Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/NKKBMvK4Wn5gaSQ9C08cpfQLAlo.roa
File: NKKBMvK4Wn5gaSQ9C08cpfQLAlo.roa (raw, json)
Hash identifier: GXH6ufLNbQ4eeSNsRXWhLgNtDN8+kmUWvaH/j44SaEQ=
Subject key identifier: 34:A2:81:32:F2:B8:5A:7E:60:69:24:3D:0B:4F:1C:A5:F4:0B:02:5A
Certificate issuer: /CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Certificate serial: 018CCA2B8C632D0B797D8A7C295D96E221CD
Authority key identifier: 6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/NKKBMvK4Wn5gaSQ9C08cpfQLAlo.roa
Signing time: Tue 02 Jan 2024 12:35:00 +0000
ROA not before: Tue 02 Jan 2024 12:35:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39380
IP address blocks: 91.209.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:8c:63:2d:0b:79:7d:8a:7c:29:5d:96:e2:21:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Validity
Not Before: Jan 2 12:35:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34a28132f2b85a7e6069243d0b4f1ca5f40b025a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:dc:bd:d2:f6:f6:2e:93:08:63:88:b4:88:d3:
00:16:89:72:94:59:0a:ad:a7:5c:8e:84:78:24:87:
ed:22:78:13:53:d2:72:bc:ed:14:62:61:e4:92:f7:
7b:43:9a:f1:76:40:b1:d7:89:d5:fd:05:78:2e:7f:
38:dd:40:56:71:ab:16:f1:9b:26:f6:a9:16:29:7f:
ff:e1:1a:4c:b8:7c:7b:39:54:d1:72:23:93:b5:43:
0f:e3:fd:67:a4:f9:00:e2:15:0b:ea:8f:79:c3:ac:
7a:b8:4f:44:d0:db:fe:9a:96:ef:b6:97:bd:6e:71:
37:8f:11:72:81:19:09:66:5b:02:3f:2b:56:29:1e:
c3:a7:09:58:83:59:c3:90:7b:cf:99:0e:1d:12:5f:
6d:b4:af:9b:ff:98:77:65:17:18:9a:ac:6c:b7:24:
b4:f8:8d:31:62:44:ea:5a:85:f6:9f:44:11:c2:bf:
52:1c:57:b1:86:fe:ed:32:9e:12:1d:6e:08:07:91:
d8:5a:ed:7f:d4:56:4f:40:db:d2:f0:ca:ba:5c:35:
fa:d5:48:43:fe:59:0f:25:f5:29:44:bd:95:bf:fd:
ec:28:83:cc:da:d7:f0:33:28:ca:c7:00:58:69:bc:
0d:ca:74:12:3c:b3:09:14:0a:f8:80:81:0f:bd:cf:
39:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A2:81:32:F2:B8:5A:7E:60:69:24:3D:0B:4F:1C:A5:F4:0B:02:5A
X509v3 Authority Key Identifier:
keyid:6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/NKKBMvK4Wn5gaSQ9C08cpfQLAlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.250.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:39:da:bc:20:6e:5a:4e:32:e0:8d:56:ac:4e:15:d8:ee:21:
3d:91:80:6f:f0:ff:5d:ff:cf:55:87:96:c0:3f:c2:c9:5c:8c:
a5:69:27:8b:2f:2b:ef:29:98:bb:a2:8c:ca:9a:62:0f:37:43:
76:c3:59:2f:f4:a6:ff:d1:c6:8d:02:3b:88:75:bf:80:a9:03:
84:d1:66:1c:c6:94:4c:87:c4:d5:e6:6c:c6:0a:3d:aa:9d:ac:
50:76:6f:a1:78:ec:29:3a:3e:7f:15:07:e7:06:4f:70:74:d6:
f1:7b:37:0c:2d:9b:cd:24:c6:1d:f1:11:0a:d4:98:96:7e:f3:
09:b5:6c:8b:11:5e:63:ad:70:47:48:3b:0f:c1:92:59:be:e0:
51:73:99:1b:a4:2a:8e:31:1f:ad:c9:15:58:f0:fe:ee:79:dc:
82:d8:8b:0c:30:9d:ad:82:c4:82:f2:76:47:af:6a:57:19:41:
b4:4e:dd:9a:c6:1b:e9:7e:f5:06:e2:2d:88:21:f0:6f:88:2b:
e3:46:3f:46:96:6f:4c:db:4e:b7:58:bd:7c:ab:c2:72:fc:2f:
c5:c5:44:2b:91:40:31:37:d6:a3:54:f8:92:53:ac:0c:d3:05:
bd:2a:8c:d9:84:06:5e:c3:7e:f5:2c:68:b8:30:2d:06:6d:b5:
86:e3:91:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:41:50 2024 by rpki-client on console-fra.rpki-client.org