Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/NVKKbTMzEfLkjxWPVcD6ZIAiLHw.roa
File: NVKKbTMzEfLkjxWPVcD6ZIAiLHw.roa (raw, json)
Hash identifier: vD57aL22HUJn+18Akz5h1gkyeoQor1kOAtaSOlgSgn0=
Subject key identifier: 35:52:8A:6D:33:33:11:F2:E4:8F:15:8F:55:C0:FA:64:80:22:2C:7C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018FC4DA7788CB8A1F79F8BDA5AFF4EF4154
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/NVKKbTMzEfLkjxWPVcD6ZIAiLHw.roa
Signing time: Wed 29 May 2024 14:56:42 +0000
ROA not before: Wed 29 May 2024 14:56:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215433
IP address blocks: 77.81.101.0/24 maxlen: 24
89.37.185.0/24 maxlen: 24
89.44.76.0/24 maxlen: 24
93.119.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c4:da:77:88:cb:8a:1f:79:f8:bd:a5:af:f4:ef:41:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 29 14:56:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35528a6d333311f2e48f158f55c0fa6480222c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:31:9f:4e:d3:1f:88:42:3f:88:dc:23:9d:a1:
25:55:cf:13:5f:cc:ad:db:57:27:93:bb:7c:bd:38:
53:3f:25:66:63:e4:50:43:74:d0:bd:30:73:57:29:
df:6c:bd:0e:66:ca:f5:55:1d:b6:72:b7:47:7d:bc:
0d:7d:e2:6c:e1:6f:7f:61:4d:f5:e7:93:dc:c9:3f:
bf:cb:1e:a2:d4:e5:e8:a5:d6:e6:fe:e9:b9:82:1d:
61:33:66:8d:17:b0:d9:22:bc:a7:07:9a:85:42:8f:
b3:c3:b9:bb:9e:11:b0:7c:6a:98:75:0a:94:72:a0:
44:b4:79:41:92:f6:a8:86:27:d0:f0:a0:dd:f9:b9:
6d:4d:e7:c5:45:57:0a:54:20:2e:43:8b:46:8e:9a:
fc:be:f7:43:33:fd:47:7b:bb:f3:fb:25:31:b0:62:
43:f9:d7:38:e8:9c:f3:00:cf:3a:60:9d:9a:15:27:
03:5c:72:44:9c:7b:98:63:20:76:50:2a:f5:67:e6:
1e:d0:15:5e:98:66:0d:16:83:53:93:78:74:1f:8b:
98:09:43:d6:a9:96:f2:47:48:37:bd:e5:97:da:f9:
29:f6:db:89:e1:fb:5e:13:7d:79:33:aa:90:d7:36:
a9:20:e2:fe:81:fa:77:e5:32:09:f0:ef:50:aa:80:
26:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:52:8A:6D:33:33:11:F2:E4:8F:15:8F:55:C0:FA:64:80:22:2C:7C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/NVKKbTMzEfLkjxWPVcD6ZIAiLHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.101.0/24
89.37.185.0/24
89.44.76.0/24
93.119.195.0/24
Signature Algorithm: sha256WithRSAEncryption
02:ee:88:a8:42:b3:ce:79:54:d3:b7:5b:c0:4e:a3:d7:39:ee:
1b:93:d1:22:7c:eb:1a:67:b7:c8:8e:c9:52:1c:65:c1:10:45:
8a:87:17:07:50:ed:93:58:a1:d1:f6:41:63:9c:74:1c:4c:ff:
ea:8c:cc:49:bb:c5:f8:04:45:e0:7d:a3:a6:e9:f2:b8:60:7f:
18:10:a4:19:d4:d9:94:68:d1:b2:ed:eb:a3:58:ca:d7:50:4e:
4f:74:1f:81:4d:1c:4e:05:40:15:a2:83:f3:94:61:54:38:95:
53:e0:d6:f1:cb:ce:c9:89:ad:b1:c0:80:86:fe:dc:22:5c:db:
49:16:e6:e5:97:ee:d0:13:1f:26:c8:ff:cc:e9:94:c5:c6:df:
39:a3:78:18:69:12:cd:a1:48:68:49:94:b1:65:5c:c6:18:42:
a1:fe:a6:b3:7e:c2:81:fe:f3:5a:ff:a2:33:14:40:26:61:47:
58:81:b7:7c:10:1c:45:87:a5:cc:d8:d4:f9:1b:6f:2b:cc:f7:
89:35:ac:ea:d7:5c:ec:cd:bc:71:72:af:d5:09:c6:2c:e4:ba:
94:06:3a:c2:cc:c8:bc:7d:f4:8c:ff:0f:cd:ed:04:63:40:3c:
85:36:f7:bd:fa:93:38:ae:37:1d:13:ce:bd:30:22:c6:ed:98:
b1:e7:23:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:03:15 2024 by rpki-client on console-fra.rpki-client.org