Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/nUARhv-35QmsXdwxSqilIkxcDQI.roa
File: nUARhv-35QmsXdwxSqilIkxcDQI.roa (raw, json)
Hash identifier: WJEz1oQG4zqgQOfaymhXOYUX1ExPK4rQtvaxYhXzF0U=
Subject key identifier: 9D:40:11:86:FF:B7:E5:09:AC:5D:DC:31:4A:A8:A5:22:4C:5C:0D:02
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC79551635EC5FD3425D6C1A3F1BAFC4E
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/nUARhv-35QmsXdwxSqilIkxcDQI.roa
Signing time: Tue 02 Jan 2024 00:31:40 +0000
ROA not before: Tue 02 Jan 2024 00:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49410
IP address blocks: 86.105.231.0/24 maxlen: 24
93.115.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:51:63:5e:c5:fd:34:25:d6:c1:a3:f1:ba:fc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d401186ffb7e509ac5ddc314aa8a5224c5c0d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:60:11:20:04:93:b0:e6:be:cf:af:a4:ec:87:
1b:ae:d7:bc:05:01:f4:91:37:8f:d5:fd:40:61:1f:
a9:b9:8f:64:0f:c5:f4:fa:8c:1f:78:a6:73:1e:6f:
f8:25:64:4a:92:9c:c8:2c:19:d3:8b:3e:fc:76:1e:
1a:70:70:a8:fc:e4:4e:8e:45:27:d1:e7:82:ed:23:
6b:2e:6b:54:23:68:07:de:85:25:c2:05:0b:56:49:
f1:47:ab:74:36:f8:49:36:c0:ce:cc:e3:47:b9:73:
ea:ca:d2:61:26:0c:5b:9b:76:0d:46:d8:0b:21:55:
29:9c:c1:bb:33:6a:4a:65:72:43:35:6d:9e:fb:df:
06:e3:62:37:c7:0d:66:22:d4:47:7f:a7:b1:e6:d3:
1a:b1:83:3b:ef:c0:1f:fa:5c:8c:aa:6b:35:d4:2a:
1e:a1:05:ba:50:48:1c:f3:e5:91:9e:67:01:16:8b:
e5:d8:d8:89:a2:cd:d4:ce:ac:76:e3:34:71:6a:59:
c2:1c:d7:aa:46:fa:27:be:cc:2c:10:dd:dd:f3:e1:
a9:4a:64:b7:cd:e0:4b:69:ba:1e:27:e1:77:e5:65:
ae:15:f4:51:7d:e5:62:de:71:9e:48:68:d6:c6:80:
d8:61:0e:8a:d2:54:c2:3d:3d:86:01:63:0b:fc:72:
7f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:40:11:86:FF:B7:E5:09:AC:5D:DC:31:4A:A8:A5:22:4C:5C:0D:02
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/nUARhv-35QmsXdwxSqilIkxcDQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.231.0/24
93.115.1.0/24
Signature Algorithm: sha256WithRSAEncryption
70:0e:89:aa:69:0a:46:3d:58:6e:38:ab:ff:f4:d8:d7:93:2e:
97:64:4a:0b:0d:4e:5d:ae:6c:1a:a6:12:64:82:8a:b5:c5:33:
43:f5:a0:f0:78:46:d9:a8:42:58:e4:d6:e0:1f:d9:d9:0d:6b:
dc:7d:cb:18:15:5b:60:3b:d8:ea:a5:7f:6c:29:d4:2f:4e:df:
48:4b:bf:f8:2a:f1:02:90:ed:e8:cd:0a:f6:8b:63:76:40:e0:
1b:a0:6c:90:c0:ad:9c:67:6d:24:60:7f:18:0a:08:fb:d1:6a:
e1:5c:ab:43:c4:eb:b5:78:2f:3d:1a:c4:9d:da:a6:a7:a8:f6:
24:ea:c6:01:33:77:e6:67:0a:44:66:1e:51:12:f6:3e:09:5c:
8d:5e:91:98:78:5f:08:58:ed:a3:26:6b:06:1b:c8:82:92:8f:
77:64:da:57:e3:2a:d4:66:46:08:12:53:5d:2a:8b:7c:77:19:
ae:60:b2:eb:e7:8b:e2:e3:57:db:d2:0a:70:9f:b3:a9:3c:e5:
ac:06:7b:b9:51:40:d5:23:d6:c0:b0:d1:71:7c:84:87:bd:ce:
f0:e9:cc:27:ff:59:91:50:5d:6c:6f:ea:4a:ca:d9:dc:64:d4:
d1:e7:e6:d1:29:e3:e8:34:c6:3c:a0:ee:cf:1a:fe:00:4e:3f:
4d:85:e3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:56:37 2024 by rpki-client on console-ams.rpki-client.org