Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/9oRLE-gSgc4drpJzIEexmB_ninc.roa
File: 9oRLE-gSgc4drpJzIEexmB_ninc.roa (raw, json)
Hash identifier: FAa6tWbqhCuRVBRn7s0EezCUu3SpSyyc093nK/kshyA=
Subject key identifier: F6:84:4B:13:E8:12:81:CE:1D:AE:92:73:20:47:B1:98:1F:E7:8A:77
Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial: 018CC3B684AC39B80D693EDEBB3DEB4DA9CA
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/9oRLE-gSgc4drpJzIEexmB_ninc.roa
Signing time: Mon 01 Jan 2024 06:29:27 +0000
ROA not before: Mon 01 Jan 2024 06:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61106
IP address blocks: 81.162.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:84:ac:39:b8:0d:69:3e:de:bb:3d:eb:4d:a9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Validity
Not Before: Jan 1 06:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6844b13e81281ce1dae92732047b1981fe78a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:17:8e:74:c2:98:18:51:e9:36:6b:5b:e6:
bb:eb:83:72:0e:3c:e3:d3:bc:71:62:e3:39:8d:1a:
ac:ba:39:42:87:5b:35:90:70:b0:b4:47:5b:72:28:
38:a0:ae:50:a2:4e:e2:1c:a0:a6:da:2f:e8:31:54:
eb:df:43:ce:25:07:a4:42:7b:0f:b2:02:5d:7b:ee:
3f:99:d8:62:f1:31:ef:bb:f0:99:01:29:8d:52:84:
6f:e7:aa:e7:42:00:34:52:91:25:b0:e6:32:aa:d9:
79:2f:c6:1a:87:2f:6f:ed:85:cb:20:87:6e:4b:e3:
7a:0a:a4:f7:ed:b1:95:83:bd:6d:19:2f:9d:29:e8:
4d:59:70:42:54:df:de:1f:80:6f:cb:be:db:bf:d8:
90:e2:69:9c:e6:12:dc:cb:6a:a9:ce:fd:68:f9:64:
a8:b4:19:ec:86:97:e7:b5:8e:41:bc:87:a4:ec:ad:
17:89:6c:21:ac:3a:50:06:3b:bb:4e:be:be:c8:d9:
7b:dc:7d:9b:7f:9c:fe:c3:3b:6e:cd:c5:87:95:85:
6f:77:ac:7e:0a:21:e7:2a:84:5b:15:3e:b9:b0:85:
c6:d6:81:97:e8:f3:6e:97:09:cd:24:3f:2a:29:0b:
c3:a3:48:13:3d:cd:68:c0:88:76:41:02:9c:d8:13:
f6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:84:4B:13:E8:12:81:CE:1D:AE:92:73:20:47:B1:98:1F:E7:8A:77
X509v3 Authority Key Identifier:
keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/9oRLE-gSgc4drpJzIEexmB_ninc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.162.54.0/23
Signature Algorithm: sha256WithRSAEncryption
67:ae:12:29:a3:fa:5f:63:95:8d:7e:ad:43:d6:3e:53:f9:ec:
53:a1:58:82:9d:1c:67:65:2c:2f:91:7a:79:26:e3:95:de:06:
7b:a4:7e:78:68:aa:57:57:7a:da:aa:22:72:4b:81:75:a5:72:
e1:8c:a0:3c:ea:d3:e6:2b:08:5b:b9:2b:96:b2:29:e4:f4:bf:
6c:50:3c:58:ec:6c:1e:45:aa:e5:bc:81:49:fe:aa:43:07:65:
f2:a0:4a:63:20:61:f9:fa:c3:94:94:52:f0:eb:08:04:c9:d8:
1e:c4:70:9a:51:22:47:e9:92:0c:d6:8d:cf:4a:12:eb:88:37:
ab:6e:f9:d5:7e:6a:bf:b1:23:df:be:d2:1b:eb:27:5a:37:1b:
3a:bd:a1:1a:23:d8:9f:0b:3e:e8:0a:ac:5e:4f:99:a1:2f:22:
95:61:b7:ef:74:bf:a2:9f:85:5b:13:4c:e6:fd:d4:79:9d:de:
9f:66:63:25:01:a1:ff:44:15:ea:cb:3d:a2:06:40:08:78:56:
4c:f7:89:f9:05:69:f1:24:ec:5e:03:82:93:37:7a:d4:ef:34:
0e:73:b1:6a:df:7b:6d:0b:27:7b:6e:1f:6f:51:23:17:9d:1d:
c8:fc:a3:a8:ac:5a:5c:f0:6c:49:72:11:ac:07:06:5a:be:01:
b4:c8:6a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 10:35:18 2024 by rpki-client on console-fra.rpki-client.org