Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/Ntt3LyCMHdWRXUjTKSkWhDqpMZQ.roa
File: Ntt3LyCMHdWRXUjTKSkWhDqpMZQ.roa (raw, json)
Hash identifier: 2XiFTbA7dyMp0VHyQyyu+XPn3eMsJ9OmQSoNr3k1wMk=
Subject key identifier: 36:DB:77:2F:20:8C:1D:D5:91:5D:48:D3:29:29:16:84:3A:A9:31:94
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 018CC86FD6A77569167D4DB9B35C468BE1BC
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/Ntt3LyCMHdWRXUjTKSkWhDqpMZQ.roa
Signing time: Tue 02 Jan 2024 04:30:21 +0000
ROA not before: Tue 02 Jan 2024 04:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197924
IP address blocks: 2a03:5840:330::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:d6:a7:75:69:16:7d:4d:b9:b3:5c:46:8b:e1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 04:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36db772f208c1dd5915d48d3292916843aa93194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1b:38:06:0e:19:f7:ac:d2:a3:29:ec:c2:f5:
14:24:9e:c0:e3:31:50:8f:8a:2c:f7:f5:84:e6:5d:
b5:2a:2d:5b:97:b9:61:cd:43:c3:db:80:e0:b8:2f:
ec:45:c2:bc:11:ec:64:6f:8f:8b:21:d7:bb:f2:1b:
53:bd:63:b6:8e:8f:7a:4c:7f:89:93:f3:1e:94:06:
13:ed:22:35:38:4f:36:31:7b:1f:8d:ec:7d:ad:37:
b9:94:a2:ce:86:29:20:6b:45:51:01:b6:85:a4:8e:
a8:c2:2e:44:5c:50:ed:7d:58:27:3c:fb:20:5e:f5:
c2:4a:bd:36:39:0c:b9:0d:9d:18:aa:e3:e3:03:aa:
23:83:e9:91:b7:56:d2:db:86:29:67:d4:53:dc:b3:
45:db:79:96:0b:9e:50:6c:5a:6a:5e:fb:47:37:de:
bb:62:57:2f:25:0d:f7:17:fd:76:2c:b1:bd:f3:c4:
b1:76:e4:35:74:bf:95:9c:2c:56:43:5c:5c:24:3d:
2a:94:a0:31:74:ea:9c:2a:e8:09:50:18:4d:2d:b7:
73:ec:d1:bf:d2:36:62:0b:0f:68:68:27:ad:0e:2b:
42:f0:41:5e:3e:e5:2a:e4:c3:b8:7d:2b:77:69:eb:
47:c8:e2:6a:28:50:6e:02:53:1a:10:17:bf:a1:1f:
ae:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DB:77:2F:20:8C:1D:D5:91:5D:48:D3:29:29:16:84:3A:A9:31:94
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/Ntt3LyCMHdWRXUjTKSkWhDqpMZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:330::/44
Signature Algorithm: sha256WithRSAEncryption
30:7b:bf:d6:4f:4f:ba:ea:20:2d:d3:99:f9:98:84:9d:04:65:
a4:4b:52:0f:b2:eb:07:df:23:4d:15:54:2a:6e:95:45:91:cc:
3c:80:00:16:25:30:f6:b1:b6:b1:9b:ea:01:eb:15:4b:c0:0e:
58:df:c8:b4:9c:88:59:19:5b:85:11:39:9b:77:58:fe:b0:8b:
89:64:78:86:9b:0d:a5:e7:1f:33:31:8b:17:c3:d4:26:5f:3e:
a9:37:25:57:97:41:99:0b:38:c8:2a:0c:8f:64:93:fb:1c:d9:
67:ac:52:c5:5b:15:d4:f6:2a:aa:d3:0e:f4:58:2a:59:20:2f:
e8:bc:40:e1:93:c2:a2:d7:9a:17:f7:a1:8e:b7:79:be:f2:a7:
46:8a:57:00:aa:5d:cc:34:6a:60:82:6e:70:e1:29:fd:1e:43:
5a:63:ae:a1:70:85:ad:c3:44:a9:0f:7e:e3:28:10:c7:35:62:
28:f2:91:a6:01:d4:a0:c7:32:10:4b:9b:50:67:0e:f6:19:50:
d4:13:b2:d2:35:1a:77:1a:d0:53:41:9d:6b:46:6a:3e:88:3c:
a2:dd:54:55:97:3e:9b:db:9b:3f:0b:6e:d4:e5:56:32:8f:4b:
c2:34:6e:a1:df:ac:24:66:26:ad:76:e1:1e:44:f9:40:f8:14:
65:84:75:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:08:37 2024 by rpki-client on console-ams.rpki-client.org