Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/NfS6AucFnEw_Y4MD7wlBGqbxpn4.roa
File: NfS6AucFnEw_Y4MD7wlBGqbxpn4.roa (raw, json)
Hash identifier: bq255G/w5Lc805EBC4FKvOcYPtHj5LkrcdJY+Xx3mP0=
Subject key identifier: 35:F4:BA:02:E7:05:9C:4C:3F:63:83:03:EF:09:41:1A:A6:F1:A6:7E
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC79560D4D7EF01C5ADC8721DF5F32B3C
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/NfS6AucFnEw_Y4MD7wlBGqbxpn4.roa
Signing time: Tue 02 Jan 2024 00:31:44 +0000
ROA not before: Tue 02 Jan 2024 00:31:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60996
IP address blocks: 128.0.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:60:d4:d7:ef:01:c5:ad:c8:72:1d:f5:f3:2b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35f4ba02e7059c4c3f638303ef09411aa6f1a67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:38:72:f1:50:f2:61:91:7c:8d:4d:12:b5:02:
91:5e:1a:30:54:66:d9:5f:ec:ec:c6:a6:ae:52:97:
d0:03:ab:7a:66:00:2c:28:d6:95:16:af:ed:81:96:
c9:49:ce:20:63:da:85:21:1e:fd:3f:fc:70:49:e1:
83:f7:13:f5:34:02:95:45:d5:b7:07:c6:2b:fd:03:
38:ac:37:f2:76:d1:b8:5d:ba:67:85:c9:c5:2e:6f:
8c:fd:f1:64:92:35:cc:18:75:6d:38:d1:22:ef:71:
bc:c1:31:23:28:2d:2e:60:ee:bc:a0:8d:8d:69:78:
06:97:ef:59:67:71:40:6d:ed:6e:79:b4:b6:a4:5a:
c4:8c:91:e3:2e:21:63:c5:6f:d1:b0:90:b0:64:13:
89:f1:60:37:f8:4c:b1:9b:e3:1e:d8:2c:d3:97:c2:
e5:4b:46:0b:43:6b:c0:33:82:36:0a:88:2f:2f:e1:
27:ad:e3:52:b3:0f:0d:2e:c8:2f:d3:59:3f:16:a1:
38:25:7e:a9:ea:bf:78:8f:35:06:f4:70:44:41:a0:
80:a8:30:cd:9f:eb:4b:ba:69:5d:13:d4:36:a5:78:
3e:a0:5b:da:fc:37:a5:ad:e3:7a:c1:92:9d:5a:a2:
59:d4:4d:44:b2:29:45:04:09:aa:13:01:36:d4:c4:
09:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F4:BA:02:E7:05:9C:4C:3F:63:83:03:EF:09:41:1A:A6:F1:A6:7E
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/NfS6AucFnEw_Y4MD7wlBGqbxpn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.56.0/24
Signature Algorithm: sha256WithRSAEncryption
32:3e:d8:22:47:45:b8:c8:c0:5f:b7:13:4e:d7:ce:1d:8b:76:
d5:78:b2:e8:44:a6:f4:69:f0:92:4b:68:48:21:7e:5a:ef:c7:
4f:46:14:3c:c5:df:bb:23:4f:7a:bc:38:13:a7:e3:3b:79:30:
f4:78:57:ef:9c:1c:65:ac:ef:b3:b8:06:07:4e:02:14:6a:93:
9a:94:62:a7:10:5e:bf:91:3c:a7:13:1f:ec:86:5f:71:32:29:
ba:6c:aa:6e:07:3d:e8:06:2f:ed:ba:8f:76:68:e4:33:cc:99:
47:e8:5d:6c:12:29:07:b3:37:49:df:78:d4:04:20:db:3f:eb:
0f:57:d6:f9:b3:bb:8e:2d:c8:d2:50:98:20:98:83:93:6b:6e:
61:17:a8:1a:43:c8:b8:a9:60:38:61:74:ab:8f:82:55:65:96:
5f:46:c5:11:d0:81:86:76:4c:a2:24:ca:0e:66:a3:68:e2:4e:
7c:32:a7:05:1f:1e:b9:59:d0:72:b3:49:83:65:4f:69:cd:4e:
ef:a3:51:58:35:5f:01:d5:14:3c:b7:ca:10:17:04:7a:f1:4d:
67:d7:8a:55:f3:ef:03:83:7b:34:b2:87:cc:8d:14:bc:0c:a5:
a9:da:f1:29:42:4d:12:10:32:a0:20:b7:04:5c:98:68:62:94:
1f:84:f1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:40:06 2024 by rpki-client on console-ams.rpki-client.org