Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/NwCDoIFxTTk2fLEsqKW33ongkgo.roa
File: NwCDoIFxTTk2fLEsqKW33ongkgo.roa (raw, json)
Hash identifier: GdhTM3meDB6aoUeDg/l+/db2J5LMgQefdkzpHbMHEJM=
Subject key identifier: 37:00:83:A0:81:71:4D:39:36:7C:B1:2C:A8:A5:B7:DE:89:E0:92:0A
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0191C8A15880EDF52F76EC03188B2B2750A7
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/NwCDoIFxTTk2fLEsqKW33ongkgo.roa
Signing time: Fri 06 Sep 2024 18:38:22 +0000
ROA not before: Fri 06 Sep 2024 18:38:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57013
IP address blocks: 91.231.187.0/24 maxlen: 24
92.63.181.0/24 maxlen: 24
109.196.105.0/24 maxlen: 24
109.196.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c8:a1:58:80:ed:f5:2f:76:ec:03:18:8b:2b:27:50:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Sep 6 18:38:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=370083a081714d39367cb12ca8a5b7de89e0920a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:68:0d:d7:be:1a:a7:23:9b:3b:d9:7c:c6:
f8:ac:89:dc:08:70:70:7a:0c:c3:ef:75:92:1c:4a:
72:25:a7:08:1c:3b:3e:5d:7d:48:3e:31:2e:a4:6d:
52:db:c3:ca:8d:f5:83:d7:d3:c8:5c:cb:2d:29:7c:
7d:3f:15:9e:fc:fd:b8:6b:f1:34:74:d8:a7:ec:99:
a4:d9:a0:38:cc:2d:ee:4e:f0:1b:7f:7d:31:51:8f:
02:20:9d:3d:e7:ea:c6:a7:01:6d:a5:45:6a:92:2f:
8d:d7:56:e7:72:8c:b3:74:2f:5d:66:86:1b:e0:e3:
23:5a:68:77:a2:c0:97:da:32:2a:ac:93:cd:30:e7:
b1:87:cd:25:b7:20:3b:b3:11:31:0d:f9:70:f2:ad:
b9:7a:a6:e2:82:f5:f8:8b:5e:f9:56:68:ba:c3:55:
62:c2:76:06:c1:9e:25:a7:9f:4e:06:ce:8d:13:ac:
9d:1d:af:d1:b9:1e:23:b8:85:e2:4a:5c:06:49:ce:
36:a2:67:8e:9e:06:72:a8:aa:dd:e9:c9:c9:4c:2d:
9f:04:95:f6:d5:95:48:6c:44:ee:92:14:f8:8d:38:
8f:5c:36:61:7f:7a:0c:0c:d2:e3:2f:4e:67:2c:89:
65:02:e1:e4:e0:ae:62:78:90:ad:d1:54:c3:7a:d5:
f0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:00:83:A0:81:71:4D:39:36:7C:B1:2C:A8:A5:B7:DE:89:E0:92:0A
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/NwCDoIFxTTk2fLEsqKW33ongkgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.187.0/24
92.63.181.0/24
109.196.105.0/24
109.196.110.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:a1:91:52:1b:8b:74:34:e2:cf:e4:82:ab:e8:71:cc:2e:d7:
2d:46:c6:3d:d8:e3:26:7f:34:c9:93:e3:88:72:8f:0a:af:ca:
2f:6e:e5:57:51:2f:e4:73:80:40:b2:64:49:95:89:b5:26:99:
43:7b:aa:fc:97:c2:70:69:68:6c:50:f0:cd:7d:df:d9:46:e4:
b7:e1:40:9e:70:ff:89:f1:7d:ef:e5:6a:4e:38:aa:75:d7:bf:
34:5d:11:ee:86:47:ac:3c:65:38:95:c5:95:e4:d5:fa:1a:fb:
4c:aa:70:9f:9e:00:6c:8d:54:75:b4:9d:dd:1b:a4:5b:66:04:
51:70:b8:0d:c5:c3:8b:da:bf:c4:65:3f:6a:7f:48:05:2a:20:
de:c1:5e:60:ed:7e:fb:a5:48:6c:ad:92:7c:47:b7:2f:98:8c:
c1:b9:d8:73:da:3b:30:84:b9:56:4a:6c:48:55:8c:06:f0:a3:
2a:f1:48:82:91:93:53:01:2f:cd:0f:53:13:d6:da:9e:37:a5:
ee:29:d9:2f:ab:0c:f7:69:05:94:05:89:60:ef:36:2c:c3:b2:
92:bf:5d:82:08:f2:49:6d:c8:7b:99:d4:f9:27:fb:c3:c6:e2:
e3:6e:53:46:91:1b:1c:57:b1:68:4a:35:e7:e0:3c:d8:20:95:
c3:33:4d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:21:29 2024 by rpki-client on console-fra.rpki-client.org