Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/NfOfrM9zfKrYh464bbFLOLgQyqg.roa
File: NfOfrM9zfKrYh464bbFLOLgQyqg.roa (raw, json)
Hash identifier: Yj4d2XQLmuz88kFb56Q0v6/ebixh30Is+LDr4MaD8h8=
Subject key identifier: 35:F3:9F:AC:CF:73:7C:AA:D8:87:8E:B8:6D:B1:4B:38:B8:10:CA:A8
Certificate issuer: /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Certificate serial: 018CC6B8203E3DD2E34054A5317B760BAFC9
Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/NfOfrM9zfKrYh464bbFLOLgQyqg.roa
Signing time: Mon 01 Jan 2024 20:30:04 +0000
ROA not before: Mon 01 Jan 2024 20:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 2001:678:f8c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:20:3e:3d:d2:e3:40:54:a5:31:7b:76:0b:af:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Validity
Not Before: Jan 1 20:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35f39faccf737caad8878eb86db14b38b810caa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a8:4b:0e:f0:1f:3c:df:8e:ee:d5:ef:05:95:
25:7e:3b:46:c3:11:a3:21:8f:7f:62:1d:f3:94:71:
87:61:6b:7f:c5:21:ee:ad:71:9c:1c:1f:fd:30:f3:
ed:63:29:ab:4a:5f:b5:10:a2:f4:9a:a5:6e:3c:3b:
c2:81:5d:e4:98:ec:3c:7b:a2:57:61:ea:5f:eb:24:
b5:88:86:26:c5:80:2f:dd:6f:4c:f4:97:42:fe:5f:
4e:1a:11:8a:19:91:d0:c1:95:da:df:74:be:a7:83:
77:44:ca:4e:d8:fc:6d:e2:d7:42:77:56:23:a8:7c:
d2:1d:cf:96:21:1c:5e:4c:d6:d7:70:4b:67:6e:c7:
00:04:a4:71:2a:0d:97:07:83:31:d6:9b:be:fb:45:
5f:61:f6:f6:c5:6c:ea:01:f9:8d:f3:81:fe:a5:fc:
71:89:47:82:e9:d3:e2:3a:19:ac:0f:cb:1e:40:08:
c6:5b:c8:2e:12:be:1b:fe:a9:b3:cb:5c:6d:75:8e:
55:1a:82:b4:e2:9c:f4:ed:f0:7d:82:9b:08:f2:6a:
4f:54:2c:cb:db:7f:fc:60:a3:ec:d6:26:30:0e:b7:
7a:8b:21:31:1c:0a:6d:e3:c8:fc:5b:cc:94:4b:ed:
14:94:68:db:e5:9e:37:b8:c9:b9:95:63:0e:bb:0c:
11:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F3:9F:AC:CF:73:7C:AA:D8:87:8E:B8:6D:B1:4B:38:B8:10:CA:A8
X509v3 Authority Key Identifier:
keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/NfOfrM9zfKrYh464bbFLOLgQyqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f8c::/48
Signature Algorithm: sha256WithRSAEncryption
23:4b:8f:91:f5:55:b5:53:98:9c:ed:ba:60:ec:8f:72:04:2a:
5c:0a:b9:b4:35:e1:86:71:71:47:b8:b0:21:88:71:dd:4c:74:
8f:ea:f7:48:3d:76:e4:32:09:fd:42:17:20:b4:34:f5:d1:40:
d4:09:86:15:a6:20:a3:10:7d:02:42:77:25:5b:2d:3e:d7:d6:
7c:09:38:b7:3d:4c:53:84:ad:05:ec:1d:f5:f0:29:8b:38:f0:
c0:e8:d3:33:e2:29:fd:dd:b5:b0:93:62:f2:17:9b:71:a4:5c:
44:92:2a:23:7a:19:9e:ed:2c:e3:68:bf:cc:6b:ca:9c:e7:e9:
0e:eb:a0:20:12:52:35:48:db:14:06:05:9b:53:9e:a7:09:d5:
1f:c7:d1:3b:0c:62:86:03:11:9f:27:7c:27:59:c9:20:86:a4:
c8:3e:d5:fb:27:28:c5:54:b7:d1:1d:99:b0:6e:a2:df:13:b7:
a5:73:4a:51:69:d5:f7:43:9d:34:73:da:61:be:98:0e:4e:27:
3c:e3:0e:8e:11:75:2c:49:89:d0:f3:ae:a6:d6:f5:6c:94:50:
45:08:98:6e:d3:7e:e6:c9:02:3c:c8:28:4c:1f:2d:ee:22:7d:
19:63:67:cb:a7:96:d1:a6:5d:b7:62:25:86:4a:cd:47:5c:7e:
54:d7:d2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:28:36 2024 by rpki-client on console-ams.rpki-client.org