Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/au5zXfzmhsnCzffpKGq369jUI3c.roa
File: au5zXfzmhsnCzffpKGq369jUI3c.roa (raw, json)
Hash identifier: kaQODNN4/biSj0EHz2iIJP2ecWIzxXH+ZfJ5/Nzs8HA=
Subject key identifier: 6A:EE:73:5D:FC:E6:86:C9:C2:CD:F7:E9:28:6A:B7:EB:D8:D4:23:77
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8E11E8E5205D5FD5C2FA995E73CEB
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/au5zXfzmhsnCzffpKGq369jUI3c.roa
Signing time: Mon 01 Jan 2024 20:30:54 +0000
ROA not before: Mon 01 Jan 2024 20:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199689
IP address blocks: 2a0c:9a40:81f9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:e1:1e:8e:52:05:d5:fd:5c:2f:a9:95:e7:3c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6aee735dfce686c9c2cdf7e9286ab7ebd8d42377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:95:99:1d:e2:98:42:7a:3a:a1:a1:4a:6d:dc:
d0:a3:b7:70:3c:37:73:bf:19:9b:00:73:e3:69:f7:
cb:20:58:4f:3c:04:4b:ff:40:05:e3:f2:ca:01:3d:
cd:9b:da:f9:46:69:c9:9d:da:dc:ce:3c:fe:35:7b:
ee:3b:d0:35:65:e7:13:43:9d:01:17:28:0c:1a:b7:
99:e7:3e:1d:fe:b5:0b:5c:95:19:3d:cc:d4:0d:a3:
a3:46:d4:68:46:3b:81:b1:80:a3:39:6c:e7:d7:de:
18:b1:12:e7:42:91:f8:97:77:d1:19:d6:37:81:9d:
61:9e:7b:2d:71:8c:bd:30:23:29:fb:b9:03:80:24:
27:ab:e7:7e:06:26:df:35:3e:0c:c1:b1:61:85:12:
1d:98:17:a6:95:e2:95:9d:46:6d:3b:ea:76:42:bb:
f5:50:c1:13:b1:ab:da:cb:d4:6e:88:95:93:49:fd:
54:27:7a:c6:a4:af:cd:6a:fa:1e:c1:42:b2:f2:54:
e8:a1:6a:33:33:10:b4:e4:11:37:9c:89:7f:54:da:
e5:82:df:c5:7f:db:f9:ed:a4:df:81:d7:f9:75:da:
8f:43:3b:0c:c4:e8:64:a8:a7:21:5e:ec:31:d5:8b:
85:16:34:8c:35:3b:52:89:04:52:1e:3a:6f:5d:36:
09:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EE:73:5D:FC:E6:86:C9:C2:CD:F7:E9:28:6A:B7:EB:D8:D4:23:77
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/au5zXfzmhsnCzffpKGq369jUI3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:81f9::/48
Signature Algorithm: sha256WithRSAEncryption
25:16:90:a0:92:2f:e4:54:1f:ad:52:c2:f1:4f:e9:eb:3f:f9:
9b:1a:7e:1c:a7:52:b0:0d:cc:06:22:8e:b2:89:69:e0:07:bd:
cc:66:6b:af:39:84:0f:c4:b7:4e:23:1f:db:9d:01:6e:5a:cf:
42:03:55:03:d5:ab:85:ca:a5:a3:e1:c6:2f:8d:62:95:1d:62:
ce:3e:cd:ad:f1:7a:0f:f8:94:ce:fa:93:d6:d1:f4:75:33:4e:
07:39:3f:15:64:79:12:d0:6e:0b:d2:0f:33:15:35:aa:14:2a:
04:71:6b:d9:c8:24:4d:10:d7:88:f9:8e:81:11:7c:3c:35:c8:
cf:57:7d:8e:f1:f8:14:9d:49:e4:3b:a8:3c:c5:61:c2:65:44:
fa:06:0d:79:1f:0c:09:33:ea:62:e5:0d:59:62:ce:35:a7:02:
0f:80:22:bd:46:ea:e9:22:84:59:2e:50:50:72:8f:d6:f5:af:
4c:b8:65:24:55:4f:67:32:9b:63:58:5c:2d:bc:0a:b6:0b:4d:
3e:55:f4:eb:0b:44:d7:53:68:2b:c0:f2:bd:ef:55:f2:31:31:
23:f3:3b:0a:42:4a:c7:dd:1f:01:26:b4:2a:36:eb:de:a6:d4:
44:9a:58:71:4a:3e:e6:8d:11:17:ff:ad:d1:45:10:fa:fe:94:
21:de:20:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:17:24 2024 by rpki-client on console-fra.rpki-client.org