Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/nEKnouiCbam26W4MrvIVidutBtA.roa
File: nEKnouiCbam26W4MrvIVidutBtA.roa (raw, json)
Hash identifier: g9c7BzWpXbLvQPj8MgnNm1fN+2EC1kslzAyN7Uhs9Y8=
Subject key identifier: 9C:42:A7:A2:E8:82:6D:A9:B6:E9:6E:0C:AE:F2:15:89:DB:AD:06:D0
Certificate issuer: /CN=d1122a5cb0643f736c7ec7961809a25938668f0e
Certificate serial: 018CC9BCFC1CF9317F33FB0555D8C9B04D88
Authority key identifier: D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/nEKnouiCbam26W4MrvIVidutBtA.roa
Signing time: Tue 02 Jan 2024 10:34:14 +0000
ROA not before: Tue 02 Jan 2024 10:34:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60354
IP address blocks: 185.251.114.0/24 maxlen: 32
185.251.113.0/24 maxlen: 24
185.251.115.0/24 maxlen: 24
2a0c:1940::/44 maxlen: 44
2a0c:1940:20::/44 maxlen: 44
2a0c:1940:10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:fc:1c:f9:31:7f:33:fb:05:55:d8:c9:b0:4d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1122a5cb0643f736c7ec7961809a25938668f0e
Validity
Not Before: Jan 2 10:34:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c42a7a2e8826da9b6e96e0caef21589dbad06d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f9:4a:7d:db:6e:c1:3f:09:77:47:bb:a4:43:
ea:94:68:c9:b9:b8:70:2e:23:bd:b9:c2:fb:06:29:
b5:a5:8a:9c:ed:a6:a6:fe:c4:3a:97:ad:46:23:d1:
33:ad:06:d0:a9:3a:92:31:ed:71:6e:af:41:ad:1f:
2d:12:1f:b1:ee:99:7f:ef:fc:a9:82:14:b9:de:13:
03:22:99:0e:7c:fc:da:26:42:eb:92:38:a8:04:34:
00:6f:74:40:cb:54:46:97:d4:b7:f1:af:2a:70:51:
3e:50:e4:13:c9:f3:50:ac:84:39:2e:2d:11:9e:36:
d4:e9:b0:01:8f:65:c2:0b:48:8f:65:2e:15:2c:4c:
bb:70:fb:93:52:c8:4a:29:d7:3e:c6:65:46:9f:53:
57:c5:3c:d9:a5:b1:40:4f:6c:2d:31:4b:b4:37:4f:
61:de:bf:37:79:a3:9c:3d:72:00:7d:14:d4:97:6c:
45:46:83:e9:85:d4:10:b3:39:64:2f:91:7a:1f:11:
30:79:ad:d3:28:b5:36:bc:ca:40:c9:fd:22:34:cf:
15:90:3c:d8:a8:87:d0:6a:c1:d7:b6:93:f3:ed:ac:
7f:c1:cd:62:e0:53:71:2e:7f:ed:3f:d6:25:ed:c0:
36:5b:63:15:85:e6:a8:b4:08:e3:c2:fa:eb:fe:55:
92:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:42:A7:A2:E8:82:6D:A9:B6:E9:6E:0C:AE:F2:15:89:DB:AD:06:D0
X509v3 Authority Key Identifier:
keyid:D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/nEKnouiCbam26W4MrvIVidutBtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.113.0-185.251.115.255
IPv6:
2a0c:1940::-2a0c:1940:2f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0b:2e:d8:ed:e8:ca:9d:15:5a:94:fb:68:08:24:7b:c3:ec:95:
d0:71:05:75:ec:37:3f:4d:5b:02:24:71:12:19:a5:f9:df:6c:
bb:70:92:68:a4:e3:61:3d:0e:60:7f:b2:b5:37:b1:e8:39:a2:
5f:fc:c1:32:14:92:e5:5f:bf:63:a5:d7:38:b0:73:84:14:04:
e8:52:e5:9f:cb:1a:8e:9b:b9:c2:a1:3e:17:8d:04:7a:43:89:
f6:22:d0:c3:63:a4:4d:5c:28:40:0e:93:d9:b1:a1:27:30:a7:
66:a4:5e:dd:d1:34:20:a8:bc:c5:d1:ba:72:71:2f:14:c2:7b:
83:13:02:1a:81:47:13:2d:2b:09:d8:67:87:e6:ff:a6:90:e9:
a4:08:fd:bd:2a:70:0f:b5:15:8b:94:53:c7:f5:7c:d2:13:f7:
9d:5d:0f:e6:31:97:ad:5f:63:42:f3:b5:5b:51:43:c8:f0:30:
99:d3:bf:f0:7d:83:3d:dc:10:bb:81:63:d2:b2:55:fb:dc:64:
a6:da:24:04:fd:33:0f:84:c0:9d:e4:2c:65:2e:0f:3f:da:d3:
59:40:14:fb:08:72:60:bb:67:7d:bf:4e:53:c6:ac:ad:55:94:
af:fc:1f:89:8c:c0:ae:a6:46:d8:68:9f:56:05:2a:0a:4e:d7:
87:17:1f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 04:42:54 2024 by rpki-client on console-ams.rpki-client.org