Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/nf3kTtmW6X3cuF_2GYeycOPymVA.roa
File: nf3kTtmW6X3cuF_2GYeycOPymVA.roa (raw, json)
Hash identifier: 0U4VsVcIaE16csD+Gi0lqwAZyfOV94enmNdJnl8sVR8=
Subject key identifier: 9D:FD:E4:4E:D9:96:E9:7D:DC:B8:5F:F6:19:87:B2:70:E3:F2:99:50
Certificate issuer: /CN=321ec194107843848cd36330232b5f6a43791db4
Certificate serial: 018FA63639F1A918924AAD580C149D6BF343
Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/nf3kTtmW6X3cuF_2GYeycOPymVA.roa
Signing time: Thu 23 May 2024 16:08:42 +0000
ROA not before: Thu 23 May 2024 16:08:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5089
IP address blocks: 194.101.120.0/22 maxlen: 22
194.227.208.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a6:36:39:f1:a9:18:92:4a:ad:58:0c:14:9d:6b:f3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec194107843848cd36330232b5f6a43791db4
Validity
Not Before: May 23 16:08:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9dfde44ed996e97ddcb85ff61987b270e3f29950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ab:d7:9a:0a:9e:33:f2:2e:54:b0:a1:38:5b:
33:9f:85:4e:a0:4c:8c:ab:9d:9a:a4:7e:29:18:13:
82:b1:5e:8b:85:37:52:94:3c:13:4b:b4:2a:6d:2e:
eb:e6:40:43:67:c0:16:bb:69:15:90:1c:24:07:70:
1d:2c:54:db:95:8e:54:fd:7f:80:3f:4a:f9:ac:09:
ae:27:47:87:d1:8b:78:e3:6d:e9:54:c6:5c:33:19:
b8:7a:3c:bd:fa:da:97:f0:11:90:ff:27:06:df:79:
e3:ee:18:c8:14:c0:f8:b7:98:3e:56:d4:38:10:29:
8f:83:18:bf:fa:c6:e6:50:2e:ae:b6:07:ac:11:e7:
ee:bc:f0:ba:32:fe:d9:3e:34:78:53:f2:ef:6b:bb:
3f:6d:34:7a:9a:df:db:14:cf:90:08:d3:ae:4c:34:
b0:74:a6:c4:76:d6:27:74:09:69:61:7d:1c:3a:a1:
92:79:90:f5:e2:09:c3:8e:35:2f:9a:e5:45:47:04:
ce:21:a2:dc:02:96:6d:01:b3:75:b6:92:09:89:ee:
da:51:d6:d6:0c:0e:11:0d:70:27:c9:db:ef:08:9f:
d2:a5:47:5d:31:f0:9b:2f:1c:37:1d:b8:29:96:99:
6d:4e:76:e1:e9:5f:97:42:bd:72:be:8e:04:b3:be:
6d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FD:E4:4E:D9:96:E9:7D:DC:B8:5F:F6:19:87:B2:70:E3:F2:99:50
X509v3 Authority Key Identifier:
keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/nf3kTtmW6X3cuF_2GYeycOPymVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.101.120.0/22
194.227.208.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:a0:09:06:69:5b:cc:2d:50:65:36:24:cf:4e:c6:0d:2b:23:
e5:1d:e3:ae:d4:53:a1:83:62:a5:42:df:90:e5:04:6c:73:0a:
6e:a5:e5:c8:bd:eb:72:cf:6c:9c:3a:30:f5:6f:63:4c:25:10:
1b:da:bf:2c:7c:b0:64:72:55:2a:ac:4c:66:fb:f9:d9:c5:e4:
2b:13:37:01:15:58:75:98:9a:76:8a:a4:8f:3b:66:f5:bd:dc:
aa:70:39:1d:fc:72:83:3b:7e:5b:bb:11:c0:20:3e:e6:86:55:
8a:ae:34:2c:77:30:bb:0f:97:36:04:e7:cb:cf:1f:5f:4a:7b:
2a:98:1c:a7:c4:e2:ac:fb:f3:5f:55:b0:95:a9:a4:b0:e3:d7:
f5:ec:0c:61:d8:63:54:44:b6:42:86:a9:14:68:39:c0:41:ea:
b4:c5:66:36:f2:6a:c5:11:ef:76:e8:9d:9a:34:b3:a9:fd:ea:
9a:6e:07:b4:29:30:42:f9:95:47:79:d0:62:9c:0e:e0:49:94:
f9:24:59:1c:db:cc:01:47:52:a1:cc:4f:8b:64:ab:c2:73:ef:
e4:3e:f5:e6:17:f6:c8:c8:27:51:24:90:19:61:08:38:c7:63:
45:83:a7:92:bb:9a:38:d1:56:d8:9c:f8:56:50:f1:27:29:5a:
12:65:1b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 10:37:41 2024 by rpki-client on console-fra.rpki-client.org