Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/GswP5odf4qhhN2_miP7MKVrE8NY.roa
File: GswP5odf4qhhN2_miP7MKVrE8NY.roa (raw, json)
Hash identifier: 4dAmgBiAeI9yRLIh7lolRv37bd3+p2lzTOKeKxRWsEY=
Subject key identifier: 1A:CC:0F:E6:87:5F:E2:A8:61:37:6F:E6:88:FE:CC:29:5A:C4:F0:D6
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 018CDB5C4B9F09388B919192CBD7E90F563D
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/GswP5odf4qhhN2_miP7MKVrE8NY.roa
Signing time: Fri 05 Jan 2024 20:41:48 +0000
ROA not before: Fri 05 Jan 2024 20:41:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57848
IP address blocks: 2a0e:46c2::/32 maxlen: 48
2a0e:46c6:500::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:db:5c:4b:9f:09:38:8b:91:91:92:cb:d7:e9:0f:56:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 5 20:41:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1acc0fe6875fe2a861376fe688fecc295ac4f0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b7:46:0e:66:8c:0d:f3:64:6a:4e:4e:1b:a5:
fc:55:e6:b0:ed:24:be:e8:09:cd:37:33:48:fb:35:
9a:6e:83:a0:24:1c:ee:04:f8:fe:79:bc:51:2d:6d:
3f:c6:6c:07:df:a3:ab:a1:0c:19:d9:dc:15:99:55:
62:11:85:4e:e5:f3:d3:14:e2:55:4a:c1:b9:0e:3d:
09:71:ac:33:9a:93:16:19:ca:ac:55:c8:e6:44:67:
ed:a1:d6:15:2e:a4:db:38:03:eb:dc:14:06:e3:a3:
b8:b5:67:89:f6:52:66:60:3c:27:c4:e2:2f:73:5f:
f2:a3:08:b0:aa:19:15:c4:ba:55:f4:89:5a:af:70:
e6:71:c4:ce:e6:f5:1e:7f:dc:d1:7d:35:6f:b6:4c:
6f:71:ca:8b:14:01:37:cc:ad:29:0b:9c:61:7c:61:
e9:ca:be:d2:3a:4f:38:41:19:29:0a:9e:57:e9:b8:
d3:df:e5:f7:67:f0:0b:aa:43:9f:dc:ba:e8:7b:24:
e1:94:4e:49:3e:89:d7:a2:14:38:dc:93:a9:ee:a7:
1e:35:38:10:1c:1e:01:56:64:f5:6e:0f:3d:1d:b1:
55:09:18:8d:0a:7b:29:de:4b:d9:f4:7c:f2:17:52:
06:5b:84:81:50:f8:0c:5d:53:1b:61:56:ed:8d:8b:
52:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CC:0F:E6:87:5F:E2:A8:61:37:6F:E6:88:FE:CC:29:5A:C4:F0:D6
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/GswP5odf4qhhN2_miP7MKVrE8NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c2::/32
2a0e:46c6:500::/40
Signature Algorithm: sha256WithRSAEncryption
15:9e:37:88:c4:ab:83:9e:66:a1:fa:40:d9:04:e5:e7:14:41:
c7:13:a7:fc:57:27:5d:32:06:a9:05:ba:ef:85:d8:ef:b1:55:
dd:26:7c:e7:39:76:37:ee:83:4a:c7:21:5e:12:79:16:ad:03:
d4:73:ff:ba:7d:8c:58:e1:78:dc:68:ef:20:f0:70:60:9a:39:
04:3a:47:c3:3f:b8:86:f0:78:98:af:91:c0:04:25:ce:8d:fb:
65:07:f1:40:a8:11:bd:ef:75:64:13:64:7f:a5:19:db:bc:b9:
22:d6:11:7a:a9:c4:b2:fc:89:82:07:fa:f8:b3:37:01:ee:a6:
aa:46:b9:64:d6:55:1d:f9:c5:a6:2e:52:a0:ac:87:d9:b9:aa:
f0:05:40:fe:9c:c4:83:ee:b2:cf:a7:ac:43:f5:23:17:23:18:
d4:e0:cf:95:dd:3b:60:04:3c:08:19:40:02:2c:7b:97:2c:be:
8c:8e:10:d8:f5:d0:b8:3d:77:9e:94:12:86:07:cb:c7:37:57:
a2:4a:49:23:8a:80:22:19:7b:fc:d4:50:9d:41:16:4f:cd:c7:
02:20:f9:c3:7c:81:6c:d1:7f:ed:f8:77:8f:57:0c:bf:2e:66:
bb:6b:ad:8b:02:94:7f:1a:db:fa:44:9e:e2:db:94:03:e2:ae:
b0:dc:53:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:47:01 2024 by rpki-client on console-ams.rpki-client.org