Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/nwph0LjA11HZtET0d9yGzTpn7nY.roa
File: nwph0LjA11HZtET0d9yGzTpn7nY.roa (raw, json)
Hash identifier: sai93Y6+DW+ZneyvvhAZnaktfIfkh4cpCa+3fHKQVm8=
Subject key identifier: 9F:0A:61:D0:B8:C0:D7:51:D9:B4:44:F4:77:DC:86:CD:3A:67:EE:76
Certificate issuer: /CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
Certificate serial: 018CC6B7CBF7CEBF13CC86C5BC1468124D1E
Authority key identifier: 41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/nwph0LjA11HZtET0d9yGzTpn7nY.roa
Signing time: Mon 01 Jan 2024 20:29:43 +0000
ROA not before: Mon 01 Jan 2024 20:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29289
IP address blocks: 109.205.46.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:cb:f7:ce:bf:13:cc:86:c5:bc:14:68:12:4d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
Validity
Not Before: Jan 1 20:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f0a61d0b8c0d751d9b444f477dc86cd3a67ee76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:42:83:c9:b1:16:19:d1:ba:a0:ed:9d:32:51:
06:55:51:44:0b:59:1f:a4:76:31:33:a3:b0:76:a8:
c7:48:35:71:da:c1:37:93:8f:4c:39:7b:7e:a4:45:
c6:91:8d:7c:cb:dd:21:fa:c7:a9:54:18:2b:bd:8b:
f0:d1:7d:a6:dc:95:66:bc:82:11:b4:ed:75:ea:44:
50:4f:50:f2:d9:c7:ed:a4:5c:18:4a:0b:c3:98:5b:
d6:35:01:9f:7c:26:1b:a9:13:1d:12:65:62:b2:2f:
8e:a1:07:af:ee:bf:97:fb:76:a2:7e:d3:ef:6e:d6:
ab:0b:87:3e:92:66:cf:16:6e:9b:f9:fa:4c:1b:b3:
30:64:ca:02:fc:a8:16:71:3f:52:2a:23:c3:74:13:
b9:ac:0b:0b:b3:68:10:e5:05:aa:a2:d2:3f:95:cc:
17:9e:aa:f9:0a:dd:1a:37:e5:59:1d:93:fe:60:2c:
b0:9e:84:31:72:95:ef:13:62:4f:36:a5:25:28:ce:
36:c2:53:e3:47:94:51:b2:f7:9d:23:25:c0:a3:ef:
5c:f3:c7:5e:cf:01:50:99:0e:07:77:bb:a7:86:95:
11:a4:e6:f8:a5:03:70:b2:9a:ee:76:19:b6:fb:11:
9c:bb:c7:3c:be:84:72:dc:cc:81:18:36:fa:bd:44:
61:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0A:61:D0:B8:C0:D7:51:D9:B4:44:F4:77:DC:86:CD:3A:67:EE:76
X509v3 Authority Key Identifier:
keyid:41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/nwph0LjA11HZtET0d9yGzTpn7nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.46.0/23
Signature Algorithm: sha256WithRSAEncryption
67:29:2d:da:61:0e:f5:02:e9:85:99:7f:61:97:b4:6f:95:98:
b5:a4:fe:b4:d2:43:89:9a:6f:c7:c7:e3:c6:9f:eb:48:82:be:
cc:af:cf:a2:c6:0d:e8:66:57:8e:84:4e:6f:37:ae:fc:f0:a3:
ae:3a:90:72:18:eb:96:e4:3a:42:25:53:cd:0d:14:5c:3f:c6:
4c:ca:75:1b:13:2b:45:5d:34:a8:54:50:93:9a:b4:f2:1d:fe:
e4:a3:fe:3c:fd:35:99:12:86:f8:6d:74:66:25:07:59:4d:c0:
b2:02:e9:38:63:81:0d:f7:24:91:79:e3:1d:19:96:eb:5f:e7:
af:bf:87:04:64:00:6e:50:11:f3:fd:a4:45:58:49:e3:18:84:
23:72:07:00:69:bc:85:e8:a7:fa:37:99:51:d7:01:f3:bc:32:
ba:24:6b:2b:75:3c:6d:b4:0b:a1:a4:ff:2c:c6:0f:fe:ea:45:
47:31:b8:4f:0f:32:5e:49:58:22:be:b8:41:8b:ed:63:08:1b:
a1:36:c3:65:12:e4:f1:10:fd:d7:65:93:a6:99:0e:bc:52:42:
30:b3:47:9b:99:3c:d7:dc:19:8a:de:7c:4f:7e:f1:ce:8d:6b:
fe:ed:fd:ca:04:98:a2:c0:2c:2b:fd:ba:83:fb:b2:d2:74:44:
3d:63:16:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 03:06:38 2024 by rpki-client on console-fra.rpki-client.org