Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/4NBIIOLYrf7Qr3KNbO40jE-NYdY.roa
File: 4NBIIOLYrf7Qr3KNbO40jE-NYdY.roa (raw, json)
Hash identifier: fjamdwKMk9gomKqr+pqaGQ3E3SdYA1RLZz4PRfadfZk=
Subject key identifier: E0:D0:48:20:E2:D8:AD:FE:D0:AF:72:8D:6C:EE:34:8C:4F:8D:61:D6
Certificate issuer: /CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670
Certificate serial: 0192B8E5215E6AEA881341330E03B84C4A9B
Authority key identifier: D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/4NBIIOLYrf7Qr3KNbO40jE-NYdY.roa
Signing time: Wed 23 Oct 2024 10:21:16 +0000
ROA not before: Wed 23 Oct 2024 10:21:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198154
IP address blocks: 2a14:23c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b8:e5:21:5e:6a:ea:88:13:41:33:0e:03:b8:4c:4a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670
Validity
Not Before: Oct 23 10:21:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0d04820e2d8adfed0af728d6cee348c4f8d61d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ff:89:e1:a3:33:a3:b0:00:1f:97:b5:89:bd:
ed:eb:19:6c:75:d9:a9:be:3d:8b:ce:0e:7b:c8:e2:
22:0a:4b:5f:77:6e:65:13:78:56:54:c3:34:f4:52:
9f:e4:08:e2:fb:4d:06:34:23:51:77:79:20:aa:83:
aa:89:04:7c:0f:2e:2c:bd:bc:6e:55:d4:4c:f4:fb:
c0:ba:7a:c6:4d:53:78:12:55:09:3f:50:d4:4e:3d:
55:f0:13:cd:55:e6:8f:61:96:7f:d1:18:a8:95:49:
67:bc:7c:d5:2f:77:85:26:f7:51:cb:8d:3b:1c:2a:
af:05:f4:5a:30:a6:6f:b3:7a:6c:c9:0b:c8:99:7b:
b7:10:4a:2a:c5:e5:79:a1:e5:4f:28:8d:89:1c:7d:
5e:73:c3:63:3e:02:62:96:c7:3e:c2:ec:c3:50:15:
06:ed:dc:13:45:4d:5c:c6:0f:f1:21:b2:b0:1c:1f:
06:50:2f:40:9a:6f:03:23:1e:b2:06:39:a1:b4:db:
a1:86:26:9c:c9:3d:70:97:15:72:79:23:cb:af:f1:
47:ac:68:4a:5c:53:30:07:76:e9:bd:8d:ac:ef:a4:
f3:1a:0f:a7:49:f2:ce:4e:4a:b4:6e:89:1d:55:1b:
29:10:97:aa:de:b9:22:0d:ba:01:70:c3:34:c2:bb:
90:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D0:48:20:E2:D8:AD:FE:D0:AF:72:8D:6C:EE:34:8C:4F:8D:61:D6
X509v3 Authority Key Identifier:
keyid:D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/4NBIIOLYrf7Qr3KNbO40jE-NYdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:23c0::/48
Signature Algorithm: sha256WithRSAEncryption
0c:d5:aa:c8:77:8b:cc:9e:21:5f:68:b8:ed:22:7e:21:52:13:
29:c1:5b:c9:f7:4c:a6:3d:a9:01:ee:52:52:1c:a2:2a:76:fb:
2a:fd:7d:e7:4a:d9:ab:e4:06:4b:f3:ed:98:bf:45:70:22:7d:
13:11:18:ae:aa:f5:bf:26:19:f4:36:a4:80:48:4e:95:88:d5:
80:de:c1:6d:6a:4e:23:6a:e9:81:a9:45:d5:3e:3b:e1:08:b7:
55:be:85:4f:96:5b:31:c1:cc:b3:ca:b4:6b:5a:51:32:87:6f:
7a:46:38:06:76:fa:25:cf:9c:12:b9:d9:e1:4a:1f:ef:c1:6e:
cb:bf:d5:24:3a:6f:fa:60:15:97:76:6f:ca:57:f1:4f:d9:c8:
70:4b:dc:43:5b:d9:06:b5:c3:bf:1f:44:20:a1:a3:58:92:ca:
55:bd:9b:f2:89:d2:eb:52:e7:cb:7a:e1:7d:a4:87:8e:f4:7e:
55:70:1a:eb:c8:7a:ba:aa:86:b8:48:5a:bb:67:5c:90:20:4f:
80:65:5e:1e:04:93:cd:62:26:f8:9a:87:65:79:11:9d:96:72:
8b:44:df:60:56:a1:b0:4c:e7:6c:59:18:02:7f:87:75:72:2e:
85:79:69:20:62:f9:0c:8b:2b:9d:55:89:c0:e0:2a:3f:89:30:
f1:27:a0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:38:30 2024 by rpki-client on console-ams.rpki-client.org