Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nsjPQifh3sb9BfYVC7KDajVfsX8.roa
File: nsjPQifh3sb9BfYVC7KDajVfsX8.roa (raw, json)
Hash identifier: DS/es/ykzpFtTutY9oXpx/YmolepiKOCxLugFl5Bu2M=
Subject key identifier: 9E:C8:CF:42:27:E1:DE:C6:FD:05:F6:15:0B:B2:83:6A:35:5F:B1:7F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018D5C34CBE1512C69A18EA9B67611810F4A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nsjPQifh3sb9BfYVC7KDajVfsX8.roa
Signing time: Tue 30 Jan 2024 21:09:40 +0000
ROA not before: Tue 30 Jan 2024 21:09:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215697
IP address blocks: 2a0e:97c0:ec0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5c:34:cb:e1:51:2c:69:a1:8e:a9:b6:76:11:81:0f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 30 21:09:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ec8cf4227e1dec6fd05f6150bb2836a355fb17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b9:bf:cd:64:01:c5:77:a8:1a:cf:79:d1:84:
d6:a3:41:99:0e:0c:cc:bc:11:30:a9:a6:4e:61:b1:
4e:ae:16:d6:7e:29:12:58:be:48:ab:62:77:27:f9:
ba:0b:79:43:c5:bc:f6:4e:44:b8:c2:65:62:ca:10:
d6:9f:a9:65:6f:85:6b:10:05:b8:68:a8:6f:8f:80:
a2:36:9d:e9:89:42:78:f5:b9:ff:df:fe:61:89:c2:
1f:c4:cd:e0:77:fe:78:ea:a9:2c:91:b2:76:33:75:
2d:d3:33:57:fb:10:44:6c:d8:1d:56:06:7c:ad:15:
96:d5:07:63:55:e7:d8:e1:24:61:3d:23:3b:5b:b5:
f3:80:10:72:92:32:98:cc:90:78:d7:f8:0a:e4:0e:
e8:1d:b7:d5:62:b4:5d:a8:ee:3e:9a:5a:ce:00:2c:
bd:fd:61:dd:ee:6c:91:4e:e1:18:56:ac:de:59:c8:
ed:fc:f4:cc:68:16:05:a1:e8:a7:b5:0d:84:03:cd:
29:18:8a:79:43:d3:bf:2c:78:55:c0:cf:d9:c3:ed:
9b:06:7c:7d:4f:45:c7:9e:f1:a5:d8:dc:8d:08:89:
29:67:ce:52:f7:8d:0e:87:e0:20:37:9e:1b:52:fd:
63:3d:3d:ec:a2:f1:80:bc:52:27:a0:6c:38:0f:67:
4e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C8:CF:42:27:E1:DE:C6:FD:05:F6:15:0B:B2:83:6A:35:5F:B1:7F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nsjPQifh3sb9BfYVC7KDajVfsX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:ec0::/44
Signature Algorithm: sha256WithRSAEncryption
c3:bb:47:7f:5f:83:db:70:98:62:8b:89:89:7c:c2:5c:98:54:
89:71:97:e8:8c:56:96:53:5a:61:a1:2d:28:0a:48:de:87:32:
de:ed:75:75:e6:40:52:b1:1d:a2:3f:89:5c:73:04:06:02:b5:
15:6c:75:b7:be:1f:06:5b:d6:38:aa:f0:a7:39:63:ce:62:8d:
0f:a8:d1:af:b0:a8:f5:72:41:8d:95:a8:9e:82:9a:91:39:7b:
4f:db:81:2f:ac:4f:5a:10:eb:7a:eb:4f:29:55:31:27:84:41:
6e:1a:7b:49:52:55:9d:a2:23:93:20:83:34:57:cd:47:b8:c4:
3d:44:2b:64:49:aa:38:f6:e4:11:75:fd:ba:32:17:18:bb:91:
ac:e6:ee:db:c1:0c:2c:02:a8:b7:d9:36:03:2b:64:8a:ec:eb:
4d:05:ab:0d:c7:ad:b4:60:4b:c9:0e:40:6a:53:f3:5d:23:35:
36:c3:04:6f:06:29:f7:cd:18:1c:5b:0f:3e:33:8e:3e:a5:0f:
95:a5:d7:40:e9:76:f2:ed:d4:19:35:66:a7:ef:19:69:4a:02:
9c:50:2d:80:24:25:3f:4f:07:8f:ce:6b:94:7b:f5:ee:24:ca:
08:2c:02:fc:e5:2e:43:71:50:e8:c6:31:c7:c7:b7:39:72:a5:
1c:62:01:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:03:06 2024 by rpki-client on console-fra.rpki-client.org