Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/NxcwqwNv9CgCFhCNWnYSxmQyHyU.roa
File: NxcwqwNv9CgCFhCNWnYSxmQyHyU.roa (raw, json)
Hash identifier: fArYI7IPgIOke0TCnEF0g69/H8Dt04fo9ARsDOMVRK8=
Subject key identifier: 37:17:30:AB:03:6F:F4:28:02:16:10:8D:5A:76:12:C6:64:32:1F:25
Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial: 018CC9BC3F6DFB517E8CD2BA8FF2A1181D67
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/NxcwqwNv9CgCFhCNWnYSxmQyHyU.roa
Signing time: Tue 02 Jan 2024 10:33:26 +0000
ROA not before: Tue 02 Jan 2024 10:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44592
IP address blocks: 2a07:6d40::/29 maxlen: 29
2a07:6d40:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:3f:6d:fb:51:7e:8c:d2:ba:8f:f2:a1:18:1d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
Validity
Not Before: Jan 2 10:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=371730ab036ff4280216108d5a7612c664321f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ab:02:50:00:1a:e7:ec:28:96:56:26:68:2c:
95:d4:e4:5e:8d:de:4a:6a:df:ba:ec:46:8d:cc:ff:
e0:c4:09:eb:a5:21:af:12:4d:40:f7:16:b0:7c:26:
3a:28:73:b1:88:1e:c0:87:52:62:2d:87:ff:46:cb:
59:22:2f:b4:08:0c:02:fd:c9:ce:6e:a4:45:dc:9e:
d8:3f:09:1d:fa:cc:f6:27:be:ee:39:f9:c2:0c:38:
96:23:58:31:c5:ff:30:c0:ce:96:a0:07:cc:f9:60:
2f:6c:ae:06:ad:86:fd:93:40:18:8a:b7:f8:2e:dc:
c2:98:69:ed:57:04:cc:1c:35:08:30:61:48:0e:ea:
39:c5:30:3a:05:66:a3:4b:21:f4:22:8d:a0:36:6a:
42:ef:2c:4d:15:f0:0d:c3:22:9d:24:1d:77:f1:c8:
b7:55:de:90:4c:f2:b9:40:e6:20:a2:c5:82:0b:30:
69:be:a3:92:7c:2f:76:b8:29:da:55:ad:95:96:8b:
ae:4f:e6:32:0c:02:24:e6:14:17:40:eb:ee:85:6f:
cf:f9:12:63:ec:df:12:d7:c8:a7:80:93:0f:ce:53:
9b:0c:a4:5a:62:fe:1d:be:63:db:f1:be:d4:5d:58:
19:3f:c0:7c:12:ff:0b:90:e6:5e:f2:4f:b8:0e:b1:
4f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:17:30:AB:03:6F:F4:28:02:16:10:8D:5A:76:12:C6:64:32:1F:25
X509v3 Authority Key Identifier:
keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/NxcwqwNv9CgCFhCNWnYSxmQyHyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:6d40::/29
Signature Algorithm: sha256WithRSAEncryption
48:33:0c:16:67:6a:c4:cf:ee:27:56:d7:7a:76:61:fb:f7:fb:
00:be:e6:f6:35:4c:24:31:1b:9a:70:65:35:ff:23:c3:50:ee:
6a:38:50:2b:1c:03:66:75:b1:af:ff:a7:18:6f:76:c8:39:80:
f7:86:8f:c5:ed:5e:8d:72:9e:2e:1d:4b:aa:b3:fe:8a:8f:14:
a3:77:b5:51:df:4e:3b:6f:98:c3:72:1d:c2:57:2d:10:8e:a3:
72:e7:b0:68:09:d0:c5:96:5b:74:39:ca:67:e7:a9:6e:92:51:
30:ec:a3:2a:73:da:31:76:64:47:13:ce:28:c2:f7:3b:8a:ed:
62:ca:7e:f9:08:fc:55:91:fe:ea:b4:1c:54:60:dd:92:8d:35:
5e:77:3d:09:34:0c:48:88:4b:e4:0b:23:ca:9f:88:2e:ee:ca:
bf:f7:1e:53:60:a9:15:b8:2f:79:33:d4:bd:f2:8d:43:e0:98:
e8:d0:97:ee:fd:26:12:5d:89:49:b0:fd:e7:dd:70:43:5b:24:
ab:5d:06:26:7f:f7:bd:d0:07:c2:ec:22:15:34:0f:a4:25:fd:
f2:42:23:ce:33:0b:6f:08:eb:36:ec:92:c1:51:14:37:de:a6:
99:3b:ac:7e:ee:03:a5:01:6d:2b:5b:2a:a7:fe:9c:26:60:33:
49:94:52:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:06:59 2024 by rpki-client on console-fra.rpki-client.org