Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/NQQy3zV4-Q88QUuflv3MISKt7ks.roa
File: NQQy3zV4-Q88QUuflv3MISKt7ks.roa (raw, json)
Hash identifier: AYcFT9det0VmUw2Efm+LQFqds5rrCl0P9E9VQPhLv00=
Subject key identifier: 35:04:32:DF:35:78:F9:0F:3C:41:4B:9F:96:FD:CC:21:22:AD:EE:4B
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 018CC34891677499F0F50BA3597BDD8054CF
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/NQQy3zV4-Q88QUuflv3MISKt7ks.roa
Signing time: Mon 01 Jan 2024 04:29:22 +0000
ROA not before: Mon 01 Jan 2024 04:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 146992
IP address blocks: 2a0c:e643::/33 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:91:67:74:99:f0:f5:0b:a3:59:7b:dd:80:54:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=350432df3578f90f3c414b9f96fdcc2122adee4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e6:a0:79:90:e7:fd:ae:fa:63:79:cc:02:df:
ee:6c:ee:e3:9d:6e:a2:3c:a0:27:26:e1:d4:b2:d6:
cb:76:7a:c3:79:1c:92:0c:5a:fe:dd:67:88:2a:92:
25:fe:ba:56:8b:46:80:39:74:e2:e6:c2:da:4f:4f:
c9:f8:29:ff:78:20:d9:e9:45:52:e3:1c:c7:e5:e5:
c5:a2:f4:c8:f2:61:cf:79:1e:3c:e9:f2:84:86:3d:
38:a6:2c:b4:c0:e3:2a:b5:06:3a:47:39:3d:25:76:
32:aa:37:0a:97:20:86:55:96:4e:58:76:a6:e9:61:
57:19:01:50:7f:97:76:08:ad:e1:6c:9e:5b:1a:72:
9b:0d:3e:e8:f7:fb:17:ae:9f:43:59:0f:09:21:5c:
d8:26:6d:eb:77:f1:52:4d:6c:2c:8b:c1:93:55:35:
95:17:cb:a2:7d:1a:86:fc:41:2a:23:50:49:ec:04:
a8:3c:ea:18:54:1f:f8:a7:ea:bd:6e:99:1c:0b:5e:
85:cf:b9:35:a0:94:8a:6d:c2:ba:cb:f5:90:c7:0b:
c1:86:f7:f3:86:9f:0d:06:fb:80:85:96:93:0e:01:
ad:f6:0c:e2:a2:c7:5c:17:d5:76:e6:89:c3:41:53:
bc:15:df:f1:0b:3f:a7:09:d7:2a:7c:91:1b:08:8b:
54:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:04:32:DF:35:78:F9:0F:3C:41:4B:9F:96:FD:CC:21:22:AD:EE:4B
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/NQQy3zV4-Q88QUuflv3MISKt7ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:e643::/33
Signature Algorithm: sha256WithRSAEncryption
85:09:37:a2:3d:f3:2d:be:8e:4f:a2:9e:f3:0f:86:7a:28:04:
83:e2:96:5f:fa:74:1b:34:ae:3c:21:b5:49:e0:3c:cf:de:01:
f3:a2:a2:77:10:19:d1:86:aa:f2:5e:22:e7:3e:7d:0b:8f:9b:
0e:6c:ee:9f:a7:08:83:5f:2d:fe:72:cb:d5:32:9b:4e:7a:22:
7e:6c:96:dc:40:ab:38:5b:e9:2d:aa:5e:53:46:bf:f8:35:80:
ed:07:cc:57:e0:cd:49:ee:5a:91:10:d7:88:fe:41:64:cc:96:
df:1d:d5:97:39:af:4d:31:43:c6:fd:aa:62:fb:f9:25:58:13:
fa:0e:7c:52:00:6a:4e:ba:3e:12:14:9a:96:17:1e:9c:56:e2:
ad:0b:ed:1a:89:34:e0:94:9a:06:7d:8a:d5:b6:d0:cb:56:64:
94:14:2d:7b:53:d4:86:48:4b:a5:85:b9:95:85:ef:73:43:d4:
d5:e3:5e:2c:91:9d:e3:7d:51:1e:ca:20:8b:73:4a:a7:a6:5a:
ce:31:53:55:57:14:cb:36:20:f9:77:3a:dc:68:80:e2:89:e5:
44:c7:97:4e:5b:9f:23:9a:89:d2:7a:81:7b:8d:35:6e:65:c6:
c4:b2:8f:c8:d1:92:71:09:52:70:13:06:4d:a9:7d:76:bf:52:
ab:b5:67:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:27:02 2024 by rpki-client on console-fra.rpki-client.org