Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/NIYX35bpMwAJ3HZJzo3t6s9eeO4.roa
File: NIYX35bpMwAJ3HZJzo3t6s9eeO4.roa (raw, json)
Hash identifier: z4OfIlXqlAz16dL0dJqh5pOqIS9ftGoxK6M48YXIiD8=
Subject key identifier: 34:86:17:DF:96:E9:33:00:09:DC:76:49:CE:8D:ED:EA:CF:5E:78:EE
Certificate issuer: /CN=9df4e80b4cad4e50b788edf16976712deeff6c0d
Certificate serial: 018CC5DC1649A85EE465EC7DFF4221D7C840
Authority key identifier: 9D:F4:E8:0B:4C:AD:4E:50:B7:88:ED:F1:69:76:71:2D:EE:FF:6C:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/NIYX35bpMwAJ3HZJzo3t6s9eeO4.roa
Signing time: Mon 01 Jan 2024 16:29:44 +0000
ROA not before: Mon 01 Jan 2024 16:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206321
IP address blocks: 2001:67c:2d2c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:16:49:a8:5e:e4:65:ec:7d:ff:42:21:d7:c8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df4e80b4cad4e50b788edf16976712deeff6c0d
Validity
Not Before: Jan 1 16:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=348617df96e9330009dc7649ce8dedeacf5e78ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:e5:40:6e:a5:6a:b7:1b:a9:b0:96:6e:d8:
ba:9c:28:08:51:7e:ed:b3:66:36:c3:c8:86:ce:43:
bc:16:7c:35:b5:d0:9c:c9:fb:3a:ed:67:31:17:33:
ad:62:a3:6c:a1:9b:c1:33:0a:42:48:6b:1e:7b:60:
58:69:14:e3:6f:dd:02:eb:43:5a:14:50:72:3d:c8:
ab:99:cf:12:f7:20:cd:31:b7:cc:e3:79:f8:ad:af:
59:cd:68:d9:70:cf:3b:fa:2f:0f:f6:93:ac:09:c3:
e5:cd:b2:1c:f4:72:d7:69:4f:ad:bd:89:2c:aa:74:
05:ea:a3:f3:c2:44:02:82:86:70:5f:5d:48:81:24:
7a:f4:2f:c7:45:e6:f8:86:68:af:19:58:80:ae:85:
6f:58:02:61:23:6b:29:ef:78:a6:c6:ca:2e:86:20:
b3:7a:e1:88:2a:2b:ab:bd:bb:1a:7e:e6:d8:8f:7d:
fb:ac:f6:09:14:08:64:d1:2d:80:38:11:4c:3d:8b:
a4:df:cb:78:c9:0a:a6:5c:9a:63:4c:f1:5e:1f:12:
dc:7e:5f:55:a4:99:c2:d2:96:af:d1:2d:24:a3:ff:
46:48:ab:81:b4:2a:6e:e6:16:8f:83:8a:4e:1d:99:
1f:36:08:79:45:f5:01:e3:1a:11:7b:58:b8:17:12:
eb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:86:17:DF:96:E9:33:00:09:DC:76:49:CE:8D:ED:EA:CF:5E:78:EE
X509v3 Authority Key Identifier:
keyid:9D:F4:E8:0B:4C:AD:4E:50:B7:88:ED:F1:69:76:71:2D:EE:FF:6C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/NIYX35bpMwAJ3HZJzo3t6s9eeO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2d2c::/48
Signature Algorithm: sha256WithRSAEncryption
71:ca:25:95:9c:52:82:93:07:44:8c:7a:03:51:74:dc:f8:df:
bd:69:4c:3a:4f:a8:2f:c4:61:7c:f5:19:a9:ad:a9:e5:ca:d5:
61:ac:aa:ee:00:b4:f5:65:e6:e9:c1:6a:79:8e:01:5e:96:13:
db:6e:5a:66:d4:78:e3:e1:b6:68:bf:37:d2:7d:c3:13:6f:59:
f9:36:e6:f0:c9:68:79:97:b8:76:51:f7:46:8f:9b:b5:ea:22:
a6:14:11:41:e8:87:36:12:6b:87:51:9b:ab:9a:65:4e:cd:c6:
54:3f:24:61:bd:21:ac:bb:31:8b:58:04:d2:50:2c:9c:3a:aa:
e7:c0:c0:66:b5:15:68:50:6b:b1:24:cd:93:b2:b0:14:48:62:
21:85:b6:59:09:8d:cf:10:81:2e:f3:89:5d:25:14:fa:ff:73:
1f:77:d6:35:44:27:c2:ef:f7:b5:3a:54:5d:1f:93:0a:62:c3:
25:39:8c:ba:5f:66:93:15:32:89:3b:1c:fb:99:92:70:e3:06:
44:10:45:e1:9f:bc:82:5d:c3:5d:9e:31:67:53:76:93:7e:11:
4b:7c:07:8a:1e:6a:fa:55:3d:28:6f:e0:fa:0a:11:f0:2a:33:
f1:50:a2:9b:1e:9e:2a:46:d3:f1:53:aa:3b:79:02:9d:ac:72:
89:18:3b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:40:03 2024 by rpki-client on console-ams.rpki-client.org