Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/NeV9mQpwOfgzmYW_LOGXR7znkXI.roa
File: NeV9mQpwOfgzmYW_LOGXR7znkXI.roa (raw, json)
Hash identifier: zZen78W7d3yphLkrFotj2UM5ISvEgPm15wDwIBPT8bk=
Subject key identifier: 35:E5:7D:99:0A:70:39:F8:33:99:85:BF:2C:E1:97:47:BC:E7:91:72
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 018CC6B7B53366CCF2D15416BA3FF279BB70
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/NeV9mQpwOfgzmYW_LOGXR7znkXI.roa
Signing time: Mon 01 Jan 2024 20:29:37 +0000
ROA not before: Mon 01 Jan 2024 20:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57523
IP address blocks: 87.247.158.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 20:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:b5:33:66:cc:f2:d1:54:16:ba:3f:f2:79:bb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 20:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35e57d990a7039f8339985bf2ce19747bce79172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6f:b1:3e:53:80:d1:30:da:3e:61:72:a9:a1:
f7:26:09:cd:51:37:67:98:a3:e1:6c:09:9d:73:57:
72:d8:8a:1e:d3:a0:cb:e7:70:4e:fd:a8:80:bf:60:
c1:d7:cf:8a:ff:7a:15:d0:33:ba:4a:8d:08:81:27:
a6:d2:e3:4f:e1:96:21:16:5d:f0:fb:6e:eb:6c:38:
1a:ea:64:83:14:1b:aa:16:76:88:24:32:f2:28:4b:
21:bd:48:a9:34:af:44:1e:fb:f0:68:76:c2:aa:2f:
35:d0:bd:a1:5f:a0:44:52:c3:51:47:4e:35:92:2c:
94:70:14:87:e0:ea:45:ff:77:95:e6:7b:17:69:dd:
56:b6:37:52:c0:97:d4:f1:49:e8:a3:f0:3b:fd:c2:
bd:98:b1:74:19:ba:36:4b:ac:b0:76:4a:69:3d:fb:
01:3f:92:f3:2b:1a:c5:10:92:0d:79:b8:3d:7a:7d:
83:16:09:06:ad:36:79:03:e7:ed:a9:45:5e:76:d5:
f3:a2:61:a6:ca:e5:f9:6b:9a:b9:c6:89:a8:87:45:
e0:b9:1c:40:70:44:b9:1c:d2:ef:2f:7c:55:5b:09:
2c:46:08:25:04:1b:27:1e:5c:3c:bc:6f:9d:f7:64:
da:1a:4e:48:f5:61:c7:e1:8d:0c:25:82:9a:fd:c5:
ae:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E5:7D:99:0A:70:39:F8:33:99:85:BF:2C:E1:97:47:BC:E7:91:72
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/NeV9mQpwOfgzmYW_LOGXR7znkXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.158.0/23
Signature Algorithm: sha256WithRSAEncryption
11:ea:59:4c:2f:9f:d4:bc:e1:de:12:b3:81:f4:31:3f:15:a0:
90:d0:dc:09:57:ea:c6:7f:7e:a1:b7:55:da:cc:cb:4c:60:6b:
a5:60:0d:ed:c5:b3:eb:ed:d2:06:a2:c6:ff:61:f4:bb:ef:6c:
12:75:c5:2b:6c:26:5b:34:76:e3:6c:d1:69:15:23:dd:7d:c2:
03:6f:08:10:b6:ec:e5:fd:31:ad:8b:e8:bc:da:df:4f:c2:90:
95:d9:01:e8:1c:61:b3:76:b0:18:14:db:36:a5:aa:f4:9f:ba:
5e:a4:84:83:80:8d:e6:de:e0:c4:0d:5a:bf:4b:41:35:65:8e:
25:24:70:d0:6b:9e:fd:95:de:f4:78:1d:0b:14:d3:6c:b2:7a:
2f:f9:e2:fb:fb:87:ea:36:79:ad:6a:b1:fd:92:e9:f9:b2:da:
ed:f3:ff:23:25:37:66:84:88:43:7f:38:66:e9:32:30:94:47:
a6:6a:12:3e:a1:92:46:62:d4:5a:3a:a2:6d:a2:49:87:da:6d:
b9:25:cc:da:cd:27:f8:45:4b:91:02:d3:20:88:a7:d8:51:b8:
38:b8:c3:ac:12:b7:73:f9:8c:c7:a3:3e:de:78:9a:21:a1:35:
26:11:ae:e7:4f:78:75:5c:75:6a:9d:c6:a2:5a:1a:7c:8e:6b:
43:f3:f9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:03:45 2024 by rpki-client on console-fra.rpki-client.org