Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/nsKfFsvaguNgkpoGs_fT3uLJLLc.roa
File: nsKfFsvaguNgkpoGs_fT3uLJLLc.roa (raw, json)
Hash identifier: 7P3BwXuchThRInjj0HMs3g8KEcVFcNDr1mryFw+xF7s=
Subject key identifier: 9E:C2:9F:16:CB:DA:82:E3:60:92:9A:06:B3:F7:D3:DE:E2:C9:2C:B7
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 018CCA287BC665DFFDE1DEA95006E8A0B7B3
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/nsKfFsvaguNgkpoGs_fT3uLJLLc.roa
Signing time: Tue 02 Jan 2024 12:31:39 +0000
ROA not before: Tue 02 Jan 2024 12:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 2a0e:1c80:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:28:7b:c6:65:df:fd:e1:de:a9:50:06:e8:a0:b7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Jan 2 12:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ec29f16cbda82e360929a06b3f7d3dee2c92cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:b6:55:c0:ef:8a:4d:64:99:f1:bb:09:89:
1d:5b:0b:b1:bd:31:16:eb:0a:65:cd:8b:be:0a:f7:
30:6a:e1:4e:3e:8d:29:88:51:14:9d:fa:ee:43:21:
1e:a2:0a:2b:1d:3f:73:af:53:c9:c4:1a:47:7a:24:
dc:4d:e7:36:0e:41:e3:27:9c:4f:fe:ae:ce:b0:69:
02:57:77:fb:9f:ff:74:6f:e8:37:71:ed:fb:f8:e4:
8d:58:9d:24:b6:c7:f5:58:24:ac:aa:60:d4:0e:13:
ef:88:15:29:25:f9:90:93:83:19:b7:42:07:b1:a6:
7d:4d:ba:b3:31:a6:17:46:62:4f:cf:1d:ff:ce:bb:
94:5d:47:87:86:d9:77:b5:0b:0b:25:1b:80:d3:6b:
e7:7c:5f:32:11:4d:1c:9a:4f:0d:3c:3c:4d:0f:7c:
96:68:e2:ad:43:18:b0:09:7e:9d:83:4c:73:4e:8b:
fd:46:0a:87:10:02:2a:f1:1e:ae:79:4a:36:e7:ad:
7f:3b:f5:42:78:76:b1:51:5c:84:9c:33:20:af:01:
20:5d:8d:46:c3:18:fe:70:78:fd:62:89:33:15:fa:
4d:01:cc:e8:19:be:91:24:b8:55:39:41:89:af:de:
83:ca:9a:6d:5f:3e:51:d9:38:82:63:93:15:ab:80:
11:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C2:9F:16:CB:DA:82:E3:60:92:9A:06:B3:F7:D3:DE:E2:C9:2C:B7
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/nsKfFsvaguNgkpoGs_fT3uLJLLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1c80:3::/48
Signature Algorithm: sha256WithRSAEncryption
8a:bb:ff:f1:3c:08:a7:e3:2f:2d:96:9d:7e:ec:c6:d6:64:e5:
19:2e:67:c4:b9:a5:2e:fa:a2:7a:f8:87:aa:3c:01:90:65:60:
56:ec:0d:b2:cb:68:a0:9a:14:d0:10:6c:75:48:3d:1a:33:7b:
91:76:ef:ce:f6:22:40:5a:53:ff:94:25:81:92:46:a0:7a:55:
6e:37:d3:ce:76:48:17:cf:0c:e0:98:3e:70:f0:f6:b9:84:62:
ce:e6:ba:af:9b:31:31:08:ed:e6:ec:c3:a1:aa:47:01:c0:ed:
53:83:e9:2c:a7:27:b9:af:42:c4:86:08:f5:ce:81:56:6f:71:
75:a3:e5:32:21:6f:a0:de:02:a4:a2:6d:aa:4c:fc:67:ee:f3:
3d:04:f2:d5:4d:f9:ea:70:8d:9f:01:f7:62:85:58:fb:70:f3:
58:d0:97:14:f1:cf:fb:0d:31:42:3d:f0:90:7b:3d:13:26:53:
32:76:dc:40:d6:39:9f:45:84:0c:ae:86:b2:95:f5:c1:af:93:
04:ba:85:f0:be:35:d4:10:fa:8b:56:5f:ae:f5:ce:85:98:9c:
7e:10:f8:1d:71:89:e5:60:5c:17:21:63:e7:b2:70:c6:91:e0:
eb:a6:ff:fb:9e:b0:48:77:af:3f:c3:e3:1f:77:83:09:e6:3b:
7a:7b:09:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:36:57 2024 by rpki-client on console-ams.rpki-client.org