Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/1-nyupKjJONGvb2Uy1IcCULIZ_us.roa
File: 1-nyupKjJONGvb2Uy1IcCULIZ_us.roa (raw, json)
Hash identifier: cieqDJzHpEZywdTqDx6jnYy3G1XC3zDN6vWU5dIY49s=
Subject key identifier: FA:7C:AE:A4:A8:C9:38:D1:AF:6F:65:32:D4:87:02:50:B2:19:FE:EB
Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Certificate serial: 018CC6B8FF32A4798608457A2695AFA17146
Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/1-nyupKjJONGvb2Uy1IcCULIZ_us.roa
Signing time: Mon 01 Jan 2024 20:31:01 +0000
ROA not before: Mon 01 Jan 2024 20:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29063
IP address blocks: 2a01:8180:3000::/36 maxlen: 42
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:ff:32:a4:79:86:08:45:7a:26:95:af:a1:71:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Validity
Not Before: Jan 1 20:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa7caea4a8c938d1af6f6532d4870250b219feeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:fb:3e:4b:fa:f7:26:32:f7:6d:e0:31:9b:
1c:da:cd:29:77:3d:1b:28:20:a5:ea:4f:67:88:94:
0d:9b:be:6a:70:a9:7f:a9:00:02:c6:5d:7b:e8:b7:
22:2e:eb:02:2a:9b:75:40:87:09:a5:ad:27:78:a4:
13:0a:dd:52:54:cc:91:cc:54:02:79:27:1b:b5:9a:
db:47:f3:79:95:56:21:d0:e9:6e:c8:d6:25:f6:00:
ef:23:be:3b:6e:01:13:14:59:b7:0f:c8:82:33:97:
04:9c:5e:d3:cf:34:2b:bc:0a:53:ca:45:fa:fd:a0:
6f:b3:af:97:8b:94:14:02:53:92:48:bc:75:dd:21:
b3:4d:31:1d:83:84:8b:d6:e9:b7:3c:51:ff:ee:1e:
8c:4b:35:56:58:c1:c0:b8:12:5b:16:7d:e2:16:76:
0c:3a:69:21:e4:69:37:aa:a2:e9:1a:b3:17:08:2d:
80:41:e2:95:af:9a:47:d5:ce:e8:d5:fe:01:cf:a4:
0d:80:92:2b:6f:e3:50:5d:9c:fd:17:bd:10:d4:74:
3c:50:1e:bf:6f:8f:c6:10:06:91:76:4d:55:97:59:
6d:ed:7e:7a:3a:32:03:09:4e:c0:f0:aa:43:c2:16:
e7:63:47:ed:3d:1f:a1:e9:ef:54:4a:44:87:e0:48:
9b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7C:AE:A4:A8:C9:38:D1:AF:6F:65:32:D4:87:02:50:B2:19:FE:EB
X509v3 Authority Key Identifier:
keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/1-nyupKjJONGvb2Uy1IcCULIZ_us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:8180:3000::/36
Signature Algorithm: sha256WithRSAEncryption
8b:88:d3:a1:1b:5c:fd:dd:7f:71:d4:b7:0e:bc:f1:d8:05:da:
d3:fd:43:54:37:22:90:e7:bb:3a:10:c0:c2:82:a9:47:2e:05:
9f:a5:ef:e4:38:2a:5e:cf:3b:ec:06:36:0e:cb:ea:66:a4:50:
f1:83:bc:36:66:fe:87:e6:9d:7d:b9:83:48:c9:00:bc:c6:d7:
a1:da:c2:a1:c1:6a:a0:6c:e7:74:66:b3:71:33:d1:a0:93:a2:
b6:40:f5:5f:b5:6f:6c:13:83:d5:de:d6:66:47:15:41:ce:20:
ad:d8:18:92:9e:da:d5:3f:53:54:c9:5b:9d:8d:8e:3d:11:6d:
6d:b2:af:52:1c:ad:7e:8a:42:c6:b6:c2:d0:c1:81:8e:aa:3b:
c3:d3:b7:bf:76:98:71:3f:f2:f5:56:8f:3b:8d:b6:83:af:6d:
4a:56:50:8a:c8:9c:14:f1:39:6e:57:71:01:5c:de:70:5a:ec:
a2:6a:3e:21:6c:e9:a8:cd:d9:7e:17:2d:79:d5:7a:7b:33:b7:
ce:40:fd:89:20:66:ec:0b:ae:4c:11:18:96:c4:60:07:7a:7b:
ce:e2:2e:20:8d:99:08:6c:66:9b:5b:5a:84:00:1f:7b:6d:28:
48:12:25:8a:c7:51:45:f6:f7:11:f7:8c:b2:7c:e9:10:44:af:
09:25:18:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:04:03 2024 by rpki-client on console-fra.rpki-client.org