Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Ny2GLo4Blpcp0d4JFa4mCdaeWzg.roa
File: Ny2GLo4Blpcp0d4JFa4mCdaeWzg.roa (raw, json)
Hash identifier: zloEpvhHEUIy7bHUdXgBA/zHOpAi5lilFBHqlj5IQDw=
Subject key identifier: 37:2D:86:2E:8E:01:96:97:29:D1:DE:09:15:AE:26:09:D6:9E:5B:38
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01912CBD405B04640438501C39D4EDF48EFD
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Ny2GLo4Blpcp0d4JFa4mCdaeWzg.roa
Signing time: Wed 07 Aug 2024 12:08:05 +0000
ROA not before: Wed 07 Aug 2024 12:08:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39365
IP address blocks: 185.144.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2c:bd:40:5b:04:64:04:38:50:1c:39:d4:ed:f4:8e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Aug 7 12:08:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=372d862e8e01969729d1de0915ae2609d69e5b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:24:28:69:d0:b0:03:ce:ce:a9:0d:68:c7:64:
3e:f7:cb:3b:eb:69:f6:16:40:bc:c0:9d:82:05:2b:
67:14:79:00:a1:fd:01:82:8e:aa:6b:f8:b8:0b:c3:
89:4f:44:f6:7f:f7:7d:70:df:89:e6:ef:26:ce:d2:
8e:56:9f:77:5f:68:22:2c:50:86:4b:f1:68:8f:9e:
6f:57:75:b5:ed:16:5a:84:5b:9b:27:8a:9a:bf:ab:
76:19:76:f8:95:09:31:b7:23:38:31:d3:50:27:0a:
dc:34:9c:36:d0:87:5d:ef:c8:c8:96:1b:f1:72:40:
36:00:a4:e4:03:29:d0:4f:ea:44:28:59:6f:49:1b:
6b:96:95:03:60:1c:c8:10:5d:38:32:76:47:17:80:
05:c9:aa:64:a6:95:1b:91:62:4f:03:13:d2:f4:d0:
42:47:53:cc:df:f4:31:d5:d8:09:b9:45:11:c2:03:
4d:43:9c:13:f5:ca:d2:85:5a:e2:d3:a1:a6:94:71:
e7:48:ae:00:f4:8c:c4:a7:4e:02:a7:98:58:16:95:
22:85:00:67:88:58:0e:ac:df:3d:c1:46:5f:d9:47:
f3:07:55:29:c9:2e:4f:fc:d0:1d:6a:20:51:07:31:
b8:bc:5b:58:6c:55:76:53:4a:37:07:b8:fb:4c:98:
26:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2D:86:2E:8E:01:96:97:29:D1:DE:09:15:AE:26:09:D6:9E:5B:38
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Ny2GLo4Blpcp0d4JFa4mCdaeWzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.184.0/22
Signature Algorithm: sha256WithRSAEncryption
39:c0:a3:0d:ba:83:04:4d:9f:7f:ee:da:c9:be:c0:10:0f:1f:
c5:b4:91:cc:66:bc:a5:b4:02:aa:64:81:28:f9:db:ce:a2:43:
60:44:b5:23:6d:85:f8:be:a1:34:dd:b8:c4:6b:6a:68:64:a3:
f4:46:2a:82:9a:b0:1b:1e:39:2d:e1:86:0f:6b:c7:b1:df:94:
7b:72:bf:cc:c3:10:57:43:00:f8:6f:93:8d:73:70:2d:72:18:
35:3b:c1:04:42:13:9c:6d:e9:f5:f9:45:af:81:c2:4b:6a:b1:
f2:7e:65:f3:f9:a0:21:aa:f2:0e:23:3e:ea:86:be:1d:c4:8f:
f2:9f:66:61:1a:56:2b:52:52:14:bc:1d:bb:24:5b:3e:d7:b7:
93:bd:12:28:c9:33:2b:8e:58:07:90:08:83:14:13:7e:bd:30:
0a:0d:54:5a:f5:18:06:ad:9d:57:0e:07:82:77:a6:ce:fe:c8:
da:07:e6:98:c5:27:8d:e1:ad:6f:a2:dd:94:19:5b:f3:6f:4a:
3e:92:dd:15:09:c6:55:05:c5:a5:06:3c:61:b0:6c:0a:2a:42:
52:63:23:df:87:8d:c4:7a:65:56:36:c9:ec:39:39:f9:fd:0d:
4a:a5:7c:0d:2a:73:41:32:e3:85:42:37:43:12:8e:a5:53:99:
71:87:91:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:23:21 2024 by rpki-client on console-fra.rpki-client.org