Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/nP-Tw-ovdTCq15B3-QBJKF11GrU.roa
File: nP-Tw-ovdTCq15B3-QBJKF11GrU.roa (raw, json)
Hash identifier: zifZCLNLSjbaLEQmzHOtEwS992VvBh2c0lTkmk8jRwk=
Subject key identifier: 9C:FF:93:C3:EA:2F:75:30:AA:D7:90:77:F9:00:49:28:5D:75:1A:B5
Certificate issuer: /CN=d50cda48c35e54eb802575aaa408cce579927216
Certificate serial: 018E7178C9390589B0641417BE4146BE8A20
Authority key identifier: D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/nP-Tw-ovdTCq15B3-QBJKF11GrU.roa
Signing time: Sun 24 Mar 2024 17:18:44 +0000
ROA not before: Sun 24 Mar 2024 17:18:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 217.12.224.0/22 maxlen: 28
217.12.234.0/23 maxlen: 28
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:71:78:c9:39:05:89:b0:64:14:17:be:41:46:be:8a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50cda48c35e54eb802575aaa408cce579927216
Validity
Not Before: Mar 24 17:18:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9cff93c3ea2f7530aad79077f90049285d751ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7d:cf:26:b1:35:87:76:de:75:6e:19:b1:ec:
63:70:d6:6e:7d:e0:49:6b:be:2b:71:f5:da:a2:a5:
6f:f9:03:0f:25:6a:bd:4d:6c:1c:6f:e8:86:06:d3:
1b:72:80:4f:d6:8d:a3:36:05:65:f3:ed:46:19:a3:
81:c2:f0:97:ae:c6:8d:ee:e9:ac:b1:33:8e:0d:8b:
b5:9c:b2:bd:10:68:fb:38:a8:f7:0d:3c:a3:ab:06:
a0:60:d0:65:ee:1d:aa:66:6b:ef:07:00:d5:97:4b:
3a:18:7b:ba:89:3d:50:50:4e:09:47:9d:f1:13:8d:
c5:96:35:6c:b2:11:fc:01:30:57:bf:06:19:79:1c:
b9:a7:9f:44:61:7e:7e:88:d4:e5:18:c1:ca:cf:13:
cd:b1:8a:d1:74:c2:e8:06:12:e1:8d:c7:62:ad:83:
9f:c7:94:e9:ba:00:91:9b:18:33:6f:3e:97:37:93:
36:92:7c:76:fb:68:7c:d7:f7:68:c6:42:9d:9a:a8:
1a:8a:18:dd:89:1a:cb:4a:e3:c2:9b:3e:6f:53:03:
9f:e8:48:79:fe:b9:e2:d6:45:93:af:ee:43:8c:2c:
b2:75:a6:c9:f4:f8:1e:a9:0e:c5:07:62:99:28:53:
b6:9a:84:1a:c2:6a:da:2c:f2:17:d7:50:84:09:b8:
a4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FF:93:C3:EA:2F:75:30:AA:D7:90:77:F9:00:49:28:5D:75:1A:B5
X509v3 Authority Key Identifier:
keyid:D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/nP-Tw-ovdTCq15B3-QBJKF11GrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.12.224.0/22
217.12.234.0/23
Signature Algorithm: sha256WithRSAEncryption
47:26:8c:7c:07:ac:b3:7b:bb:fd:38:ab:22:b6:17:1e:c6:52:
c1:06:95:70:7f:d6:97:44:2e:6c:f7:9f:71:c2:a9:54:f7:52:
27:a9:bf:df:e8:d0:78:ca:80:30:ad:84:76:77:64:e0:cc:7e:
b7:72:a1:6a:1a:d2:69:44:2c:b9:7b:3c:0d:57:4c:a9:59:cc:
85:19:09:b8:95:1c:f5:06:e7:72:c9:81:ab:6e:2c:e5:f1:60:
4a:24:cb:7f:14:a9:54:65:70:49:c3:8b:91:2e:78:f4:49:de:
b7:a1:6c:76:d6:97:61:47:bb:78:a9:82:6a:23:73:e2:da:69:
07:36:0d:10:28:92:3f:f1:9e:58:3d:8f:f1:96:fa:a2:e6:02:
ca:13:81:ef:d8:a5:87:24:97:0a:94:16:ad:c2:66:98:9a:d9:
f0:f9:5d:61:c8:99:b7:d9:ef:cd:5a:58:44:95:ac:7b:78:cb:
8f:53:e4:7c:81:de:58:7c:03:20:c5:10:c3:19:f8:53:26:c0:
00:14:66:be:83:c1:1d:1b:66:0b:df:e8:d6:39:52:e4:d7:5e:
ef:1a:6f:96:9c:0c:38:54:5d:56:65:7e:84:86:92:d9:33:b6:
78:e9:0d:5c:b7:fd:78:e9:6b:dc:50:d4:09:1c:cd:ee:cf:c7:
6f:5a:c7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:07:21 2024 by rpki-client on console-fra.rpki-client.org