Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/ERrJ1zEBtJ8fwKkpjbMrRKNBUMw.roa
File: ERrJ1zEBtJ8fwKkpjbMrRKNBUMw.roa (raw, json)
Hash identifier: sWw1bvgb2TjhnRBxGL+kHZyOPMPVLzkvxoj8+syuVU4=
Subject key identifier: 11:1A:C9:D7:31:01:B4:9F:1F:C0:A9:29:8D:B3:2B:44:A3:41:50:CC
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 018CC64B6549E0A14C0A3519F71574BDE5DE
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/ERrJ1zEBtJ8fwKkpjbMrRKNBUMw.roa
Signing time: Mon 01 Jan 2024 18:31:19 +0000
ROA not before: Mon 01 Jan 2024 18:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141483
IP address blocks: 2a0e:46c4:1800::/48 maxlen: 48
2a0e:46c4:1801::/48 maxlen: 48
2a0e:46c4:1802::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:65:49:e0:a1:4c:0a:35:19:f7:15:74:bd:e5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 1 18:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=111ac9d73101b49f1fc0a9298db32b44a34150cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b3:65:40:69:6e:45:a7:74:17:03:11:6d:1a:
ff:5d:e1:3c:d2:f3:e0:5f:77:b2:8d:e7:df:eb:eb:
27:62:59:4b:03:ed:ab:da:1c:cd:a0:42:48:c0:05:
a7:f5:3c:61:bb:0b:04:51:9c:ef:37:ee:97:6f:b6:
35:60:66:df:97:4b:00:ad:89:b6:bd:c6:9b:a0:7c:
25:34:80:9f:c1:41:b4:40:fa:8a:3b:d1:71:42:31:
65:79:44:b1:79:40:62:c2:b1:1c:5d:8b:1e:a9:c2:
fa:f6:86:5a:46:14:57:43:9d:85:23:ea:f0:c7:9a:
42:fd:96:08:48:cb:fb:04:5a:db:97:50:64:53:ff:
cf:1c:b6:6b:a0:a6:55:51:09:a9:3f:6d:ff:6c:72:
9d:49:c2:b6:89:ba:8a:bc:f9:11:30:02:30:ee:dc:
55:b1:e1:db:57:f6:75:ec:f8:9a:43:16:05:30:33:
12:88:88:65:39:1c:66:14:f0:da:b4:6e:ad:d6:66:
49:aa:8d:5b:59:7c:01:43:6c:17:99:ec:e4:47:e5:
d0:9f:84:27:08:bc:64:86:83:6d:0d:56:cd:32:56:
63:2b:c4:18:74:d1:27:df:c2:a7:e5:d9:6f:18:ea:
2f:f6:90:af:c4:61:d1:73:dc:69:20:2c:81:27:04:
05:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1A:C9:D7:31:01:B4:9F:1F:C0:A9:29:8D:B3:2B:44:A3:41:50:CC
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/ERrJ1zEBtJ8fwKkpjbMrRKNBUMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:1800::-2a0e:46c4:1802:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
79:97:e4:ec:0e:0d:fa:6a:64:94:dc:66:fa:61:c9:e0:04:30:
c9:04:e9:49:33:55:4c:d9:bb:e8:e1:5e:14:aa:b5:8c:dc:3e:
fb:55:76:e5:c6:27:1e:bf:49:c4:39:f8:fe:3d:43:04:08:f4:
40:ec:5a:b5:f3:46:68:85:2e:c9:d7:88:af:7f:59:bb:6d:ee:
dc:02:36:c2:77:21:55:a7:80:3f:cc:91:80:8d:4c:e8:34:4c:
e8:16:5d:f2:76:e1:ce:fd:c2:25:30:b1:88:0f:e2:84:29:11:
1a:85:2b:ad:2f:07:a6:08:47:e7:26:24:bf:21:c9:16:42:da:
31:0e:40:ce:57:f0:6e:bd:d1:60:c2:e8:c4:93:1d:53:1e:fb:
a3:2c:24:89:22:f6:5d:b2:af:ad:f0:f5:1c:e2:94:59:5b:e8:
06:e7:41:09:94:e7:04:8f:82:a2:13:1e:ff:ea:45:15:df:64:
38:5c:ff:20:76:09:b9:32:7e:2a:f6:d7:06:b1:23:55:be:28:
e0:04:ec:8f:ef:85:2e:67:00:19:19:fa:1e:0e:49:98:94:47:
a0:e2:8f:12:37:cc:67:00:8f:88:25:7b:e4:b8:05:00:c3:57:
ef:3e:1a:c5:3c:82:3b:3f:ab:cb:1b:1e:eb:f1:bc:1e:2b:7e:
f8:01:12:84
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:19:23 2024 by rpki-client on console-fra.rpki-client.org