Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/nIw3OwmT-hNBh7ow4Zh9fknq90o.roa
File: nIw3OwmT-hNBh7ow4Zh9fknq90o.roa (raw, json)
Hash identifier: 7OfcPekNu+PkR0yXiIrMj9xLk2J7Sx8DPSz/mPEXhlI=
Subject key identifier: 9C:8C:37:3B:09:93:FA:13:41:87:BA:30:E1:98:7D:7E:49:EA:F7:4A
Certificate issuer: /CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
Certificate serial: 018CC7276F8F7805FDEA12A061C81A0CD4F9
Authority key identifier: 1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/nIw3OwmT-hNBh7ow4Zh9fknq90o.roa
Signing time: Mon 01 Jan 2024 22:31:39 +0000
ROA not before: Mon 01 Jan 2024 22:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42244
IP address blocks: 2a04:b540:2000::/36 maxlen: 36
2a04:b540:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:6f:8f:78:05:fd:ea:12:a0:61:c8:1a:0c:d4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
Validity
Not Before: Jan 1 22:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c8c373b0993fa134187ba30e1987d7e49eaf74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a6:23:b3:0b:b7:13:4c:af:c3:48:68:7b:c0:
d7:29:54:9e:cd:25:09:fd:54:0c:5a:56:9d:9b:b8:
dd:86:0c:90:5d:db:d1:b5:70:9e:c4:74:56:0e:8d:
ce:96:6f:b9:8a:0c:95:45:20:83:35:4e:af:8e:b7:
d8:27:a0:ff:0b:1f:e3:58:3a:ad:61:a2:b0:d2:a0:
7d:cf:0b:35:77:fa:b6:34:e5:05:d1:89:2f:fd:ad:
5a:ba:bf:c6:ed:88:ff:87:c7:91:42:9d:77:f6:2b:
89:62:27:41:f9:92:24:0a:22:3f:df:e3:04:7d:b8:
c5:ab:7b:dc:e9:52:b9:3b:a2:75:dd:d7:13:36:b1:
ef:83:b8:5f:2a:35:11:3c:8e:eb:c2:78:41:27:31:
fb:f1:b9:8a:5f:aa:6e:b8:65:bb:36:04:cb:d6:8f:
2c:72:84:12:79:f1:55:78:46:a0:54:a2:64:bf:4e:
7b:b9:82:ae:cf:18:55:6b:e8:eb:b7:4b:01:44:ce:
3c:2c:af:b8:f9:7a:1a:22:85:9b:a9:15:af:c4:1d:
b1:99:a9:bf:72:e6:cb:b4:23:4f:14:b5:40:4a:a1:
ce:5e:b5:4f:ed:72:db:ed:f5:c8:3d:c0:2b:4d:1b:
35:51:61:0b:17:27:dc:7b:24:a0:78:5a:55:70:4d:
41:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8C:37:3B:09:93:FA:13:41:87:BA:30:E1:98:7D:7E:49:EA:F7:4A
X509v3 Authority Key Identifier:
keyid:1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/nIw3OwmT-hNBh7ow4Zh9fknq90o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b540:1000::-2a04:b540:2fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
36:da:4e:a5:71:b3:9b:97:a5:ba:c6:de:55:65:e5:de:8c:ea:
5f:d9:4b:8c:6e:86:aa:21:e7:bb:63:00:1e:dc:8b:1f:a4:8a:
fe:98:9a:52:c4:51:d1:12:25:47:3a:f9:4c:16:4c:2e:e7:d9:
70:0b:0a:dd:6e:bc:9f:55:4a:82:90:e7:ec:5c:7e:04:76:a2:
9f:f4:72:0f:1f:85:56:8e:a4:2f:1c:6e:29:13:ae:0b:01:6a:
a9:19:34:ce:da:d4:61:0f:20:dc:7f:78:36:ad:43:74:98:77:
c1:7a:62:d5:93:ac:04:65:0f:6e:6b:c3:61:52:fd:a1:df:64:
fa:12:1a:b6:92:2d:21:85:22:0c:cc:0f:42:31:11:ad:02:44:
58:25:ae:7e:cf:7b:71:13:68:b4:db:a6:5f:bb:16:24:50:9b:
d2:33:03:0f:5a:d5:73:7b:c4:78:28:38:4c:5d:50:d5:02:bc:
1a:a3:72:fa:13:c6:62:76:18:06:0f:71:fb:23:31:e5:c4:d5:
ea:de:e6:82:57:70:9b:cb:40:28:ba:c6:67:2e:b2:a1:d8:17:
4a:b7:f5:e8:14:87:55:48:4c:ff:17:18:2d:51:de:60:65:25:
e9:35:7e:9e:10:89:ba:a0:93:2d:fd:49:dd:c0:25:f4:20:7a:
83:8a:95:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:55:21 2024 by rpki-client on console-ams.rpki-client.org