Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nUL1WRFL50BClScTPGNuiarBy7E.roa
File: nUL1WRFL50BClScTPGNuiarBy7E.roa (raw, json)
Hash identifier: skImkDlG+VSLCDQNpkBvtaCwK9IDOIZu9EFt1lybm2Y=
Subject key identifier: 9D:42:F5:59:11:4B:E7:40:42:95:27:13:3C:63:6E:89:AA:C1:CB:B1
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCDFF5011BC7F3215EF324B442C01F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nUL1WRFL50BClScTPGNuiarBy7E.roa
Signing time: Tue 02 Jan 2024 10:34:07 +0000
ROA not before: Tue 02 Jan 2024 10:34:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142164
IP address blocks: 2a0e:b107:1470::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:df:f5:01:1b:c7:f3:21:5e:f3:24:b4:42:c0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d42f559114be740429527133c636e89aac1cbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7f:62:75:38:8a:22:9b:a4:13:c5:6c:4f:73:
11:62:a3:62:fc:dd:f3:9c:4a:6c:d1:02:86:2f:7a:
d7:fc:a7:d5:ab:4c:34:25:0d:e8:04:02:fe:8c:2f:
7a:f8:eb:30:e0:76:8c:63:dd:5d:f6:27:ac:2c:89:
68:c5:d9:b7:81:81:bf:57:ea:6d:fd:97:d3:a6:21:
a0:c0:09:49:a9:24:e6:a4:2d:50:03:92:39:a2:c5:
d9:2b:39:d0:2c:ab:6c:06:71:4f:5c:b4:57:44:75:
10:62:fe:58:c2:59:9c:43:e4:a3:9d:ab:ed:85:c2:
30:cf:1b:d3:db:b7:8c:9c:c1:5e:73:a5:3f:31:63:
8d:2c:1e:54:f4:b2:88:b7:00:82:1e:a9:66:9d:e2:
96:0b:4a:46:9b:7b:bb:aa:2b:68:58:f0:ff:a4:07:
79:fe:d5:50:c1:af:e1:b8:70:5d:c0:22:6c:7d:ae:
78:66:30:95:5f:d9:cc:3f:f3:b6:81:da:a9:61:ac:
02:2b:af:29:c9:d7:c6:1e:ba:20:c3:5a:e2:c4:b5:
e6:78:fb:ef:07:16:d7:e9:7a:b0:a5:e1:04:3a:9b:
22:ac:8b:ee:9f:13:17:60:2a:84:52:a8:27:76:4a:
48:c1:5b:ec:53:3b:59:56:bb:05:e8:3c:c1:5c:ea:
6b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:42:F5:59:11:4B:E7:40:42:95:27:13:3C:63:6E:89:AA:C1:CB:B1
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nUL1WRFL50BClScTPGNuiarBy7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1470::/44
Signature Algorithm: sha256WithRSAEncryption
72:59:cd:eb:4e:a7:a0:4f:af:8c:05:b9:71:5c:3d:dc:63:01:
e9:3e:5e:81:7e:ba:e2:55:18:32:41:f0:ac:cc:8c:3c:28:6f:
b3:f1:46:f4:42:e6:fb:e7:86:47:e3:b0:75:13:fa:8c:09:70:
4b:bd:4f:76:7e:9a:21:d8:da:f9:0e:98:b2:3e:80:e6:6a:69:
e0:12:b1:c9:d9:10:1e:23:2f:df:b4:7e:cb:1f:26:72:58:af:
7f:35:d8:34:12:d8:9a:74:50:6f:d5:85:f6:f1:57:b3:66:08:
23:39:70:07:cc:22:86:98:35:06:e7:9c:2a:94:b1:e1:89:b4:
6d:14:e0:67:36:80:47:19:f7:fd:ab:71:77:76:6d:05:49:8a:
23:4f:d9:ca:fd:07:9d:d0:48:19:5f:2d:00:1d:70:69:cc:fc:
05:84:70:18:76:1f:19:5d:5c:95:c5:2b:a3:40:4d:a9:0f:9e:
62:cd:48:20:2b:a5:86:a3:ab:c4:db:c9:d0:1b:1b:ca:93:c2:
73:cd:b4:24:c1:12:e1:a9:95:c5:e6:2d:d3:df:75:8f:15:4b:
45:00:6b:48:ad:38:1f:f2:c6:21:92:79:ed:8d:13:73:07:ae:
2f:3a:e0:5b:2b:48:0d:8c:a6:75:7f:41:17:7d:1b:38:2b:d3:
1f:22:36:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:39:06 2024 by rpki-client on console-fra.rpki-client.org