Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/NEg06crp0YPEX2GLlb4bLVMcfYA.roa
File: NEg06crp0YPEX2GLlb4bLVMcfYA.roa (raw, json)
Hash identifier: ODYGDo4PQqNZS1p0A++0r/AGCv+wi0qmwaIJT5rcnAk=
Subject key identifier: 34:48:34:E9:CA:E9:D1:83:C4:5F:61:8B:95:BE:1B:2D:53:1C:7D:80
Certificate issuer: /CN=46ebddae6a7acee83a322a0e743a6759d85365f2
Certificate serial: 018FF4636CAD6BCE6E1D55AB5473AF5999EA
Authority key identifier: 46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/NEg06crp0YPEX2GLlb4bLVMcfYA.roa
Signing time: Fri 07 Jun 2024 20:28:27 +0000
ROA not before: Fri 07 Jun 2024 20:28:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8487
IP address blocks: 185.171.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f4:63:6c:ad:6b:ce:6e:1d:55:ab:54:73:af:59:99:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ebddae6a7acee83a322a0e743a6759d85365f2
Validity
Not Before: Jun 7 20:28:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=344834e9cae9d183c45f618b95be1b2d531c7d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5e:4b:67:b0:fc:0e:46:d8:97:21:81:45:c3:
62:20:ec:1e:ed:aa:45:f2:9c:df:5d:1b:1f:a1:37:
de:0c:ca:85:0b:9e:21:70:74:2a:4c:58:66:4e:01:
46:e4:a3:33:06:db:2c:33:95:b0:8a:8a:02:da:be:
16:ee:7b:d5:eb:db:1c:a4:80:0b:e4:2c:3d:40:74:
cc:c6:79:a2:c6:d9:ad:64:36:ae:86:fb:16:5b:e6:
1d:8b:00:1b:62:5f:9c:db:96:bf:56:85:0b:30:ba:
5d:4b:a6:9e:c2:9a:6c:9b:9e:f3:36:ed:21:4f:cd:
6a:41:40:e4:ab:a9:d5:b8:fe:45:e8:14:cb:fe:c0:
72:22:66:21:58:cf:eb:72:55:6d:4e:38:3d:84:96:
6b:59:89:28:30:97:05:fc:7b:90:f6:19:6a:cb:bf:
52:65:ec:31:d3:41:69:45:3f:64:8d:b1:9d:37:e5:
e2:8f:48:0e:b0:f3:54:7a:82:c6:c5:57:a5:e8:3a:
57:24:ab:2d:65:86:07:b7:a7:13:34:f8:e5:8e:7d:
67:75:a8:50:10:9f:b6:f4:b2:ad:06:1f:7c:89:ca:
d0:4d:9c:12:8c:88:3f:1d:38:99:c9:3a:b6:a2:3b:
1f:a7:2e:6d:c8:6a:30:b7:d7:78:0a:df:b2:78:75:
c5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:48:34:E9:CA:E9:D1:83:C4:5F:61:8B:95:BE:1B:2D:53:1C:7D:80
X509v3 Authority Key Identifier:
keyid:46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/NEg06crp0YPEX2GLlb4bLVMcfYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.23.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:9d:48:32:ab:2d:f5:95:f2:e0:4b:05:35:e3:a8:7f:1a:9c:
b6:98:e1:3b:f0:8b:20:9d:86:86:c9:13:7d:14:4d:d3:0c:6b:
0d:a6:20:1c:f7:7c:51:a1:01:25:3d:f4:b1:7d:8b:29:6e:6e:
2c:bf:0f:07:c4:78:9b:e4:2c:b5:96:6d:0e:30:2e:73:6e:88:
60:84:2b:a7:c9:07:05:11:4f:95:1e:35:0a:17:8f:e6:41:c0:
42:1f:64:3e:fb:fa:a0:ea:a7:78:6b:ea:30:6b:d7:4f:f6:c4:
c9:7d:95:96:77:5d:b3:71:da:b5:af:e4:da:82:b3:b4:ba:e5:
03:2a:69:80:be:ac:69:a4:7c:66:34:dd:a7:e0:72:07:e0:b5:
7b:9b:3b:4e:0e:5d:e4:96:20:cc:5b:05:b1:c1:2a:65:8b:7b:
df:28:c7:9c:fa:ce:ee:a3:ef:3e:6a:5b:10:43:c3:d8:07:df:
e8:29:fa:ce:d4:7d:19:88:2f:33:7f:51:be:e6:88:1c:06:f9:
ec:5f:4e:36:3d:a8:0a:16:9c:86:b6:d6:3b:5b:62:1b:88:5c:
c8:d1:23:34:d2:e3:75:b0:cd:53:61:26:3b:b2:0f:f1:d9:f7:
e0:e6:d6:57:41:f9:f3:f9:e4:70:7b:9b:cc:31:e3:75:ba:cc:
b5:b3:3d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:34:46 2024 by rpki-client on console-ams.rpki-client.org