Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NsT5iZICom1398O4B2OIz4jg6BI.roa
File: NsT5iZICom1398O4B2OIz4jg6BI.roa (raw, json)
Hash identifier: k52MOhuw874J4FH99DxUPjADWTatU4W+jdSgNrI7BgM=
Subject key identifier: 36:C4:F9:89:92:02:A2:6D:77:F7:C3:B8:07:63:88:CF:88:E0:E8:12
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD16257B4D2E1E87E9406BD7324CAA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NsT5iZICom1398O4B2OIz4jg6BI.roa
Signing time: Tue 02 Jan 2024 10:34:21 +0000
ROA not before: Tue 02 Jan 2024 10:34:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207852
IP address blocks: 2a0e:b107:270::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:16:25:7b:4d:2e:1e:87:e9:40:6b:d7:32:4c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36c4f9899202a26d77f7c3b8076388cf88e0e812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9e:dc:74:c5:b4:ee:a8:76:36:c0:35:81:39:
37:b6:f3:75:75:17:d4:bc:bd:8a:aa:ac:70:5d:fc:
cc:6d:51:38:35:3f:d5:5a:24:4b:d7:48:a4:98:96:
32:e9:70:fb:a6:5f:1e:7a:46:4f:8a:17:d6:78:a1:
4f:da:9b:fd:6d:89:f9:80:e2:b8:9d:6e:14:42:a1:
4d:46:2a:dd:a4:ec:65:f6:12:3a:d0:68:6f:bc:27:
54:e8:dd:c3:9a:bb:85:51:8b:55:f4:4d:f1:f2:d8:
a5:88:cc:2d:c8:ab:8b:70:9b:0a:e2:88:87:e1:51:
58:3f:18:b8:3f:41:d0:19:69:a4:85:93:f0:9a:76:
4b:0c:9d:80:31:73:d4:40:d5:23:70:d1:21:ba:38:
3b:0f:bc:99:99:60:91:78:b4:c2:bf:08:8b:51:d8:
2b:8b:73:9b:99:71:6a:7d:f4:d9:b4:fe:dd:34:ae:
14:f9:ee:4a:b1:ea:2c:76:bf:1c:c8:92:5b:43:b2:
d3:b1:ef:dc:bd:29:b9:c5:ad:94:ce:64:b8:df:65:
9c:88:8f:5b:ce:20:6f:4a:46:f5:4e:56:df:96:35:
26:50:5b:88:48:5f:45:ff:36:6e:08:ba:fa:d9:a2:
9f:aa:a1:6f:7a:21:de:22:64:b6:01:ef:36:ec:a0:
00:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C4:F9:89:92:02:A2:6D:77:F7:C3:B8:07:63:88:CF:88:E0:E8:12
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NsT5iZICom1398O4B2OIz4jg6BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:270::/48
Signature Algorithm: sha256WithRSAEncryption
17:2b:0b:73:73:d5:84:5d:1e:e7:ac:68:45:5f:eb:08:82:28:
d5:28:cb:d6:c0:2e:fc:d4:5c:ba:d7:27:ed:91:82:0d:b4:80:
2c:97:64:be:cd:f8:78:5e:46:a1:c6:eb:73:fd:18:e6:cb:6e:
a5:94:fe:b8:f8:de:b9:d4:d6:07:87:16:ce:7c:fc:00:f1:e0:
40:a6:2f:2a:2c:f2:db:dc:4e:19:05:3f:6e:65:0b:1f:22:ad:
6d:66:e8:56:88:96:79:db:9f:f9:b8:16:28:81:52:f7:20:12:
44:aa:5e:33:52:99:32:e6:5c:ae:d5:c2:94:02:de:e4:00:20:
d1:42:7a:b3:29:ce:49:06:1f:03:40:95:67:3e:84:de:2e:c0:
7a:cd:dd:76:a7:78:d8:5e:92:24:95:35:70:4c:f3:4d:a8:47:
f9:6b:3c:20:0f:56:55:44:5c:43:55:cd:fd:17:25:0e:91:92:
5e:1f:e4:53:d5:48:54:89:d6:2b:a7:b6:50:a3:ee:4c:b5:d2:
31:68:c4:8c:27:ff:19:bb:bd:b4:8f:55:dc:14:11:4e:52:9a:
12:39:1b:c6:fd:b2:5a:12:28:0c:70:0e:0d:3b:ed:09:b7:23:
16:bd:97:82:01:f3:43:5f:c8:31:3a:a8:6c:a9:03:a6:19:09:
1f:d3:9c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:06:41 2024 by rpki-client on console-ams.rpki-client.org