Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/m-LpYapnSdCJzKWk2xzexUp2fes.roa
File: m-LpYapnSdCJzKWk2xzexUp2fes.roa (raw, json)
Hash identifier: 4y2XyVBZuZsM4SUdEmcs0nDofBeBjYmBa3UBc9IuwYo=
Subject key identifier: 9B:E2:E9:61:AA:67:49:D0:89:CC:A5:A4:DB:1C:DE:C5:4A:76:7D:EB
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 018CC49307D8C0942F52D3E4DE8CF7CC7B67
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/m-LpYapnSdCJzKWk2xzexUp2fes.roa
Signing time: Mon 01 Jan 2024 10:30:19 +0000
ROA not before: Mon 01 Jan 2024 10:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13068
IP address blocks: 2a01:190:1505::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:07:d8:c0:94:2f:52:d3:e4:de:8c:f7:cc:7b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jan 1 10:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9be2e961aa6749d089cca5a4db1cdec54a767deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:cf:7c:8a:3b:54:38:06:09:38:80:3d:9b:
99:de:5b:89:b4:76:0e:bf:c7:e0:46:06:9d:32:32:
02:9e:6b:24:47:eb:aa:29:ff:08:5c:44:cc:d7:2c:
81:18:88:16:bf:cd:25:47:8e:59:2f:59:ac:10:39:
b9:a5:fd:e9:64:cc:5c:96:fb:04:76:85:ad:87:a1:
57:d5:56:5b:89:03:21:23:df:a5:c9:e7:2d:02:79:
8c:34:87:46:c5:31:98:46:41:ef:86:0c:a8:fe:5a:
98:5a:3f:d6:6c:48:7a:4d:ae:3f:02:7f:1b:76:54:
fe:9f:f6:bc:da:5e:46:3f:50:45:d5:11:fe:ef:f0:
84:cd:dc:ec:44:0a:51:b1:ae:7c:82:da:3c:8c:8d:
35:1e:a2:50:84:44:84:4c:76:42:68:e7:a9:c8:47:
20:c1:4a:b3:57:a7:f0:6a:9b:fd:e4:c2:81:e9:de:
c0:0e:95:4b:50:e9:01:98:26:f3:18:85:fc:e1:59:
c3:25:00:16:55:0d:c4:da:62:66:cd:0e:e8:78:24:
68:90:79:d3:36:d5:bf:81:9d:80:cc:d5:c0:63:7e:
1a:d8:b0:6f:68:93:91:e1:0c:5e:5d:f9:3e:f9:26:
4e:34:b7:f6:4e:2c:18:1e:59:45:fd:17:7f:4a:42:
37:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E2:E9:61:AA:67:49:D0:89:CC:A5:A4:DB:1C:DE:C5:4A:76:7D:EB
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/m-LpYapnSdCJzKWk2xzexUp2fes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:190:1505::/48
Signature Algorithm: sha256WithRSAEncryption
22:14:fc:dd:c4:c1:35:d2:ed:99:a3:37:f1:5e:06:58:2c:a7:
61:ea:ae:c1:e6:02:2d:6c:0e:4c:9c:39:23:63:56:5f:e7:e0:
b0:2b:67:2e:de:5a:41:cd:3f:ef:14:97:64:79:69:80:64:7a:
2c:2e:fd:37:8f:42:8c:8e:df:00:2c:e4:85:d3:df:85:db:f1:
06:19:35:56:d5:14:5f:f8:25:40:41:9c:29:9a:1b:e2:f2:55:
7a:c7:67:0e:a6:e8:34:70:3a:e2:6b:32:3d:0e:ef:5e:8a:00:
d5:87:b0:13:15:9f:9c:60:9e:69:8e:53:1d:8a:3a:12:2f:32:
87:90:e5:f1:e1:24:cf:03:ce:bc:f0:f0:5e:e1:79:07:2b:87:
f5:e0:68:03:20:24:55:3a:f4:e4:27:37:d0:05:0a:4e:67:fe:
a1:18:b7:86:89:c6:db:f6:7d:d4:91:2e:c0:98:8c:53:cb:b4:
b7:2d:08:9c:85:45:25:22:bf:71:13:ae:b9:62:d8:0c:0e:8d:
b0:ea:cb:e7:92:65:7f:b4:f4:d8:12:42:61:a8:c4:ce:5e:69:
50:19:b0:a4:66:0e:cd:28:bb:2c:a0:9b:ee:b5:a1:fd:04:43:
e0:0c:93:79:86:21:1d:8a:e4:cd:8a:ab:e7:e9:c9:ef:52:b3:
79:78:40:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 09:11:08 2024 by rpki-client on console-ams.rpki-client.org