Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/hXDyKEIWUYhLkTz_piWcsnciWbA.roa
File: hXDyKEIWUYhLkTz_piWcsnciWbA.roa (raw, json)
Hash identifier: YLQuQ/1xosxV/LqFRsKwDkiIoQRvRet3xeOoeiMCgWQ=
Subject key identifier: 85:70:F2:28:42:16:51:88:4B:91:3C:FF:A6:25:9C:B2:77:22:59:B0
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8EAF8EC6A1EEB5969E70742ADAFAB
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/hXDyKEIWUYhLkTz_piWcsnciWbA.roa
Signing time: Mon 01 Jan 2024 20:30:56 +0000
ROA not before: Mon 01 Jan 2024 20:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209091
IP address blocks: 2a0c:9a40:81fc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 15:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:ea:f8:ec:6a:1e:eb:59:69:e7:07:42:ad:af:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8570f228421651884b913cffa6259cb2772259b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:18:22:33:27:58:53:13:bc:24:c9:21:92:d7:
fb:e7:4e:62:13:ff:bb:18:b5:51:de:a7:f6:3c:b9:
80:b9:2f:55:3b:80:c6:05:4b:fc:22:59:be:e1:3e:
7d:86:dc:03:b6:90:a0:52:79:38:b5:c2:e0:d6:5b:
dd:e2:15:af:f8:56:ec:3d:bd:96:1d:b3:9b:81:89:
82:d7:f7:eb:77:c5:46:04:53:75:5f:19:13:d8:af:
70:07:60:57:0a:cc:60:16:69:9c:39:8e:b6:ff:f5:
9c:1d:73:1a:7f:18:41:5b:86:b0:d9:71:b7:dc:de:
fb:4a:ca:17:30:fe:0b:c4:1b:b6:bf:e8:b2:69:93:
eb:a5:e6:d6:78:ef:53:20:4a:00:2d:85:a6:6d:bf:
ee:fd:7e:ab:68:8f:20:6c:41:fc:f1:bf:ea:3e:26:
1c:1f:b5:f3:d4:a9:44:25:1e:61:d1:a6:e0:ae:c8:
9d:7b:1c:57:99:8c:d8:e4:94:9f:3e:81:2e:44:17:
cf:40:0a:e3:73:86:22:0c:cb:07:cb:8d:c5:18:67:
81:d4:79:4d:06:74:92:50:af:5f:7d:cf:dc:c1:d2:
d8:aa:14:ff:a7:e1:fb:66:d4:af:22:ac:0a:8d:85:
df:47:71:e6:76:83:91:70:a3:b0:5f:f7:93:95:e2:
6b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:70:F2:28:42:16:51:88:4B:91:3C:FF:A6:25:9C:B2:77:22:59:B0
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/hXDyKEIWUYhLkTz_piWcsnciWbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:81fc::/48
Signature Algorithm: sha256WithRSAEncryption
6b:e0:ef:15:1b:67:66:82:e8:fe:1f:dc:89:66:cb:9a:23:79:
47:3d:a6:58:50:c0:e1:99:6b:15:45:81:8b:1a:4b:3b:1d:50:
93:87:d9:9d:0f:4c:1f:43:a0:81:ac:09:52:2f:4f:53:00:b8:
6a:e2:d2:7c:fa:83:63:4d:60:89:b4:23:77:44:8e:c2:62:4b:
18:60:3e:48:fa:8e:5c:99:64:2d:a3:34:eb:37:43:d4:05:ea:
4d:44:b7:c7:f4:34:a9:3e:31:37:d2:03:ed:fd:50:bc:b9:6a:
e9:4a:b0:8a:5c:56:54:88:11:85:58:b6:02:a8:b0:95:5c:fd:
81:6c:c8:95:9c:8a:29:4e:56:29:13:8d:68:a0:b6:5c:42:c4:
e2:ac:1d:1f:92:3f:17:a6:dd:04:bc:cf:7d:ce:c8:75:37:91:
b0:9e:b2:10:6f:d5:34:a4:c1:4b:92:15:3f:a0:e3:cf:d6:e7:
ec:7d:80:72:69:be:80:06:a9:7a:5e:f5:be:ee:b6:1a:44:62:
f5:3c:db:13:41:dd:cb:38:fd:5b:92:4e:c8:8f:3d:7f:6e:bd:
56:64:52:db:ff:3b:a1:f1:c0:f3:f6:a8:8c:44:77:a1:36:f5:
96:9c:57:34:2c:3a:3c:7d:dc:62:10:14:68:36:66:00:e6:4d:
e1:d1:4b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:31 2024 by rpki-client on console-fra.rpki-client.org