Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/n2r-48DMeKezkw67Y6Ew2Xg6cjQ.roa
File: n2r-48DMeKezkw67Y6Ew2Xg6cjQ.roa (raw, json)
Hash identifier: UkOW4f5iINI7pzVoANWQcJbTgm5DNvh69+doEwsn+ns=
Subject key identifier: 9F:6A:FE:E3:C0:CC:78:A7:B3:93:0E:BB:63:A1:30:D9:78:3A:72:34
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 018D1827B43A4D1F6E569459147C52FFA5FA
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/n2r-48DMeKezkw67Y6Ew2Xg6cjQ.roa
Signing time: Wed 17 Jan 2024 16:01:11 +0000
ROA not before: Wed 17 Jan 2024 16:01:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41957
IP address blocks: 146.19.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:18:27:b4:3a:4d:1f:6e:56:94:59:14:7c:52:ff:a5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: Jan 17 16:01:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f6afee3c0cc78a7b3930ebb63a130d9783a7234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8f:d6:d3:f2:4c:c4:2a:46:e9:a1:36:8e:af:
50:a2:4b:c4:10:66:34:b9:b8:79:a9:94:4c:51:9c:
26:49:2c:d6:08:9f:5f:25:21:a5:4f:e7:36:6b:7c:
08:8d:1e:22:f7:e4:7c:8b:0e:aa:eb:ed:04:3f:d5:
d4:3a:9f:c2:4a:ad:1a:82:b3:31:81:85:53:56:91:
c6:0f:81:7d:82:41:d9:9a:42:ef:07:97:12:70:2d:
b8:d9:4c:4f:36:42:38:e3:91:9b:09:31:35:c6:5d:
79:8a:40:88:8f:32:06:63:2a:18:55:6c:2a:40:e9:
12:1c:de:f7:e3:90:f1:ee:92:80:84:92:0d:91:7f:
a5:dc:8f:62:07:80:a0:c5:a0:26:f7:ae:eb:79:6a:
40:d1:a1:08:d1:63:90:52:79:20:75:89:93:61:92:
60:00:c9:d2:b6:92:61:9c:cc:77:b0:3b:f6:5f:c9:
8e:61:e9:03:44:a9:1b:b2:fb:89:b9:cb:74:3d:04:
37:83:a8:ec:4b:07:a7:ec:1e:41:61:b2:1e:b9:af:
34:75:d4:63:6f:5e:93:30:65:61:b1:b0:95:24:d1:
e0:55:35:6e:df:56:3b:30:66:23:d2:ef:d7:6a:f4:
27:b1:e5:de:61:10:0b:3a:da:6d:59:cc:e9:a2:11:
ce:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6A:FE:E3:C0:CC:78:A7:B3:93:0E:BB:63:A1:30:D9:78:3A:72:34
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/n2r-48DMeKezkw67Y6Ew2Xg6cjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.180.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:4d:c1:5b:e3:63:ce:f1:d2:95:42:b2:2f:5c:9b:cf:e8:88:
02:62:de:e5:49:d7:0f:57:41:c7:97:2f:e0:c1:77:cc:20:9d:
09:71:e4:8c:d8:6f:5e:4b:d6:f6:3c:5c:58:f3:fe:a3:f1:3c:
08:39:27:c4:39:f3:cb:95:09:c5:cd:da:9b:6e:67:6e:39:00:
85:5c:dc:48:ac:66:9e:03:57:6d:62:a9:73:75:0a:89:dc:19:
8d:46:69:8a:72:39:71:ce:6d:fb:39:60:ac:fe:ce:18:7a:3e:
2c:9f:bb:b4:64:d7:f5:fb:c9:50:96:6c:a8:c2:d0:69:4e:8e:
0d:fe:55:d4:2e:1e:75:66:e2:89:a1:63:2c:80:ef:50:9d:74:
13:33:f9:ef:af:f6:b8:00:e2:10:ad:2b:30:ff:3d:17:71:9e:
b4:59:54:ed:73:b8:21:a9:0c:de:4d:9c:39:72:63:7c:57:49:
e3:57:6b:ba:5c:fd:9b:31:c4:64:ac:03:c5:5e:af:cf:a6:f3:
e0:cd:41:9f:3b:eb:81:52:31:b0:a9:8f:d7:40:7b:63:75:81:
3d:e0:a0:4f:13:61:94:55:52:0b:b8:00:3a:b5:99:f8:53:ad:
be:0d:aa:9a:a6:a4:a0:48:cb:27:59:3a:46:57:35:54:28:21:
2d:51:15:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 17:50:44 2024 by rpki-client on console-fra.rpki-client.org