Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Np9wBUdZO_PjqltowbEKKswqJEE.roa
File: Np9wBUdZO_PjqltowbEKKswqJEE.roa (raw, json)
Hash identifier: NL3j2AGkSIoBsAclIWGesWFGP/j6I+Q7ya49awvR2sY=
Subject key identifier: 36:9F:70:05:47:59:3B:F3:E3:AA:5B:68:C1:B1:0A:2A:CC:2A:24:41
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B7F672DA8CCF3130D29BA746B40EA
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Np9wBUdZO_PjqltowbEKKswqJEE.roa
Signing time: Mon 01 Jan 2024 18:31:25 +0000
ROA not before: Mon 01 Jan 2024 18:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15503
IP address blocks: 213.216.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:7f:67:2d:a8:cc:f3:13:0d:29:ba:74:6b:40:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=369f700547593bf3e3aa5b68c1b10a2acc2a2441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2d:66:bb:3d:d4:a6:60:55:24:1a:84:0c:d0:
a2:92:26:60:38:42:dc:7a:c2:10:48:a0:53:fe:e4:
c3:1b:55:1e:81:0d:0c:a0:c3:a5:25:ec:1b:44:b0:
e0:11:3e:a3:65:10:e7:32:9c:bf:87:f3:5a:69:73:
22:24:d0:20:5c:bc:19:17:83:2c:f0:73:22:b0:44:
c1:57:c3:98:5d:fb:d8:e1:fc:e1:04:37:aa:03:70:
57:79:c3:e1:bd:fd:85:4a:3b:2e:0d:52:f0:71:49:
62:bb:4d:68:66:3c:a5:25:41:51:c1:08:0f:d7:21:
08:70:69:56:bc:4d:bf:8a:17:c5:b4:3a:76:42:5c:
90:db:b5:44:a5:e5:c4:21:8f:b7:53:e5:ef:5c:7a:
31:33:31:12:91:ab:1d:d2:01:87:9a:4c:b0:a7:95:
1e:15:bb:6e:01:53:b7:da:36:00:06:f8:ba:6e:40:
c7:2f:c2:9e:94:11:d0:ae:ed:4d:04:9c:8d:0e:4a:
a0:8f:b6:79:d3:e2:22:09:1d:1d:e7:d8:4d:6c:55:
d0:c5:12:f5:28:5b:72:1b:43:44:67:b4:8c:29:0f:
25:f9:3c:96:13:ae:28:90:03:ad:52:e1:a8:ea:aa:
d5:f1:af:d3:e8:a3:d5:74:8f:55:a8:5d:9e:f3:69:
0a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9F:70:05:47:59:3B:F3:E3:AA:5B:68:C1:B1:0A:2A:CC:2A:24:41
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Np9wBUdZO_PjqltowbEKKswqJEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.216.65.0/24
Signature Algorithm: sha256WithRSAEncryption
36:1d:d1:3d:e0:76:59:74:8c:07:55:e6:a0:d6:af:3f:a7:c5:
ba:0e:ee:90:94:7a:b3:6f:a2:3d:94:30:a0:7d:17:25:af:8c:
e2:56:4c:1b:47:dd:2b:4e:11:d5:14:cf:bd:f8:ac:dd:d2:48:
25:b4:37:ca:d5:68:db:bf:09:85:b0:d6:62:f3:f3:7a:3a:1a:
6f:0c:34:82:6b:3b:39:a5:78:70:0c:bd:9c:f0:1c:ec:be:c1:
92:00:d0:69:bf:97:07:b3:0e:8d:70:86:a5:8c:0e:7b:b2:0a:
36:30:ea:21:70:1e:d8:71:16:ff:58:8c:0d:5c:79:8d:86:46:
94:58:85:46:67:1e:1c:14:44:6d:05:6e:d6:d8:d1:fd:3d:34:
fd:20:22:cb:b1:49:72:24:9c:12:9a:4f:00:17:b8:d7:ac:7b:
68:c2:ab:bc:3c:48:a1:a1:30:c6:c8:72:6a:8e:cf:f8:3b:7e:
d0:ab:1b:08:75:34:94:7f:20:23:2f:fd:1f:a3:8d:94:91:a2:
40:65:fd:32:bf:79:27:8d:58:8d:f7:00:31:77:9b:da:3c:a4:
35:3e:8b:4f:87:a2:a9:e9:6a:65:91:08:78:8f:ab:f9:fa:f1:
07:ff:c9:65:40:1d:25:19:d8:42:6e:cf:a6:76:89:bf:a6:6c:
be:fb:98:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:56:59 2024 by rpki-client on console-fra.rpki-client.org