Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/1UTUmQD6o0wldtyTQPQTQH8UYco.roa
File: 1UTUmQD6o0wldtyTQPQTQH8UYco.roa (raw, json)
Hash identifier: +pn9yhGNqb2KvPwV+R15DKaF+QM0gOwtzeIMyt3kZyI=
Subject key identifier: D5:44:D4:99:00:FA:A3:4C:25:76:DC:93:40:F4:13:40:7F:14:61:CA
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 018CC500E487D7AF507A9171EA31729DC69B
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/1UTUmQD6o0wldtyTQPQTQH8UYco.roa
Signing time: Mon 01 Jan 2024 12:30:19 +0000
ROA not before: Mon 01 Jan 2024 12:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396356
IP address blocks: 157.97.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:e4:87:d7:af:50:7a:91:71:ea:31:72:9d:c6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 1 12:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d544d49900faa34c2576dc9340f413407f1461ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e8:44:a5:54:e5:68:16:aa:1b:8e:a9:92:c0:
24:2e:62:de:1a:23:e6:26:05:23:12:00:90:26:eb:
e3:88:88:3f:02:6b:a3:2c:e1:de:ec:3a:51:f8:26:
6e:1c:ee:75:08:50:b0:f8:5e:25:d5:ca:74:d3:0c:
5c:bb:42:2b:df:b6:20:35:9b:15:83:71:32:72:58:
f1:a2:b2:1c:83:1c:ed:80:bf:91:bd:67:99:bf:a5:
59:ae:6c:7c:2d:e5:94:6d:d5:07:79:70:17:fa:fd:
af:00:5f:a9:10:45:fc:34:c7:e9:a5:47:e9:32:7b:
53:11:d5:c4:e0:ff:5c:53:c4:87:d4:07:0c:08:10:
ad:b7:bc:72:ca:d6:91:f5:4f:7e:37:ec:f2:a5:9a:
9a:b0:ce:5d:81:a3:86:72:5a:a5:13:3d:e6:4c:fd:
bd:71:9a:03:43:b0:a0:83:24:42:f5:38:94:34:8b:
5c:7e:e3:a7:b0:eb:e0:e6:4e:0a:2a:b4:a4:35:58:
14:f4:80:ef:9e:5f:b2:78:60:51:eb:d4:42:5e:f5:
44:2e:e3:64:83:3b:0f:65:6a:08:eb:50:44:d1:eb:
4d:94:1e:84:f4:7a:45:0f:af:c3:e6:9a:6c:0c:8d:
32:84:e1:ca:eb:a2:f5:a6:26:2d:56:14:7d:7c:ab:
00:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:44:D4:99:00:FA:A3:4C:25:76:DC:93:40:F4:13:40:7F:14:61:CA
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/1UTUmQD6o0wldtyTQPQTQH8UYco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.97.121.0/24
Signature Algorithm: sha256WithRSAEncryption
19:29:de:3b:a0:42:b8:b9:19:aa:fe:0d:1c:9f:2c:ef:b8:f5:
3b:4e:68:53:d4:fe:2b:6b:19:49:8b:7f:c0:31:f3:a1:4b:7b:
bb:3b:48:68:4b:c9:3d:cf:07:7f:6d:a0:8d:c3:f5:b9:0e:6b:
51:1f:92:85:3e:3d:80:d9:7b:04:7e:c3:f1:66:b2:3d:50:b6:
3e:93:70:9c:95:33:0b:b7:a1:93:50:06:0a:59:46:64:43:64:
6a:3b:7b:f0:99:cb:cf:a9:0d:d2:0a:b8:b8:ff:d6:75:4c:91:
bb:44:22:d7:cf:8f:bf:ac:00:27:e6:c1:19:bc:f0:f5:7f:f9:
75:c6:0a:73:fc:06:d0:9e:0d:1d:7a:86:09:87:f1:91:23:43:
b0:9b:41:6b:b1:b5:a2:6f:34:ca:6e:5e:af:49:0c:33:ce:23:
69:3e:6e:6f:55:7c:1e:80:89:b6:c7:4e:3e:d2:0a:59:56:6e:
62:e7:45:d9:9c:75:a9:b2:0b:9f:11:52:e5:9a:c7:6d:47:b4:
fa:d3:1a:4a:6e:88:e9:50:a4:26:57:9e:67:97:72:80:9b:12:
d1:f5:1f:69:66:c1:19:ea:fb:13:31:11:d8:ed:d1:79:9e:45:
a9:ea:20:b3:74:d0:ba:c1:61:df:25:85:d9:a0:38:40:b7:78:
ba:cc:21:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:06:23 2024 by rpki-client on console-ams.rpki-client.org