Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/hAjGWhGuaSs9RGDW86bj3JE1jes.roa
File: hAjGWhGuaSs9RGDW86bj3JE1jes.roa (raw, json)
Hash identifier: 98+euM0YTTBBN+wJ2c9jsQCUZvDa17TEHQGzxACob/8=
Subject key identifier: 84:08:C6:5A:11:AE:69:2B:3D:44:60:D6:F3:A6:E3:DC:91:35:8D:EB
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018EE34AB1E4B632F469FB222E0CFFFB85C9
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/hAjGWhGuaSs9RGDW86bj3JE1jes.roa
Signing time: Mon 15 Apr 2024 19:45:07 +0000
ROA not before: Mon 15 Apr 2024 19:45:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197438
IP address blocks: 2a0c:9a40:8580::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 06:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e3:4a:b1:e4:b6:32:f4:69:fb:22:2e:0c:ff:fb:85:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Apr 15 19:45:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8408c65a11ae692b3d4460d6f3a6e3dc91358deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:df:39:c2:1f:85:8f:c0:8d:03:84:2c:59:4a:
f3:6c:0f:53:a9:03:9c:5e:04:22:eb:e8:34:cd:24:
f4:3e:fa:61:e9:d8:23:05:96:de:ea:87:9c:c7:82:
9e:aa:80:bb:05:a8:41:b0:7f:d0:94:eb:a9:44:87:
00:4e:81:7e:bd:79:4c:3d:e7:57:ba:5b:ec:98:4f:
d9:7a:1a:7b:ac:16:77:34:ac:6a:d3:65:3f:11:cc:
50:26:63:12:ac:1f:4c:c7:72:e6:8c:74:b2:fe:26:
40:6d:d2:e7:27:58:63:4d:2d:e4:91:98:86:6e:1b:
31:68:8f:03:6c:70:c4:77:c6:2e:24:ed:3f:67:4c:
db:1d:9c:41:3c:cb:4c:6e:28:63:5c:05:06:9b:a7:
87:ae:82:6f:78:34:13:2c:3b:b1:28:88:14:e2:eb:
c2:f8:f8:f1:c5:f9:a2:29:98:92:49:12:fc:a9:da:
38:7b:27:4b:c7:85:0c:9b:fa:ee:fc:75:1f:16:6c:
ad:66:6f:c0:39:4c:52:f1:78:69:de:0f:71:ed:e6:
66:6b:d6:64:80:13:96:f6:6c:bc:16:1f:9f:c9:37:
40:46:97:1b:12:3c:8f:3a:a0:22:f9:15:2d:77:df:
f0:9f:2c:74:73:1b:14:56:f6:22:c9:3e:6c:02:a6:
57:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:08:C6:5A:11:AE:69:2B:3D:44:60:D6:F3:A6:E3:DC:91:35:8D:EB
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/hAjGWhGuaSs9RGDW86bj3JE1jes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8580::/44
Signature Algorithm: sha256WithRSAEncryption
58:86:f2:df:e4:f0:6b:b3:7e:95:79:3a:3b:a5:e6:70:8e:fb:
95:33:c7:a5:c1:94:27:73:99:65:db:1b:be:95:a7:ec:e0:96:
c0:bb:a5:34:c0:93:0c:b9:d0:cb:97:d0:07:4b:90:0b:1e:24:
a5:fc:38:f5:16:10:35:df:00:de:03:25:7c:83:4e:a8:bf:30:
ec:9f:70:29:11:19:09:f4:9c:0c:dc:30:67:0d:d6:0a:bb:7f:
0d:c0:ae:fc:22:d6:d6:9d:80:4a:15:60:22:a7:f1:39:db:5b:
a8:28:3b:5d:dc:38:df:c8:1a:b3:26:d2:15:2f:2f:05:69:12:
aa:c8:54:04:cc:1c:30:96:3f:fc:9b:d3:ff:0d:c9:17:db:ac:
a1:a9:b2:b2:4b:35:53:a6:b2:af:31:6a:4d:5a:7a:a2:1f:4a:
a9:80:8e:22:67:54:40:ce:30:9e:f3:2e:90:2f:07:3c:98:1e:
cc:b9:25:31:4d:d2:b7:20:f0:11:2d:72:54:a7:ee:24:eb:bf:
b9:5a:41:e3:d8:3b:8e:84:c1:39:c2:8f:fa:56:31:f1:ed:e0:
48:c4:65:ec:49:73:7f:61:fe:2e:bf:aa:95:66:e6:ec:4e:f3:
09:c5:49:7c:ca:6c:82:6b:29:55:0c:40:68:64:b1:62:e2:0d:
b5:d6:a4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 11:09:02 2024 by rpki-client on console-ams.rpki-client.org