Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/NJDTF5BiDxH2xSIKF9q-MQGA90w.roa
File: NJDTF5BiDxH2xSIKF9q-MQGA90w.roa (raw, json)
Hash identifier: NJGq3QWPIg9Qigxi5PBl+vCMoEQbNj/zmOAYVq5Qc5o=
Subject key identifier: 34:90:D3:17:90:62:0F:11:F6:C5:22:0A:17:DA:BE:31:01:80:F7:4C
Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Certificate serial: 018CC34890EC8AE7165EF3FA23A0EACF2B4D
Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/NJDTF5BiDxH2xSIKF9q-MQGA90w.roa
Signing time: Mon 01 Jan 2024 04:29:21 +0000
ROA not before: Mon 01 Jan 2024 04:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48446
IP address blocks: 2a02:c47:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:90:ec:8a:e7:16:5e:f3:fa:23:a0:ea:cf:2b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Validity
Not Before: Jan 1 04:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3490d31790620f11f6c5220a17dabe310180f74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:39:85:4e:ec:4f:e8:91:ff:ac:7a:d4:07:a3:
da:1d:28:1d:47:1d:a6:6b:7b:76:ba:ff:0b:53:7a:
c1:27:eb:c2:e1:5c:4b:ff:6a:b9:f3:bc:eb:4d:60:
d0:df:3d:d8:dc:c7:03:c0:d1:0b:a7:9c:76:fb:52:
16:10:1f:7b:60:65:dd:d8:e6:0b:18:a0:7e:99:16:
2b:2a:e9:62:9d:50:5c:ce:9a:aa:88:4e:ba:64:9c:
87:6c:1d:3b:db:31:c2:92:ed:a8:df:8f:57:5b:d4:
7c:0a:59:8c:fd:5b:99:cb:11:18:2c:3d:91:69:8f:
d3:62:35:0e:cc:66:91:31:51:98:49:d8:83:f3:0e:
66:34:aa:23:6d:80:24:66:1e:28:8b:df:82:70:ea:
97:44:6d:b5:bc:84:b8:93:c4:a3:0b:df:54:01:7c:
db:c6:53:3f:30:3d:4b:3d:52:0c:cd:e3:96:a0:25:
b9:7d:d5:bf:c6:dd:9c:cc:05:ca:74:fa:ff:01:0e:
08:ac:03:32:51:2e:67:43:ad:e7:59:de:ed:b2:c1:
d5:77:62:b9:ef:4d:a4:53:fc:d3:38:ba:ad:85:d6:
03:e7:45:e8:37:b4:2f:e2:ad:98:a9:45:10:98:d2:
9a:92:4d:a7:80:36:92:fa:77:ee:97:8d:35:2a:cf:
04:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:90:D3:17:90:62:0F:11:F6:C5:22:0A:17:DA:BE:31:01:80:F7:4C
X509v3 Authority Key Identifier:
keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/NJDTF5BiDxH2xSIKF9q-MQGA90w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:c47:4::/48
Signature Algorithm: sha256WithRSAEncryption
18:6b:26:1f:de:03:2f:fd:3d:37:93:66:fe:12:bb:e4:6c:12:
10:c1:e9:1b:74:a3:de:05:47:6c:b7:92:8f:ea:52:23:aa:5c:
a7:0a:9b:cf:e3:de:b0:b5:89:e9:4a:c9:25:37:22:be:46:e4:
49:9f:ec:e2:b3:a2:b4:96:01:8b:a2:ae:02:e5:2c:d3:6f:7f:
e4:a9:d6:94:01:a6:8f:17:c3:ba:a3:ab:8a:0e:4f:93:65:eb:
ce:65:28:ff:e2:95:d8:cb:9e:04:8b:27:de:4c:c0:0d:48:e6:
7f:61:34:48:02:0c:ca:5b:74:dc:f0:63:41:25:56:4b:77:9c:
77:81:11:92:99:11:2c:98:41:d1:55:a8:5c:39:7c:62:8a:c7:
af:e4:9f:8a:57:c3:d4:c1:3a:db:6f:76:84:15:0c:fa:66:a4:
61:cc:d4:d2:dd:c7:67:41:ae:63:15:a2:b4:93:35:a0:de:c3:
3b:83:45:66:22:d0:46:13:34:4e:37:c8:ff:e2:2f:18:9d:62:
2d:73:6c:e0:56:7f:cf:54:a0:90:a9:d9:6d:bb:72:31:cd:bc:
fd:93:09:7c:c4:e9:8e:7b:60:13:97:23:9c:de:b1:5b:15:0b:
37:6a:a3:0c:04:77:e5:9a:b0:9b:2d:a1:11:20:30:ee:36:f1:
d6:01:07:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:44:03 2024 by rpki-client on console-ams.rpki-client.org