Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/sV9w_Z5q82Tpd9HgDzsf8PsFRxs.roa
File: sV9w_Z5q82Tpd9HgDzsf8PsFRxs.roa (raw, json)
Hash identifier: AIR/zvxL61AK+WC7LynO1Wh1FBfsQDCiGHrVHG+wYOc=
Subject key identifier: B1:5F:70:FD:9E:6A:F3:64:E9:77:D1:E0:0F:3B:1F:F0:FB:05:47:1B
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018DEC53C0CDB11020E1D4A18181DDA2CC00
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/sV9w_Z5q82Tpd9HgDzsf8PsFRxs.roa
Signing time: Tue 27 Feb 2024 20:48:48 +0000
ROA not before: Tue 27 Feb 2024 20:48:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50917
IP address blocks: 2a0c:9a40:8520::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 06:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ec:53:c0:cd:b1:10:20:e1:d4:a1:81:81:dd:a2:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Feb 27 20:48:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b15f70fd9e6af364e977d1e00f3b1ff0fb05471b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1b:a6:20:f6:92:25:4a:c6:22:92:20:f6:a7:
73:fb:ad:76:58:54:71:b3:e2:9f:7d:eb:c2:37:b4:
8e:f4:a1:73:fd:4a:56:a2:53:8b:24:5e:cb:8c:fe:
d0:9a:ce:3e:c8:15:16:38:47:c2:27:14:91:72:f2:
99:7b:74:55:ea:52:95:40:99:82:91:eb:73:78:18:
15:4a:2c:4f:f3:25:90:f2:3d:1d:b5:ad:66:af:f4:
7c:9a:8a:68:c0:19:40:1d:7b:34:38:56:d4:4d:29:
a5:27:d5:ab:4e:f4:e3:46:6b:14:78:8d:e8:33:b6:
87:1a:0f:7d:b8:4d:59:bf:ac:50:a4:a5:54:25:0c:
eb:86:dd:8d:38:da:51:26:87:a2:2d:34:06:26:9b:
be:59:f7:84:7e:df:6e:4e:ba:0a:fb:58:97:5e:e0:
38:9c:9e:c2:03:40:cc:3c:64:72:0a:97:f5:0e:a4:
38:3b:45:e3:f1:4d:37:71:d1:aa:07:d7:4e:54:2a:
52:1c:2e:de:11:fb:3e:63:f1:94:e9:76:e0:1a:46:
55:1d:f6:87:6f:f7:48:55:32:21:a4:17:8e:5d:dc:
17:59:0e:28:ac:c7:fb:44:c4:1c:ae:15:28:e5:43:
29:6a:c4:46:a6:6f:91:88:40:f1:37:59:6d:1f:a6:
14:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5F:70:FD:9E:6A:F3:64:E9:77:D1:E0:0F:3B:1F:F0:FB:05:47:1B
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/sV9w_Z5q82Tpd9HgDzsf8PsFRxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8520::/48
Signature Algorithm: sha256WithRSAEncryption
8a:cf:94:41:da:f6:33:8e:a0:55:03:64:a5:5e:8f:94:39:19:
c8:de:66:b1:73:7c:22:a3:31:34:79:e9:5b:eb:25:84:18:e1:
50:72:b0:5b:29:d9:e1:51:f6:13:02:a1:90:fd:f9:84:55:7d:
3b:7f:88:7a:98:95:f2:46:a7:f7:46:53:ab:3f:fc:70:28:e2:
27:dc:bb:0f:f2:e2:1c:ad:8b:7b:26:8d:33:9c:85:bd:c0:67:
99:ee:46:eb:a3:00:0d:3d:52:f0:04:c9:c3:d0:19:a2:93:13:
ec:6d:b6:3f:80:fc:db:bc:cc:b4:3a:ba:c5:4e:dc:72:26:ae:
9e:89:64:05:94:1f:4d:5d:51:87:fb:b9:81:d8:da:9c:05:dd:
3e:a6:8a:52:04:03:90:da:10:fe:16:8e:4a:06:88:4d:53:d4:
cf:ea:86:d9:f0:45:3a:2b:61:fa:6a:14:09:c2:7d:5f:e5:25:
d7:80:44:ad:7c:9d:86:77:8b:23:37:f1:d6:cc:46:9a:a2:31:
69:e6:0c:cb:9b:e2:e9:ae:0d:02:50:58:47:d3:cb:21:92:e3:
e1:2f:d3:ec:1c:3a:81:a1:14:80:46:e1:18:f4:e0:d0:ef:71:
b8:05:a7:a5:89:1d:df:02:db:61:a1:de:72:f1:5a:a9:a9:05:
21:24:c7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 13:15:18 2024 by rpki-client on console-ams.rpki-client.org