Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/NSh139o0xqsjND4g731FhVHfm-4.roa
File: NSh139o0xqsjND4g731FhVHfm-4.roa (raw, json)
Hash identifier: Z0rI6e4EXUgq1dup99lisQXj8ul82U+tdevD9j3MOYI=
Subject key identifier: 35:28:75:DF:DA:34:C6:AB:23:34:3E:20:EF:7D:45:85:51:DF:9B:EE
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 018CC9BCD1109FDB28DF11F47750132634E3
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/NSh139o0xqsjND4g731FhVHfm-4.roa
Signing time: Tue 02 Jan 2024 10:34:03 +0000
ROA not before: Tue 02 Jan 2024 10:34:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41002
IP address blocks: 2a03:1ac0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:d1:10:9f:db:28:df:11:f4:77:50:13:26:34:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 2 10:34:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=352875dfda34c6ab23343e20ef7d458551df9bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e3:c8:f5:54:2d:83:00:5f:8f:53:d1:61:3d:
c6:dc:f7:1e:1a:ba:3a:00:2b:23:89:df:9f:0e:87:
27:4f:21:a3:cb:aa:18:84:29:19:68:b8:23:fd:fa:
28:bc:92:27:46:43:9c:f0:9a:6e:7c:0c:39:93:80:
61:81:1e:c4:fd:67:70:97:29:65:e1:a7:d0:b3:b6:
09:6d:12:fb:1e:96:25:81:b8:1d:79:96:7b:f9:81:
72:3b:aa:d8:b8:38:5c:3b:17:b3:3f:d1:6c:7a:30:
cd:77:ce:df:5c:90:5e:4f:a7:8a:1a:b8:92:61:0e:
c8:75:86:dc:e0:aa:9e:c9:32:c1:b9:64:01:77:d0:
ab:08:48:70:68:de:34:75:59:c8:6a:54:38:26:a8:
a5:d7:2d:97:33:07:90:d2:e1:77:d4:f0:bb:ef:88:
11:da:ee:df:c7:74:11:7f:51:c1:c6:e0:92:77:74:
77:e2:a4:a5:d7:b7:36:de:e6:95:0c:2f:56:e4:e5:
37:27:e6:b2:1b:e7:6b:de:7a:1a:64:58:af:21:64:
4e:60:3d:bf:98:ad:3f:a7:ba:3e:a0:0e:56:80:89:
ad:58:b8:79:74:22:c1:57:0b:c0:13:36:52:14:60:
05:df:3c:d3:36:dc:4e:82:39:85:ee:a9:9c:e9:22:
2d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:28:75:DF:DA:34:C6:AB:23:34:3E:20:EF:7D:45:85:51:DF:9B:EE
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/NSh139o0xqsjND4g731FhVHfm-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:1ac0::/48
Signature Algorithm: sha256WithRSAEncryption
d0:98:ad:3f:c9:27:f2:60:09:78:46:0e:20:6c:6a:b3:92:0b:
e6:17:f5:e6:ec:a3:92:45:b2:a5:85:d7:b8:d1:ac:bf:ba:1c:
aa:73:88:39:3e:76:a6:e3:72:0e:56:eb:69:67:d7:2c:a1:ca:
8c:9a:4c:7a:9b:97:ea:b5:30:41:a2:bd:a1:65:6b:d1:d6:0d:
a0:4b:3c:4d:d3:7e:1b:5b:bc:85:63:c0:af:11:a5:2d:d3:8e:
05:4b:51:29:9b:9d:a5:3a:db:d1:70:36:92:bc:a1:42:3b:38:
de:9e:43:c3:26:24:97:50:af:69:e2:5b:a9:b8:a8:65:e3:86:
eb:e3:05:98:5c:14:7e:8f:c6:ef:c0:3d:97:f7:ed:9c:d0:1b:
99:71:f6:c5:10:07:e4:36:cb:2e:1c:ae:f8:5f:8a:6f:0b:94:
60:1a:e5:8f:64:98:96:61:fb:53:18:82:45:6b:6f:8d:ba:54:
d5:9c:3c:1d:68:77:23:83:e9:35:6e:74:c6:d1:09:d7:1b:3e:
18:03:3f:a7:f5:fe:50:8f:d3:e4:a4:be:34:41:9a:3e:16:dc:
dd:d9:69:3d:dd:39:3b:d8:52:eb:31:64:ab:7c:9b:0a:98:54:
ac:7a:0d:cb:e0:0b:c9:c6:7d:10:45:5b:9c:f2:47:0d:8a:a6:
94:9f:70:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:11 2024 by rpki-client on console-ams.rpki-client.org