Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/it8F20jSriO2L5YRbsKNKFHy80s.roa
File: it8F20jSriO2L5YRbsKNKFHy80s.roa (raw, json)
Hash identifier: TztHgb/OWkngPRrMEoKwcf6lSSi3sLIAkmDyzEdPE4U=
Subject key identifier: 8A:DF:05:DB:48:D2:AE:23:B6:2F:96:11:6E:C2:8D:28:51:F2:F3:4B
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8F7AE1D047E8FD707D3A67AD20380
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/it8F20jSriO2L5YRbsKNKFHy80s.roa
Signing time: Mon 01 Jan 2024 20:30:59 +0000
ROA not before: Mon 01 Jan 2024 20:30:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216339
IP address blocks: 2a0c:9a40:8310::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 06:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:f7:ae:1d:04:7e:8f:d7:07:d3:a6:7a:d2:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8adf05db48d2ae23b62f96116ec28d2851f2f34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:35:ad:9b:5b:79:9d:c8:b4:8c:8c:1c:f9:69:
86:a5:66:e8:84:3a:54:db:d2:89:93:2d:25:d2:aa:
9d:77:1a:95:a2:0f:91:46:bb:8e:f6:ac:05:ee:0e:
7e:3e:5f:95:a2:13:0d:82:d4:f8:44:f0:60:99:34:
55:ae:93:4c:f7:87:19:3d:06:0c:ba:36:ed:df:51:
70:22:83:bb:95:f0:61:e9:e3:4b:b0:30:66:b5:6c:
65:b4:5b:f9:72:17:58:a1:d3:6e:84:ba:b7:c3:88:
6c:f5:7f:dc:0b:a4:53:21:e8:a1:6e:5e:9b:0c:e6:
4a:a2:9b:e7:58:16:af:94:82:18:46:41:98:4c:3c:
f5:54:f1:26:f0:d4:1f:08:c1:16:9b:63:3a:d3:6d:
42:54:e4:b4:20:49:d6:02:1d:1c:fb:58:2f:d7:96:
cd:a4:84:af:30:d8:92:a3:02:af:e9:07:82:51:11:
eb:03:66:f3:39:d4:5a:4e:c8:82:93:0c:3c:aa:ab:
b4:a9:b8:90:05:da:9e:da:c8:7b:be:fd:80:f0:51:
57:c5:d0:82:51:48:67:6b:2d:39:b4:4a:3f:4c:34:
90:c6:db:25:f3:8f:00:30:fd:bc:7f:cf:30:07:67:
69:e2:2e:94:1d:11:ed:c3:11:5e:29:1c:dd:04:eb:
5d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DF:05:DB:48:D2:AE:23:B6:2F:96:11:6E:C2:8D:28:51:F2:F3:4B
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/it8F20jSriO2L5YRbsKNKFHy80s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8310::/48
Signature Algorithm: sha256WithRSAEncryption
4a:d8:4e:87:18:69:03:3a:ad:be:b4:b5:b5:72:ca:de:0b:89:
75:db:92:da:2b:fb:b3:5c:8b:0f:6a:52:b8:11:2e:49:ae:f1:
dd:32:fb:22:59:83:f1:90:c6:27:dd:0c:70:90:ec:be:66:2b:
da:93:ff:19:08:99:b6:e3:18:a8:16:a3:78:52:3a:a1:6d:9f:
24:d5:7b:1b:20:62:bd:b1:db:12:2c:88:ea:f0:b7:46:2d:d6:
b9:69:66:43:bd:11:4a:bb:63:bd:69:e7:b0:6a:ec:6e:da:20:
46:7d:39:91:f3:c0:49:82:06:b1:09:87:e1:49:49:de:f5:e3:
46:7d:7b:6a:a2:9e:74:5b:d6:c4:74:c1:85:07:03:a3:bd:0e:
5c:2f:40:95:4e:67:c1:ac:a6:30:3b:92:fb:5d:d7:8b:2a:80:
15:2b:51:87:59:dc:06:e8:40:83:7a:f1:85:bc:f8:6b:96:21:
2f:17:41:c9:50:46:ca:22:ca:3f:1e:e2:ea:68:09:a1:60:4d:
92:1a:fc:4a:e1:5f:5b:a0:f6:0f:2f:81:b1:2c:c7:dc:3f:a6:
a2:b9:38:29:e7:50:09:5d:51:f6:b7:ff:8e:3d:6f:a1:d6:4e:
7a:87:83:90:b6:83:0a:d2:6f:aa:54:67:28:c9:a5:e6:1c:df:
3a:b4:95:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 14:12:22 2024 by rpki-client on console-fra.rpki-client.org