Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/nJ8V7sZLnLXGklbnydSMqfzxbmg.roa
File: nJ8V7sZLnLXGklbnydSMqfzxbmg.roa (raw, json)
Hash identifier: Fgw37QU1Yjc6rEAMdErJMKYQT+8fTmOczSuFQArG1Jc=
Subject key identifier: 9C:9F:15:EE:C6:4B:9C:B5:C6:92:56:E7:C9:D4:8C:A9:FC:F1:6E:68
Certificate issuer: /CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Certificate serial: 018CC6B86D7DCDDAD82303FD815C108AB1B6
Authority key identifier: 67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/nJ8V7sZLnLXGklbnydSMqfzxbmg.roa
Signing time: Mon 01 Jan 2024 20:30:24 +0000
ROA not before: Mon 01 Jan 2024 20:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199926
IP address blocks: 2a03:dc40:ffef::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:6d:7d:cd:da:d8:23:03:fd:81:5c:10:8a:b1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Validity
Not Before: Jan 1 20:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c9f15eec64b9cb5c69256e7c9d48ca9fcf16e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d8:c6:4c:74:d9:d2:bb:a1:d3:ad:07:e3:de:
27:bc:4a:42:7c:a1:23:ca:eb:34:8d:bd:c0:9c:6c:
a4:60:5c:d6:cf:05:09:4c:12:d5:3e:88:d8:64:8d:
76:88:0d:f3:b8:df:24:b6:d4:dc:f7:61:82:bd:45:
9c:58:c1:c2:44:e0:a6:b5:50:48:d0:eb:70:e6:12:
a1:b8:de:c8:15:75:91:59:49:98:d4:77:40:0f:58:
09:7a:9b:7e:02:02:a0:09:9a:74:31:33:04:0e:3a:
88:11:62:b6:67:b0:5d:e2:22:70:7e:c9:9b:77:ad:
55:a9:a9:22:dc:b5:38:fb:91:8b:b8:39:2f:0c:15:
21:3c:38:2c:90:6b:b4:45:b6:16:b5:04:44:65:80:
ed:64:75:00:ee:da:42:37:27:22:33:d1:a5:10:94:
44:75:a5:99:a6:ed:61:8f:8a:74:90:ff:6d:61:2a:
e9:5b:79:69:d9:7a:74:d2:23:02:42:b9:14:df:dd:
78:92:3c:c3:21:42:3f:18:88:8b:af:c9:09:78:21:
ac:e2:80:33:19:36:b5:37:58:c1:91:fb:f3:0c:9d:
7b:a3:04:25:02:8f:6e:64:69:db:66:50:b7:d3:a5:
52:59:29:cf:3f:58:2c:a6:00:cf:87:19:ba:f3:b9:
31:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9F:15:EE:C6:4B:9C:B5:C6:92:56:E7:C9:D4:8C:A9:FC:F1:6E:68
X509v3 Authority Key Identifier:
keyid:67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/nJ8V7sZLnLXGklbnydSMqfzxbmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:dc40:ffef::/48
Signature Algorithm: sha256WithRSAEncryption
64:dd:d1:eb:ff:ae:c5:6a:dc:d9:2d:b9:bc:80:b3:bb:a6:dd:
32:3d:cf:f6:6c:ce:45:b7:42:f6:cd:4a:fa:01:59:71:c4:57:
12:78:24:19:1d:78:f4:47:0e:b4:d5:09:c5:62:8f:38:e7:55:
f7:a0:20:ce:f1:38:fd:9f:5e:09:a9:3d:f9:b7:f2:ed:9c:1f:
25:7a:9a:4e:fd:2b:a1:b1:9a:be:99:2e:98:ac:9d:41:ef:db:
a1:d5:13:db:8a:18:00:f7:41:db:b6:94:2e:0b:b3:10:f7:97:
63:21:c5:28:9c:cf:21:bf:da:49:31:8e:da:61:0d:9d:f5:29:
5b:eb:bb:df:eb:b7:12:04:22:52:8c:f4:b6:af:de:aa:cf:25:
c1:c8:e1:62:e9:2a:29:6f:f6:25:90:c4:97:d8:c8:90:85:e4:
79:81:9a:08:cf:ae:dc:8b:3a:d5:85:9b:73:37:37:63:22:72:
4c:1b:c7:de:ab:de:3f:fb:0d:6c:93:90:6d:58:9b:5a:cb:f3:
71:36:c0:d1:b4:b1:ad:e8:92:27:ab:d6:ec:83:f7:ff:d7:e6:
f7:9c:40:fa:1a:be:40:9e:68:da:f2:d7:f2:48:8a:46:9a:db:
8f:a9:ba:bf:b3:91:d9:b0:ff:ab:5f:1e:a6:d4:f8:d8:db:f9:
2f:f7:50:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:41:21 2024 by rpki-client on console-fra.rpki-client.org