Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/N9c3boAv5mJgjG2higtglPUJGWI.roa
File: N9c3boAv5mJgjG2higtglPUJGWI.roa (raw, json)
Hash identifier: 2BLOMJNgeLw4GeqAKNj6M2zM/JazTZVIrWMx3Gl/6Lg=
Subject key identifier: 37:D7:37:6E:80:2F:E6:62:60:8C:6D:A1:8A:0B:60:94:F5:09:19:62
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 018CC4930DE29FDFD3D1731DE69778E93BA5
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/N9c3boAv5mJgjG2higtglPUJGWI.roa
Signing time: Mon 01 Jan 2024 10:30:20 +0000
ROA not before: Mon 01 Jan 2024 10:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209575
IP address blocks: 213.208.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:0d:e2:9f:df:d3:d1:73:1d:e6:97:78:e9:3b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jan 1 10:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37d7376e802fe662608c6da18a0b6094f5091962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ca:0b:fc:e4:40:cf:f7:74:62:1c:15:1a:fe:
a6:b2:e1:66:b6:9f:31:76:42:83:d0:3c:ec:64:04:
bb:8d:42:8d:33:58:a5:40:18:01:ee:ce:18:5d:a6:
87:63:6d:f2:9a:77:7f:e8:fd:3d:70:bd:8c:49:b0:
9b:1e:93:8b:83:d6:54:88:8b:40:10:04:db:d1:fa:
65:72:14:1e:cc:4c:4b:fb:eb:d1:08:44:57:1e:94:
7f:33:2f:65:62:c1:48:b5:b1:c5:e1:88:cc:f9:a5:
74:b7:54:e4:d7:50:f3:b5:45:8e:aa:27:93:7d:f2:
48:43:10:52:ce:e9:ba:cc:92:40:8b:2b:77:ba:a1:
b8:f9:50:7d:6e:c5:c9:06:57:37:6b:0a:47:7b:e5:
7f:49:46:2f:a2:06:dd:1e:26:f7:e9:22:93:cb:e4:
25:1e:0b:ad:01:fe:ae:44:c0:81:cf:98:38:2b:93:
ad:8d:33:d4:75:72:ef:c7:e4:e7:e3:71:48:9a:17:
4f:24:2c:59:e7:6f:ba:eb:6f:97:97:02:da:91:7b:
81:43:03:c9:90:dd:6d:ba:e8:90:ac:d0:93:09:80:
1c:a3:44:d0:54:17:44:4e:db:6b:25:08:16:da:69:
df:1f:49:7b:82:e5:6f:ac:a7:9b:6a:73:33:14:e0:
45:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D7:37:6E:80:2F:E6:62:60:8C:6D:A1:8A:0B:60:94:F5:09:19:62
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/N9c3boAv5mJgjG2higtglPUJGWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.208.143.0/24
Signature Algorithm: sha256WithRSAEncryption
88:7d:5a:c4:45:b9:04:60:5b:20:6e:6c:4e:64:25:e3:de:5f:
7d:f2:6d:bb:a8:1a:01:84:75:ba:ac:09:0f:dd:de:6b:66:ef:
80:a2:58:54:92:e5:9d:b0:4a:6d:3c:79:b9:07:b9:f6:23:c2:
f7:7c:8f:bf:a4:a4:2a:b8:3c:71:69:a1:71:ce:b0:8c:12:ed:
bf:72:53:3e:86:22:14:a1:f9:70:3a:af:29:28:3d:47:97:84:
77:da:c3:56:b9:50:0d:fc:57:4d:ba:dd:38:bd:89:2b:aa:b5:
c6:f3:ca:86:47:04:9a:38:aa:bc:64:d0:70:53:d9:53:d7:45:
52:90:1c:06:7f:ab:53:cb:85:cd:25:bc:9f:bc:bd:42:a1:56:
c3:08:1a:5b:9f:74:40:ea:91:ae:70:20:89:95:4b:2d:fa:5a:
a3:22:8e:10:6a:82:c6:73:54:25:ae:0f:07:f1:4c:06:6b:77:
30:9b:b6:94:f5:19:3e:7d:23:1f:87:4d:3c:2f:b7:4c:3c:4e:
76:c5:2f:bc:79:2a:c8:96:b5:8c:a3:ed:fd:54:2f:35:cc:78:
59:62:4e:ab:dd:17:44:21:90:05:39:c6:27:e2:15:70:2d:65:
3d:97:2c:a7:b3:5d:9d:7e:a1:dd:4b:0d:67:b7:7e:14:07:50:
42:ba:bd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 18:22:33 2024 by rpki-client on console-ams.rpki-client.org