Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/9XwfTj6sHI9khJFNNWBsSn9iWds.roa
File: 9XwfTj6sHI9khJFNNWBsSn9iWds.roa (raw, json)
Hash identifier: DGmHN2hq6aKkb9GGpx+XFWWiaqnKwC++5F4rGL0KzT4=
Subject key identifier: F5:7C:1F:4E:3E:AC:1C:8F:64:84:91:4D:35:60:6C:4A:7F:62:59:DB
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 018CC64B625DC3F819FBF5FA5375DCBF01B8
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/9XwfTj6sHI9khJFNNWBsSn9iWds.roa
Signing time: Mon 01 Jan 2024 18:31:18 +0000
ROA not before: Mon 01 Jan 2024 18:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48883
IP address blocks: 2a0e:46c4:1400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:62:5d:c3:f8:19:fb:f5:fa:53:75:dc:bf:01:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 1 18:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f57c1f4e3eac1c8f6484914d35606c4a7f6259db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:64:1b:3b:3f:6c:3e:fa:60:ba:68:10:82:8e:
90:7d:40:be:a5:06:fa:71:63:97:2f:cd:dc:85:10:
29:b1:bc:87:46:2e:df:55:eb:84:f9:59:83:db:43:
73:4a:ec:cf:b1:61:1d:8c:1d:23:83:b8:c8:1f:be:
91:0f:d2:ff:cd:8f:8f:66:aa:96:59:99:29:a0:e0:
c7:5c:06:aa:95:e4:82:2d:d3:ae:fa:a2:75:a7:86:
20:42:ee:20:e6:c4:91:8a:05:17:db:55:63:1c:a1:
50:61:e8:8e:e7:86:43:2e:e4:47:f6:a2:3b:4c:d5:
55:a9:eb:ab:d4:97:07:c5:4c:c7:36:8f:b5:e0:5f:
1f:40:d0:ae:b4:c6:c1:7b:b0:0a:a1:f8:1a:e9:56:
6d:6c:fc:02:46:7b:db:71:22:cd:2d:f8:14:64:4c:
e0:d1:82:8f:b9:0e:54:fe:ed:da:e6:67:9f:7e:d4:
99:fa:18:5a:6e:a3:89:92:05:b0:9d:eb:c8:e6:21:
43:5f:95:bb:cd:68:9b:9a:29:0c:03:a8:1c:07:ac:
c1:03:62:3d:5d:3f:06:0a:b5:07:0f:92:be:11:0b:
0c:42:8c:a7:3d:5a:96:11:67:34:be:b9:79:c4:06:
c4:4e:46:ee:c8:df:57:fa:34:a5:c8:27:3f:08:62:
c3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7C:1F:4E:3E:AC:1C:8F:64:84:91:4D:35:60:6C:4A:7F:62:59:DB
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/9XwfTj6sHI9khJFNNWBsSn9iWds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:1400::/40
Signature Algorithm: sha256WithRSAEncryption
84:63:71:ab:88:09:bf:61:49:5d:c4:f8:4b:9f:e7:a5:af:78:
bb:68:80:1c:c4:03:1a:9b:eb:fd:84:47:57:7c:19:07:ac:e5:
87:27:02:d8:4e:58:78:d3:d0:cd:06:c0:35:51:06:7b:05:40:
4e:97:1b:6e:7a:fd:59:b6:89:59:db:66:c2:a1:3f:6a:3d:2f:
6c:14:8f:0e:de:d5:9e:d5:36:bb:07:6f:cf:11:a0:c4:8b:68:
67:68:0d:10:24:35:b0:22:45:0d:a9:d2:50:10:bf:47:21:3b:
ce:0b:62:4a:83:3b:ae:76:12:1a:91:ae:f7:ff:ac:e6:a3:0c:
fc:72:b2:0e:19:9e:b3:37:8c:9b:0f:80:0b:78:f2:bc:e3:34:
4d:34:96:df:01:b8:ec:84:40:ed:eb:81:5a:fa:c6:6c:ff:d4:
e0:a9:75:c8:d9:fd:c6:83:ae:58:24:ed:9d:6c:45:78:80:6a:
0d:c0:08:f7:81:c4:f2:5f:04:a2:59:33:bd:70:7b:b3:19:b0:
d9:f3:c0:e8:f2:b0:8c:e8:4c:7b:9b:ba:9a:dc:de:7d:40:f7:
4e:8c:0f:df:4a:81:d1:b1:90:7b:6b:a0:13:9a:b0:2b:06:f3:
9d:5f:ae:f9:0e:75:a0:6b:81:4d:5b:77:e5:03:e1:ca:d7:62:
b3:a7:51:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 21:14:08 2024 by rpki-client on console-fra.rpki-client.org