Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/iwQ2P054vzON2VTzi2RUnR6iv5M.roa
File: iwQ2P054vzON2VTzi2RUnR6iv5M.roa (raw, json)
Hash identifier: iJOQZA2Aa7Zmnu1OPyobCYQ9IWgZTXoo3xNJ6LD9NJk=
Subject key identifier: 8B:04:36:3F:4E:78:BF:33:8D:D9:54:F3:8B:64:54:9D:1E:A2:BF:93
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8DFE5D3220377B2F69B4143DD3697
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/iwQ2P054vzON2VTzi2RUnR6iv5M.roa
Signing time: Mon 01 Jan 2024 20:30:53 +0000
ROA not before: Mon 01 Jan 2024 20:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199266
IP address blocks: 2a0c:9a40:8c40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 06:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:df:e5:d3:22:03:77:b2:f6:9b:41:43:dd:36:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b04363f4e78bf338dd954f38b64549d1ea2bf93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:61:50:3c:ea:d8:4a:ca:08:78:90:1f:3e:
6a:b1:ba:fd:43:11:a5:34:05:74:a5:50:df:c2:2c:
7f:b3:75:2f:46:0b:37:e4:12:2c:36:0b:56:5a:2a:
63:d4:d3:f0:c5:c1:6c:08:85:de:cb:ee:50:2c:15:
bb:fb:68:7b:f9:40:b6:5e:ac:82:2e:10:91:95:b7:
f1:fe:4a:db:a9:37:be:2c:31:94:2d:18:4f:dc:66:
1c:7a:f5:ac:25:45:98:f8:e1:57:27:7f:0c:a2:f9:
d1:d5:6f:67:c6:77:0f:ba:83:c9:6f:db:85:cf:a4:
c5:b0:a5:a0:10:b4:dd:b9:1a:64:c5:a6:ac:4c:c9:
31:4b:27:f8:21:0b:f9:e7:82:8f:78:45:48:79:a7:
20:90:31:09:b4:44:f5:5e:58:1a:64:aa:36:1e:9f:
12:ea:f8:95:ed:ec:50:1f:94:7f:98:de:5c:90:5c:
d8:e0:7f:c8:06:bf:9a:e8:53:85:eb:72:39:a9:1d:
b5:16:d4:57:09:b9:8f:02:b8:6f:06:e4:1a:4b:a4:
5e:d8:c5:d9:b7:4f:c7:e6:fc:de:86:21:61:b8:e3:
6e:b8:d4:27:c0:e8:2f:ad:32:d4:6a:8b:89:bb:ae:
3b:72:e1:3a:19:dd:79:c2:15:7f:03:b3:6b:12:6c:
13:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:04:36:3F:4E:78:BF:33:8D:D9:54:F3:8B:64:54:9D:1E:A2:BF:93
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/iwQ2P054vzON2VTzi2RUnR6iv5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8c40::/48
Signature Algorithm: sha256WithRSAEncryption
3c:f2:b6:e3:40:78:c3:81:e5:e6:ea:96:7d:aa:f9:1b:2e:89:
4b:e4:0c:b9:f4:23:55:87:cd:95:c3:1a:28:42:27:40:59:67:
c2:50:83:09:d0:46:9f:d2:15:43:2d:f1:fe:4e:27:af:cc:de:
e7:07:72:98:29:28:8e:49:6c:df:65:1b:e1:88:0f:a1:d1:99:
95:a8:d5:2e:b0:be:0c:d0:63:bb:5e:f6:65:fc:21:4f:20:08:
89:a8:a6:4f:ac:b9:58:f9:a2:3e:eb:79:25:de:c1:9f:66:1e:
c1:c4:f7:74:3c:24:bc:3c:db:4b:bd:df:e7:20:b9:9a:61:8e:
a3:b7:74:cb:5b:cb:ed:2e:0e:1f:eb:80:58:ae:2b:80:a6:91:
0d:d0:e7:d2:2f:9f:c3:55:06:eb:ad:af:70:25:66:35:12:b8:
b9:aa:bc:f3:f2:03:af:ff:ef:a4:0a:d5:b3:f4:91:8d:a5:0d:
1f:9a:79:4b:7f:a7:ce:0b:43:73:4c:62:b8:1e:df:a4:61:d2:
09:f0:57:c0:b0:c7:b0:7e:f5:53:9f:d8:6a:8d:c7:8e:7e:ac:
14:a5:47:d1:24:36:4f:c4:ee:b8:1b:3d:70:bb:96:cf:40:db:
57:85:df:1a:a1:45:80:d6:cc:f1:6e:78:89:8e:58:41:00:29:
dc:54:bf:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:13:52 2024 by rpki-client on console-fra.rpki-client.org