Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1-nsGZvoytyCabfk4h2MjBXRDvNs.roa
File: 1-nsGZvoytyCabfk4h2MjBXRDvNs.roa (raw, json)
Hash identifier: BqLMbowxbTM+Yp2Fuy4ri957GLvr9zZFYNzJzRMkoO8=
Subject key identifier: FA:7B:06:66:FA:32:B7:20:9A:6D:F9:38:87:63:23:05:74:43:BC:DB
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC64A0CA3C420B9619E4BCB1E794A25B8
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1-nsGZvoytyCabfk4h2MjBXRDvNs.roa
Signing time: Mon 01 Jan 2024 18:29:50 +0000
ROA not before: Mon 01 Jan 2024 18:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213090
IP address blocks: 2a12:bec0:70::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:0c:a3:c4:20:b9:61:9e:4b:cb:1e:79:4a:25:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa7b0666fa32b7209a6df938876323057443bcdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0e:a0:b4:5d:6f:f1:1e:32:57:48:bc:6c:39:
19:2d:f7:87:6e:67:8c:43:5d:a8:bc:49:88:27:fc:
6f:67:cd:e8:81:23:41:87:c7:73:dd:c3:b7:98:8c:
87:29:ea:e8:b4:98:0c:0f:f1:5c:1a:d8:3c:53:86:
e3:8a:c4:25:6c:98:09:11:f7:25:0a:06:57:b1:b6:
82:2b:66:29:35:e1:a4:0e:9c:7b:5a:55:4c:13:6d:
06:b1:c7:32:95:d8:83:50:6a:64:45:36:32:01:ba:
b9:9c:7b:55:3e:7a:c0:7a:70:87:d8:6e:5c:b6:13:
67:b7:18:33:0a:6f:46:88:d4:ab:cd:38:6c:a1:c1:
8b:c0:46:a7:57:03:94:cb:39:bd:96:d4:2f:9b:cf:
09:ba:2b:5a:1d:93:2b:0a:e4:a8:08:ce:a0:23:c0:
5a:fe:08:f4:9d:53:37:c6:7a:ac:ad:22:b8:e7:39:
a2:56:f1:fe:fd:7c:99:8e:0c:7d:d5:1a:cb:d5:a4:
d7:f6:6d:33:d5:9f:75:98:7a:ca:8c:84:de:e4:ba:
be:b8:99:98:06:b5:82:89:88:34:18:e1:3a:3c:05:
1d:a3:49:a7:48:4f:ad:6c:b4:aa:0e:6c:04:e3:46:
b9:f6:c8:07:53:24:e4:80:de:30:c3:cb:c6:fc:9b:
e1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7B:06:66:FA:32:B7:20:9A:6D:F9:38:87:63:23:05:74:43:BC:DB
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1-nsGZvoytyCabfk4h2MjBXRDvNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:70::/48
Signature Algorithm: sha256WithRSAEncryption
a5:0a:94:56:bd:b7:d6:71:d7:96:c8:96:9e:41:f6:a1:14:ad:
95:8d:bd:19:61:52:a8:58:ab:81:da:42:9b:6c:6b:94:2d:db:
bf:82:81:d7:e5:c8:58:ca:5b:97:c0:0d:9e:0d:21:45:f0:4d:
22:ae:c8:3e:da:72:50:40:79:32:7f:09:7d:4a:18:01:fd:03:
1e:32:b7:da:5e:30:b2:2e:ef:d0:b9:e8:cc:50:94:20:f8:6f:
34:aa:14:3d:c6:79:99:1b:24:60:f3:ad:7e:f0:2b:3c:84:f6:
ea:61:cf:9a:bd:74:37:f6:fb:b4:2e:17:68:30:42:03:45:a4:
41:d3:9b:bc:c5:8b:99:a6:72:52:46:6d:64:6f:c7:b9:f9:ab:
f5:ef:79:b2:22:0c:89:19:34:46:45:07:3b:80:5b:e2:9c:21:
e8:ff:76:a5:78:c0:88:f1:ae:8c:02:5d:b8:19:72:cf:24:c8:
25:cb:65:3b:9b:b8:42:3a:ca:c3:e5:92:a6:07:de:3d:00:8a:
57:c0:03:cb:7c:80:d1:86:cf:66:b6:b3:1b:69:08:31:33:e3:
a4:54:9e:e6:6f:06:f8:84:78:c7:21:48:6c:1b:49:a9:1e:95:
99:ed:d5:9a:5e:76:25:ea:48:b4:ff:06:fe:14:5d:97:e7:b0:
eb:cf:f8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:36:35 2024 by rpki-client on console-fra.rpki-client.org