Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/r8E51qLYjVmA9MNOAF0-Mep2yrc.roa
File: r8E51qLYjVmA9MNOAF0-Mep2yrc.roa (raw, json)
Hash identifier: yctgB3ISRmt4Br2TGvfpvddrN8zvqPh4TZ8gLnEQc+w=
Subject key identifier: AF:C1:39:D6:A2:D8:8D:59:80:F4:C3:4E:00:5D:3E:31:EA:76:CA:B7
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8DAFC71FE59669649B58AB6778E8A
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/r8E51qLYjVmA9MNOAF0-Mep2yrc.roa
Signing time: Mon 01 Jan 2024 20:30:52 +0000
ROA not before: Mon 01 Jan 2024 20:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142036
IP address blocks: 2a0c:9a40:82e0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:da:fc:71:fe:59:66:96:49:b5:8a:b6:77:8e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afc139d6a2d88d5980f4c34e005d3e31ea76cab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:43:cd:4b:02:d1:52:ce:30:90:7f:f5:07:88:
74:50:da:74:9a:0e:03:ea:ea:05:0f:85:93:2f:09:
1c:a3:cf:e0:8b:05:92:c9:89:07:a9:6e:a4:68:d0:
2e:95:40:3d:cb:0a:fc:bf:b6:de:2b:09:36:68:b9:
54:bc:fc:58:f1:a2:71:ee:19:a3:cd:6b:f1:5d:6b:
1f:8b:73:37:b1:43:57:68:0b:6a:dd:77:71:b8:fc:
3e:df:74:d5:f7:bf:90:03:f4:68:ef:e7:d7:77:83:
d6:61:9f:ba:76:bd:98:d0:c3:23:ff:d7:17:68:54:
88:47:17:ce:ae:01:a6:f7:c6:bf:aa:28:e7:23:0e:
67:99:de:17:82:91:e6:81:8c:04:89:df:53:36:b2:
e0:0f:d7:5d:af:9c:c2:8f:9c:bc:59:14:6f:9b:ff:
51:a4:6e:4a:70:5b:ce:20:86:3d:d3:d8:ba:72:36:
ab:10:17:7f:85:c0:3a:0b:48:aa:a3:aa:56:4a:4a:
b2:db:bd:63:3e:ce:c7:1f:a4:ac:9e:29:2f:51:9c:
c2:56:c5:c5:a6:72:72:be:26:38:2a:29:ac:a2:f2:
ce:00:d0:3e:42:62:e6:88:ad:17:29:28:29:6f:93:
2a:5d:fa:5f:15:96:cd:4e:a0:fd:17:5b:b3:c8:44:
ca:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C1:39:D6:A2:D8:8D:59:80:F4:C3:4E:00:5D:3E:31:EA:76:CA:B7
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/r8E51qLYjVmA9MNOAF0-Mep2yrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:82e0::/44
Signature Algorithm: sha256WithRSAEncryption
34:bd:84:e1:8d:ac:bc:13:04:4b:ab:2f:e5:4f:d3:c1:1d:a1:
3a:30:29:fb:b8:e4:6f:ef:3e:b4:b1:db:7e:49:b4:f2:d9:b1:
74:bb:27:70:d2:7c:ff:13:3c:b5:cf:2a:e3:47:26:a7:fb:88:
d2:12:20:10:d6:d9:54:6f:c2:9b:6c:2b:c9:e4:13:1b:ef:a4:
c8:3f:ad:21:cd:64:07:9f:31:79:98:4d:e8:28:42:25:40:78:
dd:1f:70:74:b3:c7:0f:c5:47:db:30:59:ff:4c:1b:59:00:7a:
a8:8b:df:ce:e1:40:7f:3c:a4:27:ed:05:a7:0c:c2:a7:8b:6d:
e2:e5:b9:8a:2d:29:9e:55:ff:4c:7f:3b:5b:02:a0:c6:24:33:
7a:15:d4:7e:e4:a5:0d:a3:51:b9:f4:e3:04:af:97:c4:57:e8:
d0:cf:5a:e2:a7:af:f2:7c:e8:9f:91:dc:00:3d:c0:27:76:7c:
46:4f:50:68:3c:25:8c:f4:8d:eb:b0:0d:d6:04:3c:68:ba:f7:
f4:16:f9:1b:5c:80:b6:5b:d2:9f:e2:6c:7e:7b:6b:79:fb:88:
8a:28:07:6e:df:48:d5:99:75:97:be:4b:e0:a5:e8:26:00:4c:
50:31:4f:ad:d0:95:28:13:40:be:f6:7c:36:e3:e4:7e:80:5a:
31:b3:02:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:41:17 2024 by rpki-client on console-fra.rpki-client.org