Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/NWrwC-CLu-jxgbH3O_DuLYKhOF4.roa
File: NWrwC-CLu-jxgbH3O_DuLYKhOF4.roa (raw, json)
Hash identifier: TJ7gN7ruytFjGwlTLNh7t1tWjn1CMeZhzRnEQtjhluU=
Subject key identifier: 35:6A:F0:0B:E0:8B:BB:E8:F1:81:B1:F7:3B:F0:EE:2D:82:A1:38:5E
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 018CC5DCF3C9FE1304BB66708145DD2C31F6
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/NWrwC-CLu-jxgbH3O_DuLYKhOF4.roa
Signing time: Mon 01 Jan 2024 16:30:40 +0000
ROA not before: Mon 01 Jan 2024 16:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8095
IP address blocks: 2a0f:607:105a::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:f3:c9:fe:13:04:bb:66:70:81:45:dd:2c:31:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Jan 1 16:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=356af00be08bbbe8f181b1f73bf0ee2d82a1385e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:06:95:ea:5d:05:08:3b:fe:81:2c:2e:43:34:
c8:93:12:14:50:d5:81:69:37:77:75:1f:d2:66:93:
6c:52:8a:3e:cd:2b:92:62:33:10:3d:cf:2d:96:fc:
83:60:34:81:cd:0a:5f:b7:2e:a7:d3:3a:38:48:32:
8d:62:1c:56:72:7e:d8:21:77:c4:66:19:7f:f1:4c:
2d:7e:9e:88:3a:64:7d:e3:a0:36:b9:22:d7:17:45:
53:39:ee:19:21:ab:03:a1:5b:44:f6:e9:1c:96:07:
29:0d:37:60:25:11:1d:64:d0:83:a9:b5:f7:02:9d:
a8:d9:3d:80:f5:c0:9f:9e:9b:08:80:47:c6:44:67:
8e:a3:b3:6c:d8:39:73:2d:d6:fc:6a:13:46:85:06:
1e:f3:f4:c4:8f:db:07:32:27:8b:d0:f7:6b:15:20:
42:ec:eb:14:fb:26:e6:88:71:c4:43:39:ed:97:3b:
b7:7f:ca:b1:22:cb:1a:1c:0e:e9:79:80:1e:a7:05:
fb:76:8d:48:8a:d4:8b:2f:fe:ab:04:88:6c:38:8c:
61:d7:6b:08:79:c5:66:85:4e:64:3c:9c:35:bc:98:
05:33:40:21:2b:68:fd:b7:d7:be:99:af:ee:54:e4:
b7:4c:3a:63:01:10:ab:c1:ab:fc:3e:a7:35:55:ee:
9e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6A:F0:0B:E0:8B:BB:E8:F1:81:B1:F7:3B:F0:EE:2D:82:A1:38:5E
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/NWrwC-CLu-jxgbH3O_DuLYKhOF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:607:105a::/47
Signature Algorithm: sha256WithRSAEncryption
2e:98:6f:e0:8d:88:ee:6b:44:f1:31:71:0c:0c:b9:74:04:6a:
ea:ff:81:45:b3:70:f8:a2:3f:a8:0a:14:cc:a2:af:11:3b:42:
4b:7b:96:fe:c9:77:01:80:a0:e2:05:a6:d0:ee:ab:09:aa:48:
f3:43:93:5d:47:99:c1:91:79:c0:e4:a9:1b:90:08:37:0a:ad:
77:12:e1:ea:2e:f1:d3:ab:e5:28:bf:2c:24:5a:7d:45:4e:d8:
d2:36:1b:a4:02:8c:8c:9e:84:e5:41:91:53:13:1b:e3:77:42:
09:7f:0a:9a:1c:ee:da:e1:45:5d:80:05:54:cf:8e:f4:95:50:
b8:32:ea:25:6d:21:c4:34:53:d0:13:ca:ff:37:16:81:71:d3:
f8:b3:b9:63:9f:29:aa:15:39:29:10:07:73:c8:aa:9e:e2:d5:
49:0e:f5:cd:58:2d:7b:bd:a6:42:d2:81:e0:7f:70:cf:fa:9c:
a3:a0:b7:a8:06:a9:13:a6:9a:2b:7f:7d:5d:81:45:36:6b:4f:
4a:a6:6e:ea:a0:97:46:ac:06:9a:88:d4:52:39:89:dd:19:9e:
9b:21:89:73:69:54:82:cb:8a:33:25:71:77:e6:2d:d0:0a:66:
69:70:60:7a:62:7f:7c:55:5b:d2:5f:70:61:69:30:dc:09:2b:
d0:70:67:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:13:02 2024 by rpki-client on console-ams.rpki-client.org