Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/n1-7zco6FluaoneVktEnIThCM8g.roa
File: n1-7zco6FluaoneVktEnIThCM8g.roa (raw, json)
Hash identifier: L6r+eIMFvg4ReKgi0NJyH6+Kil0tCWRVVebba+t3cHo=
Subject key identifier: 9F:5F:BB:CD:CA:3A:16:5B:9A:A2:77:95:92:D1:27:21:38:42:33:C8
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 018CC64ADE969F1CD97513E78C31C77B12D5
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/n1-7zco6FluaoneVktEnIThCM8g.roa
Signing time: Mon 01 Jan 2024 18:30:44 +0000
ROA not before: Mon 01 Jan 2024 18:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 265827
IP address blocks: 94.131.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:de:96:9f:1c:d9:75:13:e7:8c:31:c7:7b:12:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 1 18:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f5fbbcdca3a165b9aa2779592d12721384233c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ac:97:1c:ad:86:65:a0:0e:54:2f:d0:14:4f:
c3:b0:64:19:59:42:9f:d1:22:64:91:2f:59:c9:50:
70:30:82:a7:ba:bf:db:ea:56:34:db:f0:0f:c7:38:
09:26:12:7a:0f:4b:0c:3c:31:ff:52:c6:7d:1f:b3:
2d:83:d6:a1:e0:e6:39:fa:80:3f:7c:fe:5e:74:1d:
1d:b8:43:de:1d:17:b5:40:f7:68:49:ba:bb:5c:da:
04:7c:9a:2e:ca:d3:64:78:23:5e:fd:52:09:f4:2e:
e0:a2:ef:7e:a9:c6:a8:4f:dc:67:41:84:60:5c:85:
6b:e5:bf:b0:6a:39:9d:a9:48:37:f8:a0:ea:ca:2f:
ef:d9:6b:0b:c0:cd:71:17:81:d2:b3:0e:b3:c1:9b:
21:38:1b:26:56:59:01:64:ad:e1:ad:a9:7d:f8:09:
b6:b7:10:c4:74:a8:7f:c8:88:ce:b1:e6:c6:42:f9:
45:4b:3b:ad:f1:91:50:4d:38:c4:f4:99:e0:c0:29:
b5:37:a0:d8:5d:16:63:a9:08:7d:a7:18:05:ec:79:
24:c9:46:4d:ea:d2:78:28:31:31:bd:5b:b0:1b:c5:
b0:ba:dc:97:4a:98:9b:d3:96:a4:c5:a5:d6:30:94:
ba:4d:cd:74:d5:4d:2d:bc:ee:a7:7b:e1:2d:00:22:
83:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5F:BB:CD:CA:3A:16:5B:9A:A2:77:95:92:D1:27:21:38:42:33:C8
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/n1-7zco6FluaoneVktEnIThCM8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.16.0/21
Signature Algorithm: sha256WithRSAEncryption
31:81:b4:e0:62:d2:e5:c3:b5:9c:d2:4a:76:bc:bb:ac:f4:b4:
16:3c:59:a1:fa:d5:9d:ae:6d:7f:5f:51:cb:78:73:70:d7:6c:
e0:b5:88:f5:f1:a7:af:90:dd:9d:87:4d:6e:66:7f:39:9b:b3:
47:6e:b8:22:7e:76:1d:50:6c:e2:13:33:d5:eb:3e:23:44:96:
d7:95:1f:74:f8:96:e0:6d:b0:b6:1c:d5:7e:d8:39:6f:f1:29:
9c:5c:e3:ef:d1:25:41:a0:de:53:42:43:4b:0a:0d:c4:dd:75:
aa:ce:61:26:bd:0a:c9:de:d2:26:55:26:81:32:7f:bf:2d:7f:
da:59:f1:0a:ca:ab:c9:60:4a:ee:ca:be:be:7f:e4:4e:97:31:
28:05:1a:ec:36:58:10:fb:e4:c5:bd:9a:d3:95:25:9d:a5:4c:
e7:ec:0a:86:06:1b:e2:48:79:aa:08:89:a2:90:14:0d:46:4f:
47:92:d1:93:24:6d:95:ca:6b:96:34:89:5f:cc:ab:62:4f:cd:
05:df:6f:08:9e:39:5c:3f:43:6a:ad:3e:68:a1:1b:1d:ef:a3:
a8:4d:8d:8a:35:d9:e9:33:95:25:df:c4:64:e5:96:54:ea:bf:
4f:ef:04:3f:9f:16:87:ab:3f:a5:35:bc:d3:bb:91:e6:b6:2f:
73:86:60:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:21:26 2024 by rpki-client on console-ams.rpki-client.org