Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/n1rVFkDOGETpMEsDXllo6myAL2c.roa
File: n1rVFkDOGETpMEsDXllo6myAL2c.roa (raw, json)
Hash identifier: Ssr1Tns1bH3CApHzenY/dvlPTvg+8QbfSA/+dToZp6w=
Subject key identifier: 9F:5A:D5:16:40:CE:18:44:E9:30:4B:03:5E:59:68:EA:6C:80:2F:67
Certificate issuer: /CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Certificate serial: 018CC2DABFCFCB1EFEDC3AA616B5C777732C
Authority key identifier: BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/n1rVFkDOGETpMEsDXllo6myAL2c.roa
Signing time: Mon 01 Jan 2024 02:29:24 +0000
ROA not before: Mon 01 Jan 2024 02:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204896
IP address blocks: 217.74.80.0/20 maxlen: 20
2a02:dd80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:bf:cf:cb:1e:fe:dc:3a:a6:16:b5:c7:77:73:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Validity
Not Before: Jan 1 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f5ad51640ce1844e9304b035e5968ea6c802f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d6:0d:1b:32:4d:41:f9:d0:82:5a:8b:c8:24:
ff:ca:98:36:63:3d:b2:fd:79:70:e0:e6:d7:a4:83:
0f:1b:03:21:89:f7:29:9b:3e:d9:7a:f4:b2:99:ad:
02:46:37:f6:72:f8:7a:a1:fc:81:bc:0b:c1:be:fb:
c9:85:55:d2:76:0b:3f:14:58:2d:e8:6d:50:18:7d:
07:c8:d9:0b:43:10:7a:f8:bc:a1:d6:8a:a4:04:bf:
3f:5b:f5:f1:1a:d1:7d:20:bf:be:2d:e9:f7:8b:03:
51:d7:d4:a1:60:01:42:a5:a5:4d:8e:26:7d:d1:0e:
4f:3f:32:d8:11:71:fa:9e:6f:82:32:fd:d3:a5:7a:
4c:15:ed:4f:92:28:30:86:ed:01:c0:f4:bd:74:70:
ed:09:28:ef:0b:ee:9c:1d:df:82:f6:0c:f9:4b:b5:
9c:cd:72:90:e5:b1:64:f6:18:b2:31:f6:e7:0b:65:
38:e7:2c:f3:5d:07:6f:3c:b6:6c:a7:0c:8f:13:de:
fc:9c:29:3e:38:80:2d:59:fe:76:b0:0d:17:c6:19:
f8:87:7c:fa:10:fb:80:fd:b3:38:e2:e1:32:b0:1f:
d8:4c:a5:a1:17:e9:5d:38:04:f3:8e:ed:41:f4:c8:
61:d1:13:29:87:d3:50:76:81:0d:39:df:8e:81:d5:
06:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5A:D5:16:40:CE:18:44:E9:30:4B:03:5E:59:68:EA:6C:80:2F:67
X509v3 Authority Key Identifier:
keyid:BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/n1rVFkDOGETpMEsDXllo6myAL2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.74.80.0/20
IPv6:
2a02:dd80::/29
Signature Algorithm: sha256WithRSAEncryption
a0:c6:64:ba:af:a0:a8:b4:99:84:4d:fb:e1:27:d1:a8:d3:2d:
ff:bf:c1:16:bc:94:e2:15:17:7e:a5:2f:f7:0e:58:89:27:ed:
ec:06:1d:1a:cf:c5:f0:5c:3b:ee:77:35:4f:ed:04:d0:33:6e:
d8:2a:df:32:6f:19:d0:8e:03:10:ba:c5:46:62:3a:da:3f:a9:
40:3a:23:7f:cc:26:c9:c7:60:2e:b7:95:ac:9e:f0:0a:cb:9d:
c3:a3:fa:34:f5:c1:df:e1:5f:6a:0b:66:d9:44:46:01:bd:b7:
9a:0f:c1:2c:95:5c:1a:f5:b2:fa:bb:a5:25:5a:a4:9a:d8:e8:
f7:f3:87:82:a1:88:06:db:fc:4f:d4:c1:84:f6:dc:0f:cf:a7:
4b:1f:e2:3d:78:7a:31:44:92:40:10:34:a3:71:8b:86:4a:fc:
be:e3:b5:10:da:77:41:f1:52:50:2e:41:65:fe:0d:1d:97:3e:
85:a9:f8:e1:17:d3:87:d8:25:d3:4f:3f:1c:f2:71:67:08:5d:
e3:34:85:43:07:7d:3b:f9:f7:3c:bb:31:13:6b:f5:34:87:72:
91:b7:0e:5d:45:c4:b9:28:19:b2:ed:c3:fb:d9:45:e4:3f:cb:
21:96:a3:09:ee:58:d3:30:b6:40:90:02:78:18:7d:78:f2:10:
3c:99:6e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:31:34 2024 by rpki-client on console-ams.rpki-client.org