Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/NcvZI8Wlp2KZ7g-WnNHnX7hC0_o.roa
File: NcvZI8Wlp2KZ7g-WnNHnX7hC0_o.roa (raw, json)
Hash identifier: XPIHrJYf5DjzLmVQcQrjlw8BuqRzjmRT+DkC9dzqFL0=
Subject key identifier: 35:CB:D9:23:C5:A5:A7:62:99:EE:0F:96:9C:D1:E7:5F:B8:42:D3:FA
Certificate issuer: /CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Certificate serial: 018CC42454C781D15D9DE0AC2179BF836405
Authority key identifier: 9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/NcvZI8Wlp2KZ7g-WnNHnX7hC0_o.roa
Signing time: Mon 01 Jan 2024 08:29:24 +0000
ROA not before: Mon 01 Jan 2024 08:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30882
IP address blocks: 79.171.240.0/24 maxlen: 24
79.171.244.0/24 maxlen: 24
79.171.241.0/24 maxlen: 24
79.171.245.0/24 maxlen: 24
79.171.242.0/24 maxlen: 24
79.171.246.0/23 maxlen: 23
79.171.246.0/24 maxlen: 24
79.171.243.0/24 maxlen: 24
79.171.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:54:c7:81:d1:5d:9d:e0:ac:21:79:bf:83:64:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Validity
Not Before: Jan 1 08:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35cbd923c5a5a76299ee0f969cd1e75fb842d3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2d:d6:7c:00:61:3b:41:03:cf:12:9a:22:0c:
1c:a6:90:f9:f2:69:80:59:e6:d6:b4:bf:4b:98:e7:
cb:ca:2c:88:e9:66:1e:c9:20:ec:1d:fd:20:67:bb:
1a:71:ff:ef:26:94:f1:24:69:e2:cc:86:c4:32:7b:
63:7e:ac:86:df:0b:64:ae:ac:f1:3a:fb:e2:6c:44:
73:7f:cd:17:b9:40:a7:53:21:e6:54:4a:ef:80:40:
35:94:7b:cd:4e:50:e1:b8:5f:57:40:8d:cb:da:91:
65:13:c1:c9:96:f8:d4:67:28:af:e0:c4:61:e4:dc:
44:aa:f4:f5:89:fb:50:a0:24:51:47:89:53:73:ea:
2d:e4:97:af:b9:05:e0:c7:3f:6b:2a:3a:64:57:96:
2a:92:50:52:9e:3a:3b:d9:14:68:a0:e6:66:53:6f:
3c:f7:b3:a9:7d:48:89:f0:fa:92:d8:68:54:92:27:
65:36:f4:59:a3:f8:7b:e5:a2:43:a9:39:85:b4:73:
98:55:ef:74:76:cc:18:9d:0f:5b:8b:4c:81:26:5a:
eb:17:88:f6:21:f5:46:0a:eb:f3:44:7a:5a:d0:6f:
78:b6:85:6c:98:b6:2c:de:28:0c:93:1a:f0:bf:0a:
54:37:ee:3c:c9:bc:1a:a6:96:bc:59:53:c6:d4:b3:
75:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CB:D9:23:C5:A5:A7:62:99:EE:0F:96:9C:D1:E7:5F:B8:42:D3:FA
X509v3 Authority Key Identifier:
keyid:9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/NcvZI8Wlp2KZ7g-WnNHnX7hC0_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.240.0/21
Signature Algorithm: sha256WithRSAEncryption
11:00:4f:ad:8b:24:27:8e:cf:15:52:2e:44:99:66:3c:27:b9:
e5:be:1a:5a:e0:5a:b0:72:0d:05:1c:a0:9c:d5:cf:0f:5b:6c:
a3:8b:19:45:2f:6a:33:b6:ed:63:7e:0f:32:7c:52:ee:6d:e0:
d4:5a:c2:91:5a:7f:83:27:64:95:6c:80:88:6c:28:8b:2f:f0:
ec:cf:00:5d:8c:6a:41:c5:f8:ce:db:3c:2c:ad:b8:b2:3a:bc:
ea:c5:61:1f:86:9e:ef:3c:9d:a2:65:dd:89:83:69:7f:f7:96:
16:83:f9:01:41:6c:1f:f1:2c:a5:ec:2a:22:2b:ad:3e:e6:ee:
db:90:a2:69:95:4c:a9:87:4e:c8:8a:3b:97:04:79:97:53:e3:
bc:72:cf:4e:ae:27:02:6b:9a:2a:08:b9:85:d1:88:83:22:a9:
19:b9:d6:90:c9:b2:23:26:71:6e:c5:b2:a5:f5:34:f3:7e:d1:
f0:d5:e3:4f:4c:34:44:89:91:37:80:fc:23:83:23:75:dc:39:
38:fd:9b:ce:23:02:b4:32:51:01:68:10:73:a6:ca:09:8a:d7:
d2:5d:0d:84:4a:d2:d9:c9:ff:3c:d5:c0:25:5e:74:07:fc:6e:
bf:9d:5f:cc:75:63:16:d3:97:98:69:3d:4e:f9:c8:df:2d:96:
6f:04:6a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 10:07:23 2024 by rpki-client on console-fra.rpki-client.org