Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/l2eXsrQXTbEnxYjnvcgPmy_tSAs.roa
File: l2eXsrQXTbEnxYjnvcgPmy_tSAs.roa (raw, json)
Hash identifier: xqE/Xi+rc/9mQNcgB1aN/Th7/Druiw6qdV88OeqDQnc=
Subject key identifier: 97:67:97:B2:B4:17:4D:B1:27:C5:88:E7:BD:C8:0F:9B:2F:ED:48:0B
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8E43A425BD17113552ADDEAC0720F
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/l2eXsrQXTbEnxYjnvcgPmy_tSAs.roa
Signing time: Mon 01 Jan 2024 20:30:54 +0000
ROA not before: Mon 01 Jan 2024 20:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202297
IP address blocks: 2a0c:9a40:8089::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:e4:3a:42:5b:d1:71:13:55:2a:dd:ea:c0:72:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=976797b2b4174db127c588e7bdc80f9b2fed480b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f4:83:0d:0d:0f:cf:63:75:af:98:98:ac:3f:
37:d9:d5:b0:cc:5a:f3:47:c7:33:2d:fb:a3:12:06:
1f:bb:12:23:00:01:34:80:c9:68:5c:59:80:20:49:
8d:92:39:41:e5:1a:b8:bc:6b:4f:3c:ad:92:49:de:
f6:62:65:e7:f2:b6:0d:63:23:ad:6a:53:9c:56:b3:
22:98:0b:c1:10:61:fd:e3:89:84:f6:69:9c:76:27:
85:be:67:78:17:9f:ef:77:ba:f7:38:5a:22:00:3b:
44:d4:e8:f1:f9:55:28:c4:8a:79:78:bd:56:81:20:
86:14:0d:23:95:f3:a6:2e:11:ff:9b:80:da:73:da:
bf:a8:8b:91:dc:c9:42:ae:41:f2:bf:fa:88:64:45:
29:20:e4:3d:15:79:d1:e1:79:30:5c:f3:7a:e7:34:
44:27:c2:63:b6:a0:76:be:56:64:ed:e4:ec:62:2d:
0b:27:32:2f:16:e3:c5:8c:98:7c:e6:0f:7b:7b:b2:
7c:e1:e9:26:fc:a0:65:2c:29:7a:21:79:df:5d:00:
42:a3:ab:7f:2d:d3:8c:ba:07:5d:93:ef:81:e2:21:
26:c8:fe:15:dd:50:7b:fe:90:9d:25:00:a8:0e:7f:
11:65:f7:44:d3:26:0c:18:80:4c:b5:a3:90:b1:03:
ac:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:67:97:B2:B4:17:4D:B1:27:C5:88:E7:BD:C8:0F:9B:2F:ED:48:0B
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/l2eXsrQXTbEnxYjnvcgPmy_tSAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8089::/48
Signature Algorithm: sha256WithRSAEncryption
d1:84:10:6f:29:15:12:9d:7f:1e:b2:0d:4e:bd:75:70:73:c6:
81:a4:33:1c:51:ff:89:05:01:82:50:7c:de:4a:85:49:96:ff:
25:0c:88:d3:85:0d:3d:a0:37:9d:3b:27:d1:e3:e2:9f:43:a9:
bd:e0:62:66:99:a4:78:08:85:f3:81:c8:b0:1f:b8:78:c4:6e:
16:64:5c:26:1e:21:a5:b0:de:a2:e2:7b:75:cb:68:e5:a7:fe:
ff:bd:d6:6d:5e:91:bb:70:08:55:e0:30:81:fb:29:17:34:4b:
f8:29:dc:86:9f:70:94:df:42:81:67:6d:0d:be:4b:ec:58:24:
d1:30:7b:8a:34:c0:3a:73:a3:6a:f4:7b:5d:75:fe:2e:9c:86:
af:b5:75:f1:14:12:e3:a4:f0:88:c1:1f:33:26:6e:52:ec:fc:
45:20:df:d0:20:59:af:6e:8e:f4:39:39:66:50:0b:d5:80:a4:
13:4b:9e:f4:50:77:5e:a5:d4:be:bc:f8:8e:fd:54:a9:a0:f3:
f6:62:50:90:d2:11:73:07:c0:e3:05:b9:92:7d:3e:ce:dc:5c:
bf:a2:a8:aa:f7:83:78:ef:c6:72:dd:bf:7e:c8:21:ab:1e:b6:
c1:08:52:2d:73:77:1f:c6:3f:8a:79:97:1d:e6:2f:4d:b1:01:
9f:a0:50:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:59:22 2024 by rpki-client on console-ams.rpki-client.org