Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/NWUpw3H2bLMYbgpHt2BQm4KIE6w.roa
File: NWUpw3H2bLMYbgpHt2BQm4KIE6w.roa (raw, json)
Hash identifier: 5vd+SerNiKbR52eigMiFhR+81s17+dm+SCcn0CKCfKI=
Subject key identifier: 35:65:29:C3:71:F6:6C:B3:18:6E:0A:47:B7:60:50:9B:82:88:13:AC
Certificate issuer: /CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Certificate serial: 018CC64A8EA639C5318ADC865E46B39DA7D8
Authority key identifier: 72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/NWUpw3H2bLMYbgpHt2BQm4KIE6w.roa
Signing time: Mon 01 Jan 2024 18:30:24 +0000
ROA not before: Mon 01 Jan 2024 18:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35675
IP address blocks: 2001:678:980::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:8e:a6:39:c5:31:8a:dc:86:5e:46:b3:9d:a7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Validity
Not Before: Jan 1 18:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=356529c371f66cb3186e0a47b760509b828813ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:10:13:66:98:de:14:d9:5e:86:b6:f5:74:f1:
43:cd:6e:b7:a3:ef:46:36:2a:f9:b5:6c:fb:ed:23:
65:a0:e1:37:eb:70:60:1e:bb:2b:d4:26:99:cd:7f:
ef:f3:b7:e0:c2:04:8a:e5:ec:d8:98:1f:c7:38:1d:
b0:14:4c:9b:36:9a:d1:45:e0:4a:3d:8b:09:40:02:
4f:d2:8e:8e:24:7a:8e:05:d1:d7:ab:27:e8:cb:2c:
9b:42:a3:27:5f:12:8d:60:5f:a5:12:c6:8a:b5:41:
d9:32:30:45:b0:2e:b7:df:29:90:cb:c8:20:13:1b:
ae:cf:b7:33:cd:60:09:54:37:d8:bb:19:7e:c8:75:
0d:71:f7:ed:78:c5:a9:7e:6f:c2:66:80:f1:e9:74:
a8:e2:56:c3:a5:95:44:78:8e:75:ab:bb:4b:8e:6a:
9b:ac:a8:a3:1c:6e:5b:2c:ff:7d:74:2b:83:ea:e0:
83:f8:d2:36:fa:ff:9d:88:21:d4:62:d9:4f:71:ca:
cc:cc:7c:62:97:69:42:91:cf:57:86:7a:25:a3:23:
a0:9a:5e:00:02:e0:0f:ac:e5:11:6e:8d:37:9d:b3:
b8:cd:6b:ac:17:38:cd:64:ab:71:f1:58:a0:0b:79:
db:3e:ef:a9:85:1f:78:44:d2:99:55:2a:15:aa:a2:
61:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:65:29:C3:71:F6:6C:B3:18:6E:0A:47:B7:60:50:9B:82:88:13:AC
X509v3 Authority Key Identifier:
keyid:72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/NWUpw3H2bLMYbgpHt2BQm4KIE6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:980::/48
Signature Algorithm: sha256WithRSAEncryption
2c:27:cf:cd:c9:3d:f6:dd:5d:13:90:33:d7:c6:e5:c6:b8:3d:
72:34:a8:04:a0:1f:c8:88:a5:70:4d:bb:8b:b4:11:f0:07:43:
d3:cb:2b:00:2f:a5:71:e2:fd:69:a0:d9:dd:c0:1d:da:89:a0:
93:36:81:54:c5:f1:39:a6:c1:82:92:96:2c:53:8a:2c:ce:dd:
e0:c5:fd:80:86:a2:18:e2:35:7d:59:84:8b:fe:83:22:ac:82:
6b:d3:e0:53:3a:e8:1f:ce:48:56:5b:36:f7:7c:0c:1c:0f:fe:
32:cd:ef:fa:91:f3:47:55:2c:d1:b0:d4:b0:06:b9:e5:97:97:
18:32:74:62:ca:50:57:46:fd:f6:62:3e:a6:24:82:ea:a5:33:
29:99:a6:df:19:a7:44:d9:df:63:73:03:1a:f2:8f:d0:03:b0:
4f:3d:6e:44:fa:6b:9e:fc:d7:b9:ad:b8:fa:02:da:92:27:68:
36:f7:38:27:e7:0e:5a:b1:24:3b:40:f4:52:b7:2e:90:f9:81:
a8:0d:52:8f:9c:4b:1c:47:99:a2:74:fd:05:17:5d:07:bc:6e:
83:70:48:e2:63:dc:f2:d1:bf:77:cc:87:58:66:e4:0b:06:3b:
1d:01:47:bc:de:9a:e0:72:e5:5d:d8:bb:5c:77:fd:10:33:3f:
a0:59:73:88
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzGSo6mOcUxityGXkaznafYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjI1ZDg1OWZmMDZiZTFlYmM5N2FkZDVkZWMwNWQzNmZj
ZGNhMmQwHhcNMjQwMTAxMTgzMDI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTY1MjljMzcxZjY2Y2IzMTg2ZTBhNDdiNzYwNTA5YjgyODgxM2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hATZpjeFNlehrb1dPFDzW63o+9G
Nir5tWz77SNloOE363BgHrsr1CaZzX/v87fgwgSK5ezYmB/HOB2wFEybNprRReBK
PYsJQAJP0o6OJHqOBdHXqyfoyyybQqMnXxKNYF+lEsaKtUHZMjBFsC633ymQy8gg
Exuuz7czzWAJVDfYuxl+yHUNcffteMWpfm/CZoDx6XSo4lbDpZVEeI51q7tLjmqb
rKijHG5bLP99dCuD6uCD+NI2+v+diCHUYtlPccrMzHxil2lCkc9XhnoloyOgml4A
AuAPrOURbo03nbO4zWusFzjNZKtx8VigC3nbPu+phR94RNKZVSoVqqJhCQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDVlKcNx9myzGG4KR7dgUJuCiBOsMB8GA1UdIwQY
MBaAFHKyXYWf8Gvh68l63V3sBdNvzcotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JKZGhaX3dhLUhyeVhyZFhld0YwMl9OeWkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yZjgzM2YtYTdlOC00ZjlkLWEzODMt
MTIzZmEyYWI5NDA4LzEvTldVcHczSDJiTE1ZYmdwSHQyQlFtNEtJRTZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8yZjgzM2YtYTdlOC00ZjlkLWEzODMtMTIzZmEyYWI5NDA4
LzEvY3JKZGhaX3dhLUhyeVhyZFhld0YwMl9OeWkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAmA
MA0GCSqGSIb3DQEBCwUAA4IBAQAsJ8/NyT323V0TkDPXxuXGuD1yNKgEoB/IiKVw
TbuLtBHwB0PTyysAL6Vx4v1poNndwB3aiaCTNoFUxfE5psGCkpYsU4oszt3gxf2A
hqIY4jV9WYSL/oMirIJr0+BTOugfzkhWWzb3fAwcD/4yze/6kfNHVSzRsNSwBrnl
l5cYMnRiylBXRv32Yj6mJILqpTMpmabfGadE2d9jcwMa8o/QA7BPPW5E+mue/Ne5
rbj6AtqSJ2g29zgn5w5asSQ7QPRSty6Q+YGoDVKPnEscR5midP0FF10HvG6DcEji
Y9zy0b93zIdYZuQLBjsdAUe83prgcuVd2Ltcd/0QMz+gWXOI
-----END CERTIFICATE-----
Generated at Sat Jun 8 05:51:01 2024 by rpki-client on console-fra.rpki-client.org