Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/NWJRgYuzg5sNdu_LAZYrwLU-ht8.roa
File: NWJRgYuzg5sNdu_LAZYrwLU-ht8.roa (raw, json)
Hash identifier: UIQ+eLgjMrmh+rUZs9m8WV2EaV6HYBMsz2zPi4l101Y=
Subject key identifier: 35:62:51:81:8B:B3:83:9B:0D:76:EF:CB:01:96:2B:C0:B5:3E:86:DF
Certificate issuer: /CN=bd3bcb8628bdbeadb194a235ac4b8c8b711e37d1
Certificate serial: 018CC801BB1340F466A9C2551B6D8D46853A
Authority key identifier: BD:3B:CB:86:28:BD:BE:AD:B1:94:A2:35:AC:4B:8C:8B:71:1E:37:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTvLhii9vq2xlKI1rEuMi3EeN9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/NWJRgYuzg5sNdu_LAZYrwLU-ht8.roa
Signing time: Tue 02 Jan 2024 02:30:05 +0000
ROA not before: Tue 02 Jan 2024 02:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62309
IP address blocks: 2001:67c:af0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTvLhii9vq2xlKI1rEuMi3EeN9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:bb:13:40:f4:66:a9:c2:55:1b:6d:8d:46:85:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3bcb8628bdbeadb194a235ac4b8c8b711e37d1
Validity
Not Before: Jan 2 02:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=356251818bb3839b0d76efcb01962bc0b53e86df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d5:31:aa:18:68:a1:d9:0a:39:69:d0:3f:b2:
23:e8:ac:0f:7d:fa:bb:4b:6f:2a:ec:d1:df:e6:a9:
99:7b:d1:1c:b7:10:c2:8f:7e:29:51:4c:dd:d4:d0:
cf:e5:7b:0a:b6:09:ce:54:c0:d6:a2:be:71:8b:b7:
43:4c:6f:3f:20:46:cb:e9:1e:35:76:0f:b7:fc:94:
68:12:8a:27:1d:7a:9b:31:4d:1d:90:bd:29:bf:44:
56:bd:fb:51:1c:66:59:54:7c:24:c4:48:5a:fe:2c:
18:75:31:00:ac:1c:6b:af:7c:d7:91:aa:b9:5b:cb:
9e:08:a3:20:cf:7d:53:b1:c2:c1:05:e2:62:0b:26:
b4:bc:4b:10:61:f0:2e:76:53:12:3c:c0:02:70:59:
4d:36:6b:51:bc:c9:04:89:4d:1c:cf:ab:30:95:46:
99:6c:bd:24:e7:17:70:64:6a:13:26:02:5d:da:d8:
ed:09:18:3d:6f:69:fb:f8:c3:51:78:09:89:c2:f5:
99:12:70:bd:ec:2d:27:5d:fe:8f:f4:0a:6b:2b:d2:
3a:e2:5d:5b:fb:b9:14:d3:a9:e1:bd:20:85:81:40:
34:de:f5:41:83:bc:a5:98:a8:3f:12:17:bd:3a:c1:
61:63:88:3b:19:cc:90:ad:3d:e1:20:8a:7b:9b:1a:
f4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:62:51:81:8B:B3:83:9B:0D:76:EF:CB:01:96:2B:C0:B5:3E:86:DF
X509v3 Authority Key Identifier:
keyid:BD:3B:CB:86:28:BD:BE:AD:B1:94:A2:35:AC:4B:8C:8B:71:1E:37:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTvLhii9vq2xlKI1rEuMi3EeN9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/NWJRgYuzg5sNdu_LAZYrwLU-ht8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:af0::/48
Signature Algorithm: sha256WithRSAEncryption
0f:8c:c0:a1:cf:cc:d2:7b:fa:20:6f:d3:44:a1:64:2d:00:ae:
c5:5f:09:95:50:82:37:28:d4:c4:2c:62:41:1f:32:25:1e:f6:
50:5c:9e:62:6f:08:f6:ff:25:9e:14:06:56:ab:20:c9:8c:cf:
4d:b2:47:a6:21:f7:c2:eb:7d:44:cc:15:d4:bc:46:d9:fb:37:
32:ad:fb:c3:1b:b6:03:01:27:67:f3:2d:cf:50:24:e0:c4:45:
92:6a:19:81:68:20:01:4b:d1:f2:76:66:c5:85:56:53:8e:b6:
7e:8e:7e:4a:79:1c:34:f2:37:ca:43:8e:da:61:02:a5:f4:5c:
44:64:16:7f:a6:b0:58:36:f4:a1:d8:de:33:73:9a:90:db:f5:
e6:99:d4:b0:a0:ee:36:cd:f0:9e:b6:e1:dd:19:d9:af:57:32:
18:c7:14:e0:22:df:28:f4:ad:85:6c:ac:d3:c7:06:c0:8c:31:
04:b2:97:04:7c:5c:79:14:3b:7a:11:74:a3:3d:33:eb:2f:12:
6c:06:49:75:5c:58:91:06:77:ce:ea:c8:41:57:a9:82:eb:cf:
1d:e4:1f:56:b4:c2:6d:31:bb:00:ad:48:26:1d:07:e3:8c:ab:
7a:b0:70:bc:fe:6c:1e:72:7f:37:b4:65:18:88:ba:2d:00:39:
63:9b:77:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:32:33 2024 by rpki-client on console-fra.rpki-client.org