Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/vpu-l8sPco2K9cu1aNHZLB_qRSM.roa
File: vpu-l8sPco2K9cu1aNHZLB_qRSM.roa (raw, json)
Hash identifier: 2qLrQeOLQ83VN0CA95biqOmrNxEtgxXmX2HsIpFVJmc=
Subject key identifier: BE:9B:BE:97:CB:0F:72:8D:8A:F5:CB:B5:68:D1:D9:2C:1F:EA:45:23
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018D22E6DE4EACEC1D763251EB7883B34E6A
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/vpu-l8sPco2K9cu1aNHZLB_qRSM.roa
Signing time: Fri 19 Jan 2024 18:06:11 +0000
ROA not before: Fri 19 Jan 2024 18:06:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 2a0c:9a40:83c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:22:e6:de:4e:ac:ec:1d:76:32:51:eb:78:83:b3:4e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 19 18:06:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be9bbe97cb0f728d8af5cbb568d1d92c1fea4523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:02:55:a0:a6:e1:d8:fd:ff:aa:fa:27:9f:9d:
3d:6c:2c:3f:3f:22:0f:d5:7a:6e:3c:4e:00:eb:cb:
8a:be:1a:40:84:be:25:fc:68:59:f8:21:2c:99:fe:
35:05:65:de:aa:8c:b7:7d:da:bb:fa:0d:ec:73:c0:
d4:d2:c7:4c:e2:f2:d3:28:84:a0:73:75:3b:04:57:
3c:75:29:e6:be:aa:41:f3:50:27:56:cc:e3:8d:8a:
b2:0d:a7:6a:ba:ab:2d:57:3b:89:c6:99:3e:70:5b:
c7:93:5e:23:6b:9e:79:99:03:f6:d4:69:18:cc:c9:
0a:4d:be:d8:20:f8:07:b2:7d:01:38:1a:e9:40:b9:
51:e9:15:12:b4:7a:62:76:c4:37:5b:54:d4:76:cd:
67:21:94:bc:1c:f0:c0:9d:9b:47:0f:48:03:35:ea:
41:ea:9d:6f:f7:7b:65:1d:9f:51:68:df:7c:bb:47:
c4:b6:7c:75:8a:4c:7b:e4:0a:17:d3:4b:3f:f3:7e:
17:1f:13:44:cb:76:fb:fa:c6:16:86:d0:f8:05:d9:
5d:a9:ad:28:c3:7b:92:be:16:34:86:b8:b0:d8:8c:
57:7c:3b:41:8e:91:b1:50:dd:bf:e7:20:67:31:4e:
5c:e8:00:9c:d0:8c:88:12:47:3a:85:f3:e5:b3:fc:
71:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9B:BE:97:CB:0F:72:8D:8A:F5:CB:B5:68:D1:D9:2C:1F:EA:45:23
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/vpu-l8sPco2K9cu1aNHZLB_qRSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:83c0::/48
Signature Algorithm: sha256WithRSAEncryption
5e:b6:63:09:12:14:e4:0d:12:3e:b1:cf:6c:be:3b:0a:17:ff:
6d:bf:51:a6:46:e3:e4:4d:fe:54:9b:f5:88:79:c1:a6:82:dd:
0f:69:cf:2e:0a:f4:5e:85:6d:aa:35:d3:54:56:70:55:7e:7d:
0d:6b:e8:0f:12:7d:ff:b2:ea:c2:1c:1a:5b:3e:b8:76:f4:62:
d9:14:8b:21:98:39:29:04:a0:9e:1a:95:5a:c2:c9:11:f5:ac:
47:b8:8c:15:c5:f5:de:3c:f4:48:13:87:b1:81:6d:8c:08:b2:
44:a1:d1:71:4f:e4:df:72:36:7a:86:d3:30:08:96:20:e2:46:
ac:16:00:30:80:0e:aa:42:e0:64:a3:71:55:59:89:98:e8:3a:
9f:69:6c:03:6d:54:d7:8f:d5:bb:62:d9:b4:1e:b0:3c:95:e1:
ca:18:6f:37:d8:b7:14:c3:7d:fb:64:c8:a4:2f:a6:f0:43:90:
90:63:aa:93:75:77:d2:f1:40:5c:70:c9:2d:56:9d:31:89:6f:
2c:c5:d7:24:49:88:b8:93:e0:2a:e8:30:4e:50:2f:ed:5c:fc:
5f:21:62:57:f7:0e:20:17:8a:71:d4:e2:28:3f:64:88:08:fe:
54:7a:51:ce:95:6f:d2:83:7a:e0:29:a7:39:e1:6d:43:e7:01:
5a:4e:f8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:35:11 2024 by rpki-client on console-ams.rpki-client.org