Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/NHW2TGAfPMdJBjA2RcGdkuMKK34.roa
File: NHW2TGAfPMdJBjA2RcGdkuMKK34.roa (raw, json)
Hash identifier: 7W1qeHVvEcJJkiNvB1YND1vLIbRmnQdcvSZbhYfJU2U=
Subject key identifier: 34:75:B6:4C:60:1F:3C:C7:49:06:30:36:45:C1:9D:92:E3:0A:2B:7E
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 018CC7935787914D27BD90DE3B53CD63AE34
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/NHW2TGAfPMdJBjA2RcGdkuMKK34.roa
Signing time: Tue 02 Jan 2024 00:29:31 +0000
ROA not before: Tue 02 Jan 2024 00:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 194.233.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:57:87:91:4d:27:bd:90:de:3b:53:cd:63:ae:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 00:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3475b64c601f3cc74906303645c19d92e30a2b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a7:83:67:eb:e1:9a:87:e1:5e:fe:32:e8:0f:
18:30:be:24:4b:b0:e4:bb:66:3c:d4:cb:1e:a1:b3:
9e:36:df:49:01:39:42:f7:be:6c:d5:11:2a:96:06:
f3:f9:eb:a7:54:10:c9:5c:72:67:6d:ac:13:79:f1:
a4:4a:d9:5c:91:3e:fe:53:7b:de:d9:bc:a7:b2:a8:
b0:2c:aa:81:6c:53:90:1a:c8:58:f4:61:ef:e6:a9:
d6:7e:1a:38:76:fa:40:f3:14:66:a6:c0:0e:94:9b:
6e:ba:52:6d:67:6a:96:dc:02:ab:09:b7:10:37:2a:
e2:47:d4:8a:ac:c3:2c:d9:1a:bd:e3:a5:7f:1f:27:
0b:53:b9:16:37:f2:fc:d6:ea:36:2a:0b:09:3a:2a:
01:ff:42:fc:83:c8:40:4f:81:10:20:eb:14:ad:c4:
8e:a5:56:bc:6a:2b:c4:58:dc:fa:96:7a:78:4b:f7:
b4:a9:2f:ec:fc:de:87:0b:89:7f:47:c7:c6:11:62:
9d:a7:ee:3d:c0:aa:de:69:2d:e0:2d:0f:13:9a:6c:
1b:ef:9f:b9:5a:43:ce:35:23:50:64:f5:b1:b5:c7:
ac:e2:d4:4c:6b:bd:9f:fc:3d:fd:5c:35:dd:d5:00:
65:ff:4a:d5:a4:d7:ec:fd:27:9c:4c:0b:b3:e3:92:
93:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:75:B6:4C:60:1F:3C:C7:49:06:30:36:45:C1:9D:92:E3:0A:2B:7E
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/NHW2TGAfPMdJBjA2RcGdkuMKK34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.150.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:b2:05:07:46:5b:05:0b:6a:65:bc:8b:83:ad:46:03:2b:be:
da:52:52:10:65:a3:d5:5f:07:a2:58:86:57:65:bd:1d:03:ce:
9f:a3:e4:6e:9e:c6:3a:ad:ff:b6:83:2c:4e:41:09:8b:ca:f5:
13:b8:2c:d3:27:3c:0c:7c:87:c5:a0:7c:56:10:c0:fd:de:6e:
12:c4:3a:63:f1:e8:70:1f:ed:bb:76:a7:23:7b:60:c2:fa:d7:
3c:3a:07:d1:4b:7f:a4:41:e0:0a:ab:18:5d:ae:6d:6b:27:ba:
a3:4b:d8:bc:ef:78:ee:b7:de:dd:34:83:c1:4d:1c:ce:79:4e:
bf:7f:7d:d0:97:8a:45:41:1f:92:4b:5c:26:0f:f7:48:ad:9c:
a9:7e:e2:ea:d8:cf:87:1a:fb:8d:bd:ca:bd:ed:2a:b0:bd:23:
e2:f2:44:97:02:84:7f:66:5b:8c:7b:bc:f5:40:fe:4d:2c:f6:
c5:70:7f:10:28:5e:29:a5:1d:cd:c2:49:bd:67:4d:6a:b4:d2:
b8:3d:8d:a2:44:4e:bf:e6:da:9e:a5:9a:d5:f3:b8:5a:73:d4:
7a:35:52:b7:85:43:31:af:09:69:de:ae:c6:f0:ca:d4:51:b1:
95:5b:80:5b:b8:3c:7e:f4:7b:53:92:ba:df:a2:5a:11:f4:a6:
5b:95:64:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:21:34 2024 by rpki-client on console-ams.rpki-client.org