Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/nOdF_GFZE_ScYtGHzx3MPSmQaPM.roa
File: nOdF_GFZE_ScYtGHzx3MPSmQaPM.roa (raw, json)
Hash identifier: Hs8kkhzWSInG2bbz2V+A6c+fmfyTkYFnJuZQoyAUjhc=
Subject key identifier: 9C:E7:45:FC:61:59:13:F4:9C:62:D1:87:CF:1D:CC:3D:29:90:68:F3
Certificate issuer: /CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Certificate serial: 018CC49373E74BFA3A0DC93ADEF157F77AAD
Authority key identifier: 20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/nOdF_GFZE_ScYtGHzx3MPSmQaPM.roa
Signing time: Mon 01 Jan 2024 10:30:46 +0000
ROA not before: Mon 01 Jan 2024 10:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49362
IP address blocks: 193.9.160.0/19 maxlen: 19
2a0d:aa00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:73:e7:4b:fa:3a:0d:c9:3a:de:f1:57:f7:7a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Validity
Not Before: Jan 1 10:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ce745fc615913f49c62d187cf1dcc3d299068f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:65:9d:6b:7f:c8:3b:ab:88:f7:49:59:2c:56:
8a:5c:48:28:30:0a:46:dd:43:d4:11:b7:23:45:d8:
72:9d:61:a2:3c:49:07:3e:f3:29:5d:2d:f4:c8:af:
2c:30:8d:9c:24:72:30:22:36:32:de:9c:68:f6:b3:
3e:5c:e6:2c:3a:65:2d:bd:e7:9a:78:98:ef:b6:37:
9a:bb:b7:52:35:cf:af:65:6b:59:a9:3f:fe:2c:b4:
8c:52:95:0b:1b:da:dd:b1:22:a4:dd:9f:15:ef:31:
68:d3:23:62:ee:74:04:6e:45:f7:5e:fc:68:f8:e9:
9d:dd:cd:52:31:4c:78:ae:03:0b:48:46:a4:da:88:
0e:83:30:15:88:84:70:81:6d:e4:c0:cb:ba:59:90:
ed:bd:0b:24:ff:2a:65:9c:55:85:01:4c:82:74:8c:
14:4a:e9:53:f3:34:6e:b8:34:2d:24:87:08:65:2a:
bd:80:c6:80:68:11:c7:f6:b0:70:8e:f6:f4:bb:19:
b6:21:3a:f9:77:b6:81:d6:74:2b:83:71:4c:2b:b0:
93:30:19:9d:ce:35:01:ee:a7:70:da:89:52:38:97:
30:cc:cb:12:ff:2f:e2:48:a9:7a:05:8b:83:3f:57:
e0:73:79:5c:a4:96:61:a4:e0:fe:c7:73:0d:a5:d3:
6e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E7:45:FC:61:59:13:F4:9C:62:D1:87:CF:1D:CC:3D:29:90:68:F3
X509v3 Authority Key Identifier:
keyid:20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/nOdF_GFZE_ScYtGHzx3MPSmQaPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.160.0/19
IPv6:
2a0d:aa00::/29
Signature Algorithm: sha256WithRSAEncryption
22:c1:9a:f2:aa:86:44:da:aa:5e:c3:db:45:6b:76:53:d2:2f:
e5:4b:ca:53:40:c6:1e:99:40:f6:01:14:c9:2d:f5:f0:8d:c3:
97:6d:f0:3f:be:48:51:c5:a7:72:cb:83:76:78:66:34:bb:e6:
a2:2f:87:78:f5:a4:f8:be:62:07:04:7c:a6:e7:42:39:71:72:
1f:d5:26:79:b2:b8:aa:09:6b:40:e4:b2:34:d8:2d:be:30:60:
52:4d:89:6f:d3:0c:b0:36:ad:bd:ff:17:50:87:b5:da:a6:49:
84:8e:b5:23:ca:4f:eb:95:d3:32:25:c6:da:8a:41:a5:75:cf:
f9:1e:34:04:dd:60:27:67:e8:bb:05:11:86:75:f1:f7:7b:fe:
bb:74:64:04:1b:84:07:21:37:4b:b6:74:34:53:e1:5d:a7:d5:
f6:c2:f5:42:c5:b2:be:48:c8:39:41:6d:19:e4:98:59:a8:99:
17:21:fe:a2:ca:0d:d8:fc:46:68:72:80:ce:32:6b:8a:ef:7f:
72:36:76:f7:18:ac:50:24:74:23:6f:0a:c9:bd:0b:b8:c5:c0:
6d:a6:b6:19:84:74:76:00:5d:7f:a7:10:fb:a4:61:43:d7:3e:
09:02:a5:17:b0:d2:67:1b:8e:ac:15:32:b5:75:5e:65:0a:da:
6e:e5:d9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:41:25 2024 by rpki-client on console-ams.rpki-client.org