Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/lvTCY8HtpCV1eJL_p1iA8bhhr6s.roa
File: lvTCY8HtpCV1eJL_p1iA8bhhr6s.roa (raw, json)
Hash identifier: BIY7QQpuwp8q0c5rUjbjFmMIYvX7tM77sd2Dqcax3J0=
Subject key identifier: 96:F4:C2:63:C1:ED:A4:25:75:78:92:FF:A7:58:80:F1:B8:61:AF:AB
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8E795532880FB9C097A9CD3E17B8E
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/lvTCY8HtpCV1eJL_p1iA8bhhr6s.roa
Signing time: Mon 01 Jan 2024 20:30:55 +0000
ROA not before: Mon 01 Jan 2024 20:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205329
IP address blocks: 2a0c:9a40:8440::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:e7:95:53:28:80:fb:9c:09:7a:9c:d3:e1:7b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96f4c263c1eda425757892ffa75880f1b861afab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:53:c3:1c:1e:5a:c3:d2:16:4c:db:7a:fd:40:
3b:e7:27:7b:64:07:b6:fd:a9:81:bb:43:8b:3a:c0:
c1:9b:e0:89:b5:00:3d:65:71:df:2d:cb:06:6a:5c:
11:4b:f7:cd:47:9e:d0:b7:ee:a7:f4:51:bd:66:25:
43:42:dc:e1:e6:e3:38:13:b6:e5:9a:84:43:90:31:
5e:a5:ac:60:df:f7:4d:90:91:83:b7:1e:a7:a8:36:
dd:5c:06:f0:ab:e2:11:2c:f0:ff:79:6e:5f:d0:39:
b0:11:f5:b3:f8:36:71:4e:01:72:b8:8e:4d:a9:9b:
a7:8d:ad:f2:e6:70:3c:ae:ae:1f:53:4f:0c:8a:44:
d1:9a:8c:b0:26:2c:f1:d1:21:e2:e9:36:fd:27:fc:
ae:ff:d8:43:f6:9a:3e:72:ae:34:73:c7:19:d4:b1:
28:43:3a:73:ad:e7:1a:81:a2:98:e8:53:32:49:7c:
18:0f:95:2f:ce:e4:cb:08:13:81:c2:38:74:a2:5d:
9e:cc:de:09:a9:37:6f:3f:57:96:b1:9e:36:20:c3:
65:68:bc:da:39:3b:d5:10:22:31:aa:79:0c:72:a3:
5d:2d:3d:42:b8:4c:32:cf:ec:ef:4e:24:46:19:2a:
b0:a8:1f:3d:8f:a4:a3:35:f0:60:58:8f:d6:ce:37:
fe:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F4:C2:63:C1:ED:A4:25:75:78:92:FF:A7:58:80:F1:B8:61:AF:AB
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/lvTCY8HtpCV1eJL_p1iA8bhhr6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8440::/44
Signature Algorithm: sha256WithRSAEncryption
7b:81:43:e4:52:4a:66:76:16:ad:bb:b6:d5:58:c1:9b:d9:b1:
d6:2b:02:ec:ea:c1:8d:60:b0:89:1f:2b:a0:79:d1:e5:de:9f:
ca:22:66:bf:ee:ad:d2:aa:58:52:13:8d:ee:d3:46:9f:26:79:
e5:3b:24:d8:5c:c0:ec:6b:97:37:67:7f:ac:d0:82:4f:75:8f:
2b:22:02:16:5e:4c:03:2c:2b:83:98:b6:a2:36:1f:4a:61:c5:
e1:25:f2:8e:7b:81:41:72:4a:91:6e:0e:ef:b6:77:15:5b:79:
f1:25:9a:f9:61:53:a3:6e:80:e3:0b:67:56:e9:4a:71:0c:11:
a8:7a:e1:20:83:d4:19:eb:37:54:21:ab:c1:37:56:63:7b:e4:
99:de:99:d7:49:72:75:6a:41:ac:53:cf:48:58:f0:e7:14:da:
e6:22:4a:6a:20:da:ea:38:f7:eb:d2:45:3b:58:fc:27:1e:86:
04:f7:e6:58:10:15:87:9e:93:0a:98:39:5a:25:e6:c6:42:fd:
9d:20:b3:ec:5c:ee:c7:ca:ab:0a:4c:95:c6:33:fe:a1:f2:69:
69:6b:89:2f:6f:71:d9:33:0d:09:7f:71:76:1d:1a:12:33:60:
81:bb:dc:0c:2f:2e:94:4f:59:39:9c:7e:77:32:e6:6d:c7:58:
2b:ff:a6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:18:41 2024 by rpki-client on console-fra.rpki-client.org