Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/734f48-6755-4fee-bd46-3764beeaa1b2/1/NY3pFhyxdDkdab1BDYRWmbkj1B0.roa
File: NY3pFhyxdDkdab1BDYRWmbkj1B0.roa (raw, json)
Hash identifier: UKAPeiH5GtTYqaFW8dG+ofF3KEjC2HoIijMlfPN8f34=
Subject key identifier: 35:8D:E9:16:1C:B1:74:39:1D:69:BD:41:0D:84:56:99:B9:23:D4:1D
Certificate issuer: /CN=b3fddf701dd74ba99ac1f47b6767ef44f1a81077
Certificate serial: 018CC4932557E60E3C3D1EABA47BAA4FA537
Authority key identifier: B3:FD:DF:70:1D:D7:4B:A9:9A:C1:F4:7B:67:67:EF:44:F1:A8:10:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_3fcB3XS6mawfR7Z2fvRPGoEHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/734f48-6755-4fee-bd46-3764beeaa1b2/1/NY3pFhyxdDkdab1BDYRWmbkj1B0.roa
Signing time: Mon 01 Jan 2024 10:30:26 +0000
ROA not before: Mon 01 Jan 2024 10:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212123
IP address blocks: 2001:678:c64::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/734f48-6755-4fee-bd46-3764beeaa1b2/1/s_3fcB3XS6mawfR7Z2fvRPGoEHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/734f48-6755-4fee-bd46-3764beeaa1b2/1/s_3fcB3XS6mawfR7Z2fvRPGoEHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s_3fcB3XS6mawfR7Z2fvRPGoEHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:25:57:e6:0e:3c:3d:1e:ab:a4:7b:aa:4f:a5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3fddf701dd74ba99ac1f47b6767ef44f1a81077
Validity
Not Before: Jan 1 10:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=358de9161cb174391d69bd410d845699b923d41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:85:b4:80:26:21:d9:82:d9:d0:6f:06:bd:
49:64:91:48:71:b6:7a:fb:67:36:4c:6a:43:5e:55:
50:92:99:86:89:22:f2:9a:d7:a0:58:9d:29:b8:30:
a5:6e:e2:58:e7:86:e4:4c:9f:02:8a:ad:0e:b4:17:
1e:ab:04:b2:ed:6c:55:fd:07:37:c5:34:e8:05:05:
e1:80:48:5b:b4:51:d8:46:bd:f7:1e:1c:ce:ce:9a:
d1:0c:a1:22:79:01:7c:d2:c4:95:40:92:24:7c:cb:
08:15:84:b7:b2:69:dd:be:aa:48:f0:20:30:4e:c0:
14:71:63:cc:fc:4c:3a:b4:6e:e2:9d:04:9e:71:03:
b4:1a:5f:4a:1b:39:7b:d6:ed:7a:20:12:70:d8:77:
fe:5e:62:bd:7e:ae:ef:48:ab:0b:f2:0f:b1:69:04:
4c:72:12:45:7e:74:68:19:fe:22:5e:3d:2d:16:66:
04:01:2b:67:53:94:43:21:75:76:53:39:fe:19:f8:
26:01:2f:77:1b:da:34:69:54:d9:00:18:d1:21:34:
29:32:a3:5d:f7:1e:f6:c9:53:a6:f2:1d:1e:90:5b:
13:ea:41:1b:85:eb:2d:da:59:b1:23:cc:a9:d8:bb:
01:b7:9d:ef:97:6c:df:94:3e:6e:5e:7b:28:ea:a7:
2c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8D:E9:16:1C:B1:74:39:1D:69:BD:41:0D:84:56:99:B9:23:D4:1D
X509v3 Authority Key Identifier:
keyid:B3:FD:DF:70:1D:D7:4B:A9:9A:C1:F4:7B:67:67:EF:44:F1:A8:10:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_3fcB3XS6mawfR7Z2fvRPGoEHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/734f48-6755-4fee-bd46-3764beeaa1b2/1/NY3pFhyxdDkdab1BDYRWmbkj1B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/734f48-6755-4fee-bd46-3764beeaa1b2/1/s_3fcB3XS6mawfR7Z2fvRPGoEHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c64::/48
Signature Algorithm: sha256WithRSAEncryption
65:da:62:0b:ed:ac:9c:19:75:06:ef:bc:80:ae:c6:7c:1a:ad:
71:b1:6d:6a:be:dd:0c:27:f8:af:6c:18:06:da:79:11:ef:c6:
92:a9:19:89:f9:df:d3:5b:4d:5e:8a:28:09:3d:20:51:88:9b:
d2:ac:b2:4c:16:b3:bd:c0:16:e1:47:af:bd:c7:3f:ab:79:8b:
d6:e5:2a:5c:9f:2c:71:4f:0b:78:23:96:f0:1c:d8:31:26:01:
70:20:e8:cd:fa:ad:49:1f:51:0a:d7:5d:55:27:e7:9f:7d:b7:
0d:e3:f5:7c:67:8c:7f:a6:98:eb:32:4b:27:a8:b9:e6:2a:3f:
b3:0b:d9:cf:13:10:8b:29:c5:67:eb:b8:16:cf:60:89:37:df:
55:f9:25:e4:6e:19:c1:61:61:32:07:6e:5e:e9:3d:40:cf:50:
5d:8b:a1:c8:bf:2f:5f:a1:da:32:42:a4:94:76:a1:fc:78:c1:
b9:f4:fa:be:21:a4:c4:b1:b1:50:ac:0f:5a:bf:91:22:71:e4:
bc:b7:29:01:8e:85:d4:92:90:4d:15:ee:d1:c8:dc:f5:99:e9:
84:51:d6:34:25:f9:a4:ed:3a:ef:4a:d0:09:c0:ae:b4:67:c2:
46:ed:9f:7d:ce:fa:79:97:e9:89:0d:19:1c:68:39:e4:29:3b:
73:c5:00:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:23:29 2024 by rpki-client on console-ams.rpki-client.org