Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ns-MPMktXv7HCweaWkQcw-f7pNk.roa
File: ns-MPMktXv7HCweaWkQcw-f7pNk.roa (raw, json)
Hash identifier: ZZP8A4kBMkD7tvsaATF77wEKZyNQHtzyAX2MDz/r/vk=
Subject key identifier: 9E:CF:8C:3C:C9:2D:5E:FE:C7:0B:07:9A:5A:44:1C:C3:E7:FB:A4:D9
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018CCA29C2921642E6E5035713B58B4A573E
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ns-MPMktXv7HCweaWkQcw-f7pNk.roa
Signing time: Tue 02 Jan 2024 12:33:03 +0000
ROA not before: Tue 02 Jan 2024 12:33:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48147
IP address blocks: 62.60.162.0/24 maxlen: 24
213.176.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:c2:92:16:42:e6:e5:03:57:13:b5:8b:4a:57:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 12:33:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ecf8c3cc92d5efec70b079a5a441cc3e7fba4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:47:cb:5e:bd:a8:64:2f:e2:8d:ff:49:68:c9:
c8:1d:2e:52:6b:d0:ac:d9:d8:71:f3:c1:7a:d0:86:
11:21:03:82:f9:54:3e:33:41:d7:1c:aa:70:93:38:
01:86:42:fe:8b:f2:03:2e:33:60:20:77:ad:ef:a0:
25:f6:cf:7a:5d:fb:61:79:15:84:0d:30:56:13:7e:
f0:a5:ba:44:aa:ae:d6:d5:95:90:46:96:4f:f3:34:
3a:47:f9:2c:e9:25:1f:f7:9e:d9:d9:ca:fd:67:a7:
67:5e:56:27:40:b7:81:2c:52:60:45:2b:92:b0:fb:
b9:2c:e2:13:99:bf:e1:3e:40:97:d1:c7:25:20:33:
da:7f:5b:c1:b8:30:38:ca:77:8d:3e:86:1c:6a:a5:
97:fb:18:ae:92:bc:01:61:a6:e5:27:f4:8b:2a:85:
0d:cc:84:1e:d0:3f:50:fc:6f:ee:75:85:a4:45:79:
5f:b3:fd:41:95:b5:00:7b:8b:54:79:c4:24:85:8a:
0b:ce:f7:1c:35:a8:bd:a0:52:46:0e:8b:5e:fd:b9:
4c:5b:1c:53:3e:29:35:cd:16:21:36:f4:d6:95:48:
f7:02:a2:2b:ae:44:83:d0:e9:ea:53:a5:7c:05:dd:
a4:68:4d:93:50:88:a1:7b:0e:7c:ce:ce:3b:b9:e4:
48:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CF:8C:3C:C9:2D:5E:FE:C7:0B:07:9A:5A:44:1C:C3:E7:FB:A4:D9
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ns-MPMktXv7HCweaWkQcw-f7pNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.162.0/24
213.176.1.0/24
Signature Algorithm: sha256WithRSAEncryption
57:9a:9c:3c:e8:05:1a:7c:a3:f5:20:31:5d:0d:84:53:7d:8d:
04:55:e4:ab:da:19:f3:5b:19:b4:77:72:2e:89:5a:e1:c7:59:
c8:3b:7a:24:24:4b:e9:1b:9d:b5:d4:79:d5:92:2d:2a:30:55:
c2:5d:21:2b:20:33:7f:52:d9:9d:45:41:e6:b9:45:00:5e:53:
f7:fc:89:d1:72:de:83:76:d8:4e:eb:9f:11:f8:9f:47:a6:93:
e4:05:a0:32:31:af:f0:db:01:53:25:25:2e:fb:78:74:8d:90:
02:2d:fc:a7:95:ba:92:c1:2f:26:97:a3:0f:b7:0b:10:f2:c0:
77:7c:84:d8:35:3e:4d:8c:96:d0:ea:7a:a9:18:38:86:fa:7a:
59:96:ac:0c:bb:30:0d:af:09:73:33:7a:0d:f6:0b:67:a9:33:
cb:dc:5b:83:9e:28:0c:c4:f1:e0:8f:89:f1:d9:b6:74:95:5a:
65:49:19:45:2d:31:53:ba:9a:78:06:a4:5b:29:15:66:f3:77:
65:42:7a:66:95:f7:3b:e7:3e:b0:7e:9f:70:dd:c5:90:43:7d:
b0:77:b9:29:72:f8:d0:8b:5b:f2:dd:7c:e1:65:11:16:96:7f:
eb:65:e6:65:e8:85:df:a9:0a:3b:ef:34:2a:7a:71:c6:ef:05:
05:55:e3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:27:13 2024 by rpki-client on console-ams.rpki-client.org