Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/MWrvKBMZl5XF8CiM3VDB7xqelrU.roa
File: MWrvKBMZl5XF8CiM3VDB7xqelrU.roa (raw, json)
Hash identifier: qvsELfLBDsDjLeKQmhFcg3xejo6n0fGM5mSXWGZLdkE=
Subject key identifier: 31:6A:EF:28:13:19:97:95:C5:F0:28:8C:DD:50:C1:EF:1A:9E:96:B5
Certificate issuer: /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Certificate serial: 018CC3494B73CC6D80A3485434BBE939A9EE
Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/MWrvKBMZl5XF8CiM3VDB7xqelrU.roa
Signing time: Mon 01 Jan 2024 04:30:09 +0000
ROA not before: Mon 01 Jan 2024 04:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 2a03:e140:3a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:4b:73:cc:6d:80:a3:48:54:34:bb:e9:39:a9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Validity
Not Before: Jan 1 04:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=316aef2813199795c5f0288cdd50c1ef1a9e96b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9e:e9:6c:01:7e:e0:84:45:51:c2:ad:10:bf:
5b:c5:88:de:de:ee:d9:1a:6d:b0:4f:32:cb:7f:f1:
96:74:74:de:c0:11:44:1d:f6:03:8a:c5:92:6f:b1:
0f:bb:a6:1e:8b:a2:78:48:cd:d1:9a:7e:ab:fc:ae:
a0:81:94:61:6a:1c:e0:3e:a3:bd:ba:a1:ef:04:b4:
06:95:82:4a:21:79:8c:fd:e8:1c:51:21:e6:e0:31:
5b:e6:b9:05:ef:2b:15:7c:e4:e4:ee:93:3a:20:a5:
34:0e:ab:86:42:ee:53:68:bf:77:b6:a2:e9:67:1f:
d0:de:df:b9:06:78:e7:9a:5a:a7:c3:90:49:cf:d9:
50:04:b5:a9:2c:4e:2a:89:35:28:72:50:80:0a:2c:
6a:b0:93:04:5a:36:ee:f9:e5:a5:f4:39:51:4b:97:
0a:0e:e6:ee:be:ea:19:d6:77:29:6e:07:8d:ec:fb:
f7:78:11:12:14:d4:cd:ae:e3:bb:44:d7:2c:36:44:
75:b7:14:c1:ac:4f:76:2d:31:3d:a7:e2:79:93:9d:
4b:b8:39:40:2f:c8:9a:c6:aa:93:73:52:f4:ea:73:
9e:cc:db:8d:ae:86:4a:5a:2c:4d:89:07:f9:dc:a0:
7e:f5:17:12:6d:57:00:92:84:5d:10:a8:04:ff:d2:
98:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6A:EF:28:13:19:97:95:C5:F0:28:8C:DD:50:C1:EF:1A:9E:96:B5
X509v3 Authority Key Identifier:
keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/MWrvKBMZl5XF8CiM3VDB7xqelrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:e140:3a::/48
Signature Algorithm: sha256WithRSAEncryption
06:ea:2f:3a:be:8f:b8:0b:31:fd:ab:9a:b3:1a:d6:49:4c:31:
11:54:f4:4a:a7:3b:d7:b4:d9:99:a5:a1:e0:79:4e:4b:ab:5e:
28:ba:09:0e:6e:e2:38:55:1e:41:8f:dd:71:55:72:85:bd:9f:
60:c1:29:33:c6:6e:23:43:4b:b2:51:df:f8:af:a8:68:85:1c:
a8:b9:5f:d5:d9:5e:fc:d3:b3:0b:a6:8b:67:2d:34:12:27:14:
df:8b:0f:97:f9:a9:2f:a4:c8:2a:9f:8f:ee:71:47:d2:c9:a1:
3d:ed:47:f2:46:04:6d:34:c5:dd:d6:51:aa:8b:81:cc:96:3d:
26:c7:86:62:6d:d7:31:bd:d0:26:da:5a:1a:18:ca:8a:f8:2b:
93:56:71:fd:95:34:53:61:9a:4f:a0:fc:a1:84:ec:2d:a5:f7:
c4:bf:b1:2c:d0:cb:64:67:5e:37:f3:27:b5:df:91:35:13:74:
8b:51:27:90:f4:2e:2f:5c:91:7a:54:4c:49:82:f9:7b:98:2e:
0a:57:0e:9b:f3:94:1c:3b:5d:07:f2:8a:36:eb:58:03:ed:16:
f8:04:f0:63:ca:dd:ff:2b:0f:fa:84:4e:93:13:4d:3b:05:27:
c1:0d:a5:56:3d:cb:ab:3f:54:41:3d:f8:1e:ff:92:0e:1b:cb:
b2:d4:5d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:49:12 2024 by rpki-client on console-ams.rpki-client.org