Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nGn2FPpq8n0XeVLxlxXia9QnoAE.roa
File: nGn2FPpq8n0XeVLxlxXia9QnoAE.roa (raw, json)
Hash identifier: Npwtadzm+qIOZSYXNs7I7fVqnG6XP8OxoRLoNYvVY28=
Subject key identifier: 9C:69:F6:14:FA:6A:F2:7D:17:79:52:F1:97:15:E2:6B:D4:27:A0:01
Certificate issuer: /CN=9e4cf51247ab57f526f3807259a78d2b02590603
Certificate serial: 018CC56EDC5F6C71BC2D08C8221C03749858
Authority key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nGn2FPpq8n0XeVLxlxXia9QnoAE.roa
Signing time: Mon 01 Jan 2024 14:30:26 +0000
ROA not before: Mon 01 Jan 2024 14:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29997
IP address blocks: 194.62.183.0/24 maxlen: 24
194.62.180.0/24 maxlen: 24
194.62.182.0/24 maxlen: 24
194.62.181.0/24 maxlen: 24
2a07:dc00:1820::/44 maxlen: 44
2a07:dc00:2550::/44 maxlen: 44
2a07:dc00:1830::/44 maxlen: 44
2a07:dc00:1810::/44 maxlen: 44
2a07:dc00:180::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:dc:5f:6c:71:bc:2d:08:c8:22:1c:03:74:98:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4cf51247ab57f526f3807259a78d2b02590603
Validity
Not Before: Jan 1 14:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c69f614fa6af27d177952f19715e26bd427a001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:91:01:2b:ee:29:fb:83:8d:12:8a:43:9d:d3:
be:dc:31:08:89:6d:46:cb:a8:03:a2:87:33:ff:7f:
6f:46:31:1d:a7:0d:b4:a1:23:83:fe:75:a4:ea:75:
b9:5b:31:ff:90:91:ad:52:26:f6:f0:82:6a:eb:1d:
15:54:14:9a:92:f1:6b:b6:c3:92:f7:14:82:0b:a1:
0b:5a:df:0f:b0:8c:05:a7:23:dd:f0:2a:24:db:95:
24:cc:b8:aa:4c:54:6d:08:ae:18:71:c5:94:53:ca:
19:6a:d1:76:99:51:c1:1d:89:60:df:1c:49:27:bf:
4d:18:18:b2:2b:1a:8a:92:95:1c:8e:1f:06:53:47:
52:2a:dc:34:74:3b:24:78:09:eb:e9:8c:02:72:b6:
b7:72:c2:49:a0:d2:2c:48:cc:e2:2b:99:1a:10:07:
11:eb:76:c2:56:36:73:f3:f5:b2:c3:ca:ab:5f:b0:
2c:af:13:a3:a6:34:4f:20:30:4c:cd:b5:39:68:ee:
a7:aa:2e:95:42:99:1d:0c:11:9a:d2:03:b6:98:9c:
c2:5d:e4:6e:7f:c5:90:49:04:29:7f:89:69:7f:de:
aa:28:46:74:04:8b:db:d6:f6:37:00:1e:ac:2f:8a:
f5:fe:e8:31:6f:8c:24:46:0a:6a:03:ea:55:78:46:
f5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:69:F6:14:FA:6A:F2:7D:17:79:52:F1:97:15:E2:6B:D4:27:A0:01
X509v3 Authority Key Identifier:
keyid:9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nGn2FPpq8n0XeVLxlxXia9QnoAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.180.0/22
IPv6:
2a07:dc00:180::/44
2a07:dc00:1810::-2a07:dc00:183f:ffff:ffff:ffff:ffff:ffff
2a07:dc00:2550::/44
Signature Algorithm: sha256WithRSAEncryption
0d:98:8c:e0:47:44:fa:4f:07:cc:0b:4f:b1:7d:57:c2:3c:99:
9c:8e:18:0b:68:f3:e4:7a:ea:68:fd:58:78:95:a8:8a:2b:00:
b6:6a:e5:80:b4:0f:f6:1d:68:f6:82:be:39:fd:8a:39:67:e8:
7d:10:f3:7d:f2:f3:66:3b:06:5d:6f:c2:b5:6f:05:ec:02:7b:
43:10:03:5f:86:6b:a5:85:f2:33:db:04:14:47:06:c9:85:6c:
1d:8d:58:c8:1d:fd:bb:da:9e:53:56:e8:26:41:4c:9b:52:4b:
e1:f1:d3:fe:10:18:87:3a:15:d6:a9:c6:d1:6a:c7:13:5b:25:
36:21:ed:22:6e:9f:c5:97:28:9d:bc:25:7b:11:08:66:ae:83:
f4:01:5b:6d:80:65:0f:d2:76:0c:28:a5:a9:85:32:58:28:c6:
c4:d3:21:d7:b7:e0:b6:0f:34:92:53:4d:69:3c:3a:2c:53:22:
1c:5a:f7:8e:c1:32:af:ff:15:5f:34:5c:0f:8b:c8:e8:4a:d2:
63:5c:82:18:69:86:71:c7:c5:fa:58:41:61:0d:95:e5:61:56:
30:dc:67:d6:ca:ab:46:80:63:cf:8b:64:01:6f:8b:c3:cf:80:
a7:06:ad:b6:86:3c:24:58:09:5b:1b:57:cf:69:b3:de:09:03:
67:78:04:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:44:11 2024 by rpki-client on console-fra.rpki-client.org