Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9f8fbe-b2e8-472d-9ebc-0b9885863ebf/1/N1nj0oDouMCEEzR7mVyarHDl_CM.roa
File: N1nj0oDouMCEEzR7mVyarHDl_CM.roa (raw, json)
Hash identifier: 1LUOdi4Z53NyUbOKVBjZ+Nma76jxKX2phKGQn/JiP9o=
Subject key identifier: 37:59:E3:D2:80:E8:B8:C0:84:13:34:7B:99:5C:9A:AC:70:E5:FC:23
Certificate issuer: /CN=18f4ee88584d6dfd9e3aa9bc201c50f44e353d9c
Certificate serial: 018CC3490CC0F7C2732F311A36935D9A2D96
Authority key identifier: 18:F4:EE:88:58:4D:6D:FD:9E:3A:A9:BC:20:1C:50:F4:4E:35:3D:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPTuiFhNbf2eOqm8IBxQ9E41PZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/9f8fbe-b2e8-472d-9ebc-0b9885863ebf/1/N1nj0oDouMCEEzR7mVyarHDl_CM.roa
Signing time: Mon 01 Jan 2024 04:29:53 +0000
ROA not before: Mon 01 Jan 2024 04:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56655
IP address blocks: 2001:678:a90::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/9f8fbe-b2e8-472d-9ebc-0b9885863ebf/1/GPTuiFhNbf2eOqm8IBxQ9E41PZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/9f8fbe-b2e8-472d-9ebc-0b9885863ebf/1/GPTuiFhNbf2eOqm8IBxQ9E41PZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GPTuiFhNbf2eOqm8IBxQ9E41PZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:0c:c0:f7:c2:73:2f:31:1a:36:93:5d:9a:2d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f4ee88584d6dfd9e3aa9bc201c50f44e353d9c
Validity
Not Before: Jan 1 04:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3759e3d280e8b8c08413347b995c9aac70e5fc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:53:93:14:b7:21:13:15:3b:92:23:43:0d:e7:
c4:61:19:30:cb:56:4c:aa:c7:82:4f:ab:a9:bc:30:
d4:62:5d:69:63:1a:8d:01:e1:02:00:73:59:5d:14:
87:c7:4e:dc:96:94:7a:ae:e4:dc:df:c8:fe:74:01:
fa:41:7b:fe:6b:9c:ca:62:97:ce:cb:b5:36:5b:2c:
f0:f4:6b:5b:92:b1:d2:ba:14:60:d5:9e:51:7d:31:
42:5e:14:00:2f:8d:e1:29:e7:b1:ad:f8:aa:98:24:
da:65:cf:2b:16:e9:cc:dd:9a:22:71:69:fd:64:f8:
06:05:37:3f:c5:e7:c4:e6:6c:67:bf:f1:15:54:6d:
2a:27:c6:cd:34:70:90:5a:bb:e0:54:62:45:40:47:
e5:55:29:3f:c4:d8:08:77:7d:08:87:78:7c:f5:49:
af:5b:df:7c:8a:dd:b1:51:1c:ad:b4:d1:c9:76:6a:
a3:ec:9e:bd:0f:d3:b1:b0:d8:59:e3:2c:11:16:01:
e2:c6:0a:e5:20:62:e4:60:4a:8c:1e:cd:0d:6f:86:
e8:52:ca:cd:5d:e3:81:4e:e7:07:af:b2:2f:cb:3d:
0b:21:37:8d:95:a7:e8:da:7d:b3:49:ae:35:1b:fd:
74:58:40:a5:1a:47:f1:5e:98:51:a1:72:57:dd:cd:
d6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:59:E3:D2:80:E8:B8:C0:84:13:34:7B:99:5C:9A:AC:70:E5:FC:23
X509v3 Authority Key Identifier:
keyid:18:F4:EE:88:58:4D:6D:FD:9E:3A:A9:BC:20:1C:50:F4:4E:35:3D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPTuiFhNbf2eOqm8IBxQ9E41PZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9f8fbe-b2e8-472d-9ebc-0b9885863ebf/1/N1nj0oDouMCEEzR7mVyarHDl_CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9f8fbe-b2e8-472d-9ebc-0b9885863ebf/1/GPTuiFhNbf2eOqm8IBxQ9E41PZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:a90::/48
Signature Algorithm: sha256WithRSAEncryption
1e:35:8c:8a:7e:1b:19:ea:f7:78:39:60:57:70:18:22:6a:3e:
a8:75:db:da:28:d8:1f:a7:71:62:57:10:39:cc:2d:9a:1d:8b:
55:ea:7f:42:fd:18:70:93:d1:3f:78:e8:13:c1:29:5f:91:55:
e9:18:01:dd:de:90:2a:38:d6:d9:ab:9a:7b:75:ce:2e:01:72:
6e:63:e3:f0:c2:8c:02:99:a1:1c:18:93:ad:cd:07:2f:b7:f9:
77:fe:91:b1:7d:36:0b:44:68:a8:81:f0:04:07:92:70:cb:8e:
cc:4f:eb:34:f9:71:e3:3b:2b:ba:c1:18:07:3e:32:fd:f5:ff:
55:69:4a:2e:0e:e8:b4:3d:39:e5:ba:72:35:79:de:8f:87:2e:
e2:90:6b:5e:59:0c:aa:14:d7:0c:c2:88:66:1e:63:49:d7:24:
74:36:bc:82:78:bf:fd:0d:1f:0f:f8:c3:3c:d3:4e:ad:6e:9c:
51:79:30:59:b0:91:be:77:e7:08:53:aa:18:5d:7d:48:b9:d8:
b4:01:e2:51:42:18:74:7b:50:f5:a2:7a:0f:55:8b:1a:15:ad:
1b:fb:d8:a1:5f:a9:0a:11:bc:66:62:a5:07:b1:7c:85:18:27:
4c:c4:8a:f2:18:78:28:40:2e:eb:48:1d:cd:69:e2:02:22:9b:
d2:5b:99:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:28:34 2024 by rpki-client on console-ams.rpki-client.org