Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/npEpsqFcb-0hsZ0um-1TKUpqKW4.roa
File: npEpsqFcb-0hsZ0um-1TKUpqKW4.roa (raw, json)
Hash identifier: i2ZOe7Ddd8YcYuz6R1bUt10gldu9uIxTo6kCxdsDVbk=
Subject key identifier: 9E:91:29:B2:A1:5C:6F:ED:21:B1:9D:2E:9B:ED:53:29:4A:6A:29:6E
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 018CC8DEE9D95A313A1D97301CC857F32A9E
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/npEpsqFcb-0hsZ0um-1TKUpqKW4.roa
Signing time: Tue 02 Jan 2024 06:31:41 +0000
ROA not before: Tue 02 Jan 2024 06:31:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12998
IP address blocks: 2a0a:2c0:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:e9:d9:5a:31:3a:1d:97:30:1c:c8:57:f3:2a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Jan 2 06:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e9129b2a15c6fed21b19d2e9bed53294a6a296e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:40:f2:82:01:f3:1d:07:92:fe:89:5f:e2:09:
2e:ce:96:55:3a:e2:23:22:03:12:8f:6f:b3:67:b9:
78:b5:0d:99:dc:f7:87:a2:93:45:af:a3:2a:1e:a2:
81:01:48:f1:83:4c:06:51:01:9e:e0:1e:50:34:bd:
06:ea:74:0d:75:03:ee:57:73:10:21:15:ba:cc:0a:
0d:d9:82:5d:cf:3a:82:87:fc:3a:b7:e5:eb:f9:06:
99:af:64:41:7e:ed:e4:5d:92:47:98:98:02:6a:23:
70:d3:b0:e3:bc:73:5d:03:82:e8:63:c7:f0:aa:f7:
8a:80:23:85:23:4c:15:f7:98:2a:9d:bb:3a:84:0a:
28:70:ab:e1:56:d1:23:0f:27:ab:4c:3e:c0:90:ef:
0d:0c:29:6d:0d:9c:ba:8a:95:0f:ec:a5:8b:ad:4f:
39:3a:c3:82:5d:98:36:4f:2f:3b:8a:10:5b:17:5f:
c0:20:3d:eb:30:4f:cb:23:e8:f5:b6:46:5f:f7:42:
09:0d:e8:92:5c:fe:64:ad:25:72:e1:e0:be:ab:fd:
a5:4e:63:31:ea:37:bd:7c:54:60:a1:94:74:dd:35:
cd:f9:ce:84:47:cd:db:6e:a4:02:77:7c:73:65:97:
08:74:fc:1d:c7:e2:1c:b7:7a:88:4c:3a:80:ab:fe:
58:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:91:29:B2:A1:5C:6F:ED:21:B1:9D:2E:9B:ED:53:29:4A:6A:29:6E
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/npEpsqFcb-0hsZ0um-1TKUpqKW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2c0:5::/48
Signature Algorithm: sha256WithRSAEncryption
50:8a:9b:d0:da:37:31:40:5e:0c:da:c0:be:fd:d4:49:06:f0:
0b:7d:4a:dc:ce:9a:ff:54:49:f8:be:f5:2d:c5:f1:af:af:36:
4d:58:9d:a2:09:dd:1f:e1:8f:8c:da:92:67:39:da:9c:11:10:
03:cf:a3:e8:b9:82:9c:19:c1:b3:5d:d2:2c:ef:b9:a1:c6:1d:
c4:2d:d4:62:18:01:df:3f:f9:b4:31:1c:5d:fe:2a:e3:8d:1b:
99:4d:ae:27:29:72:3a:92:5f:76:f2:e8:d9:20:b8:31:73:c2:
f7:a0:39:9f:0d:a5:61:5d:f8:79:18:9f:6f:f9:dc:71:a7:ae:
14:12:eb:0f:18:a4:38:5a:9b:97:d9:1a:50:52:ce:9d:5d:78:
da:18:b0:a8:20:4e:39:49:df:9f:f3:a6:c9:f7:ed:18:57:67:
be:f0:99:70:9f:48:58:cc:28:ad:3c:8e:9f:53:c0:a7:bd:05:
99:24:da:aa:54:3d:d2:b2:b5:d5:57:87:1e:8a:49:59:43:0a:
29:96:74:03:d3:4e:b1:15:3a:04:2e:ea:77:a4:b8:36:9a:05:
d5:19:b0:a7:10:ca:d5:cc:e5:7f:e9:f0:59:8b:96:0f:a8:71:
f0:f9:62:d9:51:0b:14:58:ae:73:93:99:7f:e6:48:82:e8:b2:
af:11:9d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:54:26 2024 by rpki-client on console-ams.rpki-client.org