Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/rc3XDKDZy6g6JsHlqK2EKswuLOI.roa
File: rc3XDKDZy6g6JsHlqK2EKswuLOI.roa (raw, json)
Hash identifier: uBSdxnBecrSQ/r50ynfXXSC/sCMS6XXEEJIMgUb6XGw=
Subject key identifier: AD:CD:D7:0C:A0:D9:CB:A8:3A:26:C1:E5:A8:AD:84:2A:CC:2E:2C:E2
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8E62CD4C227356C946B2C63AE4E68
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/rc3XDKDZy6g6JsHlqK2EKswuLOI.roa
Signing time: Mon 01 Jan 2024 20:30:55 +0000
ROA not before: Mon 01 Jan 2024 20:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203314
IP address blocks: 2a0c:9a40:9500::/40 maxlen: 48
2a0c:9a40:8c90::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:e6:2c:d4:c2:27:35:6c:94:6b:2c:63:ae:4e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adcdd70ca0d9cba83a26c1e5a8ad842acc2e2ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:94:0c:eb:d1:bd:38:e8:e1:47:d9:e5:45:4e:
c6:3d:bd:c6:79:d8:c9:b1:01:99:83:f9:fa:1a:60:
cd:19:f1:21:4f:0c:ee:34:73:f4:c2:60:1b:f8:60:
79:dc:1e:9c:e0:78:b4:db:fb:a5:8e:f9:2c:12:59:
cc:f4:14:f5:89:64:52:e4:2e:5b:71:72:d5:cb:71:
6e:25:f8:7a:15:6a:56:0a:58:fe:00:eb:59:d1:f6:
67:1b:7d:c2:6f:da:e5:d4:94:9f:13:94:2a:14:16:
f5:0e:0d:dd:ec:0b:55:83:06:ad:17:cb:41:1d:09:
73:27:52:55:b1:dd:d7:c3:01:dd:f6:68:27:da:30:
92:d1:6e:8e:4b:84:dd:65:c0:ad:e5:9d:7a:b5:cf:
43:f8:87:ad:b3:4d:82:f0:d2:eb:b0:46:2b:ed:02:
af:15:2e:bb:ee:3d:19:b9:6e:f9:0a:d5:a8:1f:62:
ec:c1:5b:51:92:32:5e:31:28:00:1f:0c:8a:63:61:
fc:ea:a3:ba:c0:7f:90:e5:55:43:06:aa:fe:2a:f3:
cc:c7:dd:ea:76:02:f6:da:4b:ea:b1:59:48:22:f6:
4e:c7:5a:cc:e0:61:95:30:e0:ac:3b:a5:a1:fc:8f:
03:cd:1b:a6:7d:48:6d:ed:dc:fe:70:69:ae:bb:2c:
dd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CD:D7:0C:A0:D9:CB:A8:3A:26:C1:E5:A8:AD:84:2A:CC:2E:2C:E2
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/rc3XDKDZy6g6JsHlqK2EKswuLOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8c90::/48
2a0c:9a40:9500::/40
Signature Algorithm: sha256WithRSAEncryption
d1:3f:13:d1:68:7c:86:f6:8e:db:53:74:6a:1b:90:65:80:ac:
46:8c:4a:58:77:f4:d2:b7:e7:7e:d9:a7:0f:e2:25:5d:7d:29:
4f:9e:4d:c0:79:ab:aa:79:4f:f9:a9:17:b2:7a:d3:99:74:7e:
84:cf:5b:21:87:87:e5:67:ad:53:23:14:f9:69:28:ad:2d:1e:
41:91:a5:27:70:83:0b:6a:4e:3f:29:20:08:93:97:44:5c:63:
81:40:0d:4d:57:3a:88:16:52:0a:cd:ca:1a:37:7b:4d:a8:0a:
7b:9d:60:e2:39:df:62:cd:96:3e:1f:8c:bc:b5:89:7e:94:57:
8d:67:4a:bc:db:d1:9a:41:49:d0:f3:46:00:ca:ee:f0:c1:29:
78:e3:d3:04:cf:07:e2:cb:0d:e5:fe:52:a3:9e:d0:49:a9:d9:
8c:46:e4:17:29:6d:43:c4:fe:c6:8a:8a:d4:76:96:69:36:a3:
0e:7d:9e:01:56:29:3f:42:bc:79:d9:66:3c:d5:06:44:8f:b5:
c1:8b:79:29:02:56:af:5b:e0:1b:c9:22:13:6e:24:a9:78:c2:
49:2a:54:dc:5a:3b:d5:14:d6:68:5b:69:ed:c8:10:9e:5c:cf:
60:4f:2c:bc:2e:7c:d5:02:9a:31:a5:7c:cc:92:da:34:a1:74:
a8:4e:6b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:50:10 2024 by rpki-client on console-ams.rpki-client.org