Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/NssmxG9Tn0yeQqsLixkbdlFnpQA.roa
File: NssmxG9Tn0yeQqsLixkbdlFnpQA.roa (raw, json)
Hash identifier: 6WVeJ+hOYwIqERvE4RLcFp0hbv8efGzUdhcl9x1Ec1Y=
Subject key identifier: 36:CB:26:C4:6F:53:9F:4C:9E:42:AB:0B:8B:19:1B:76:51:67:A5:00
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 018CC7261C1ADE24EC3F429B28A1174BB249
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/NssmxG9Tn0yeQqsLixkbdlFnpQA.roa
Signing time: Mon 01 Jan 2024 22:30:12 +0000
ROA not before: Mon 01 Jan 2024 22:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199418
IP address blocks: 2a13:1c47:ffa0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:1c:1a:de:24:ec:3f:42:9b:28:a1:17:4b:b2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Jan 1 22:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36cb26c46f539f4c9e42ab0b8b191b765167a500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a9:a8:a5:1a:f4:f8:d1:14:4b:71:7e:29:6b:
bf:93:e9:44:34:44:49:9b:ad:40:b0:9f:01:f0:91:
d0:e4:0b:28:34:f9:50:3a:8a:25:23:af:34:60:ba:
49:6c:ee:e3:fa:49:5a:5e:72:28:e6:e9:29:d3:0a:
f0:90:cd:14:a4:50:2b:b6:c7:1b:8b:8f:18:99:8f:
4d:65:0c:30:c2:0c:7b:45:5d:51:c3:ab:dc:ce:f1:
a5:f3:41:c5:2d:fb:25:d5:67:64:a6:e3:f4:b3:22:
10:8e:1f:80:2e:6b:1d:7d:fb:0c:89:b5:59:65:a5:
3f:3b:79:f6:69:d5:96:2a:d6:92:76:d1:c3:4f:4b:
7a:e6:78:98:f6:6d:8c:0c:94:7b:8b:7c:e1:15:31:
05:a2:69:96:ab:64:86:ef:cd:55:41:8e:7c:57:da:
21:1e:16:67:8b:e5:93:2c:68:cd:59:06:59:2f:be:
5f:af:94:45:88:74:8e:8b:4b:94:b5:28:02:77:3b:
9b:ee:1e:37:c3:21:a5:53:92:55:66:8e:50:62:02:
f5:c3:a6:21:83:8b:f6:01:42:58:69:4f:df:40:f1:
69:48:1f:34:25:2f:ff:00:ba:88:c0:b6:38:f7:f6:
3c:31:2f:f0:c1:2d:e4:e5:3c:8d:30:24:06:a3:53:
b3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CB:26:C4:6F:53:9F:4C:9E:42:AB:0B:8B:19:1B:76:51:67:A5:00
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/NssmxG9Tn0yeQqsLixkbdlFnpQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1c47:ffa0::/44
Signature Algorithm: sha256WithRSAEncryption
29:14:c7:47:4c:fb:4c:e2:bb:9b:7d:8a:1b:0d:03:e9:1f:43:
e5:b3:d1:f2:f1:5f:4b:f3:56:39:c4:70:5f:65:62:d8:c2:35:
6c:19:65:44:59:61:c7:7e:72:f6:4c:0b:fb:79:bd:43:91:5b:
5f:53:18:53:fd:fd:f6:70:09:8a:2e:40:ff:5e:1f:14:a7:da:
8a:43:68:8b:26:dc:50:ec:af:dd:a7:6f:91:6e:88:15:0e:2a:
be:e1:b1:cb:1a:49:7d:fc:cf:87:b4:f1:40:3e:df:45:c3:e1:
03:f2:25:04:28:dc:bf:bb:0e:85:0e:ab:ff:37:6a:3d:66:a9:
22:bc:3b:10:95:41:1d:b5:5a:65:4d:2e:53:a5:79:53:1e:04:
5f:b0:b4:11:f0:9e:d0:e9:51:32:f5:74:1e:4d:1e:7b:90:5b:
ce:34:6b:ab:b9:7c:eb:72:9b:36:7a:09:3c:8a:62:10:40:40:
cf:28:5f:c1:2a:26:8a:00:e9:4d:13:c6:21:44:12:b4:02:db:
c4:36:2e:cb:75:52:03:49:aa:9c:84:2c:6b:2b:74:2c:ce:22:
cd:63:c6:c7:97:2d:ce:ba:55:d8:a0:27:e0:0b:b8:e5:59:e0:
22:5f:43:e1:9d:3f:ef:1e:fb:0b:64:d9:a1:70:aa:33:dc:cb:
36:5f:72:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:42:30 2024 by rpki-client on console-ams.rpki-client.org