0:11:82:04:4c:74:8d:2b:b4:9a:cd:
ae:05:3b:58:5c:a1:f8:4b:f8:c3:5f:8b:41:f4:ce:80:0c:bd:
f1:68:71:76:f6:fb:a9:92:e2:d9:48:37:5b:89:30:ba:1e:06:
d8:08:e4:e9:f2:65:c9:7e:c0:3e:b2:f6:4d:1f:a3:6a:ff:cc:
e0:81:1e:72:92:84:fc:14:51:ff:fd:f7:e6:14:99:6e:28:2b:
cc:9d:43:ce:b1:f2:ba:28:79:13:97:af:b9:69:1b:44:38:cd:
f0:18:ba:61:7e:59:31:22:7f:02:88:fd:33:8f:be:bc:10:ce:
f2:ea:aa:29:3d:26:cd:8c:cd:d5:92:90:a2:ab:ec:13:6b:02:
95:c6:9b:26:7d:81:84:f3:25:79:55:2e:56:72:eb:cc:88:c6:
41:79:ed:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:39:28 2024 by rpki-client on console-ams.rpki-client.org