Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/NOeyG7qoDgI0EVVWoOyA8nCVAhY.roa
File: NOeyG7qoDgI0EVVWoOyA8nCVAhY.roa (raw, json)
Hash identifier: bwyG+cSdTFV5oWpYFaznBMSKMEY0d28mpQ3H+RW3ET0=
Subject key identifier: 34:E7:B2:1B:BA:A8:0E:02:34:11:55:56:A0:EC:80:F2:70:95:02:16
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018CCA2A5AA06FEB0ECFA2E23C0CF374056D
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/NOeyG7qoDgI0EVVWoOyA8nCVAhY.roa
Signing time: Tue 02 Jan 2024 12:33:42 +0000
ROA not before: Tue 02 Jan 2024 12:33:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209864
IP address blocks: 2a06:e881:5500::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:5a:a0:6f:eb:0e:cf:a2:e2:3c:0c:f3:74:05:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 12:33:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34e7b21bbaa80e0234115556a0ec80f270950216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:68:02:b2:8e:62:ae:20:7e:d4:5a:8d:b0:13:
e2:62:a2:f5:99:aa:43:7c:0f:b6:2d:14:f9:52:75:
a2:f7:01:44:be:88:65:7f:f8:2d:c0:c9:29:5c:1f:
81:e7:03:8c:e7:e1:2e:d5:77:7b:ae:fb:6b:75:61:
3d:c6:56:9a:d5:63:75:1b:51:8d:9e:c6:81:12:99:
0a:fd:dc:01:cb:68:a9:13:e1:ab:e6:03:d2:18:aa:
af:14:1c:db:32:ba:fc:56:ba:99:25:8c:e8:dd:9c:
20:69:7b:a5:36:f0:6f:dd:32:a5:0d:ef:87:3e:cc:
91:c9:cc:e4:17:dc:41:6f:66:d5:d9:f6:55:48:98:
ce:69:4a:fd:7c:20:a4:00:50:ee:e0:1a:ee:8d:68:
32:4a:22:0e:bd:eb:f8:4d:a3:b4:48:3b:df:c6:4b:
e5:6c:ed:b1:41:d9:9f:92:c6:de:ab:05:b7:8f:f6:
fd:0f:1f:41:88:4f:b1:e7:9e:85:ba:86:23:4f:1a:
d2:02:67:32:7e:4d:6e:ac:29:29:27:e8:f8:ac:d1:
fb:ad:7d:8b:0c:15:35:0d:07:16:06:46:ef:32:4f:
20:af:cd:30:61:d7:67:06:dc:ae:22:ce:df:0e:71:
e6:36:f8:30:83:e6:53:b7:ba:4a:48:f6:b9:09:8b:
c0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E7:B2:1B:BA:A8:0E:02:34:11:55:56:A0:EC:80:F2:70:95:02:16
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/NOeyG7qoDgI0EVVWoOyA8nCVAhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:5500::/44
Signature Algorithm: sha256WithRSAEncryption
14:c1:d7:86:27:a1:af:d4:04:7a:d6:aa:9f:fb:e8:f0:e9:c2:
cf:e3:f7:2b:a8:51:da:90:12:67:5b:c8:fe:d1:4e:44:10:3d:
d6:62:62:eb:11:ce:a6:12:a8:26:59:4d:fd:01:a3:ce:f5:2f:
51:13:96:24:1e:f2:1f:99:2d:92:ae:c0:5f:5d:1e:f7:44:41:
32:0c:2b:2e:6e:69:0e:6c:76:84:91:9a:35:04:19:b5:39:df:
84:e0:70:b7:91:ae:ed:5d:84:d1:73:f8:47:b4:01:95:a0:ec:
bf:d5:ff:a9:e9:4a:43:2d:07:4d:06:8b:49:2b:93:39:6c:c4:
8c:8c:19:62:88:18:68:42:10:86:7d:a2:11:f2:d2:05:b4:95:
ff:b4:4b:d0:2b:3c:63:81:67:a9:1e:ac:94:5c:51:63:3d:3b:
37:fd:ee:0a:58:39:88:7b:a4:f2:81:2f:8e:d8:d0:8d:e8:ef:
be:39:63:77:9a:c1:74:01:6f:db:c1:09:03:a3:4c:ae:39:e8:
4d:55:05:55:60:e8:12:aa:02:74:1f:83:93:40:77:24:cc:d4:
32:9c:4a:58:54:52:37:4a:20:a7:95:18:76:47:93:9c:30:16:
81:83:2c:0f:62:20:fb:7e:f2:70:e3:9d:2b:8b:75:d5:7a:bb:
c9:f2:57:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 04:09:27 2024 by rpki-client on console-ams.rpki-client.org