Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/Noh9nd5LznmdLINSjsecFonRUjU.roa
File: Noh9nd5LznmdLINSjsecFonRUjU.roa (raw, json)
Hash identifier: yv8Lfo3WOsCYqXmqQM4c4XBRYVRHRl/otv79wk8f98I=
Subject key identifier: 36:88:7D:9D:DE:4B:CE:79:9D:2C:83:52:8E:C7:9C:16:89:D1:52:35
Certificate issuer: /CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Certificate serial: 018CC64B5F3512EEBB1022D38BCB572AB469
Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/Noh9nd5LznmdLINSjsecFonRUjU.roa
Signing time: Mon 01 Jan 2024 18:31:17 +0000
ROA not before: Mon 01 Jan 2024 18:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35625
IP address blocks: 45.86.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:03:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:5f:35:12:ee:bb:10:22:d3:8b:cb:57:2a:b4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Validity
Not Before: Jan 1 18:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36887d9dde4bce799d2c83528ec79c1689d15235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c1:87:37:6f:c0:46:7b:84:1f:d1:8b:2d:76:
0b:76:07:6f:8f:58:66:db:02:23:cf:2e:bf:84:da:
f3:f8:e3:ab:a6:8c:18:e4:71:1f:19:13:9c:bf:d7:
6c:28:a0:96:1a:2e:59:1e:0e:fb:b3:24:4b:d1:b6:
87:76:a0:fd:d1:7e:2f:20:15:48:5e:cd:2f:0b:9f:
42:c1:0c:ed:5c:75:e1:35:e4:b3:bd:fe:93:0b:2f:
26:23:5a:06:a1:69:ab:f4:0c:c0:28:ea:a8:06:b1:
bb:e4:49:a8:de:bc:cc:50:a9:67:19:b1:ab:95:f9:
06:18:42:26:b6:b9:65:d5:b7:69:33:dd:d0:32:ab:
bd:b7:cb:8a:af:92:e5:c8:00:1a:f2:0d:7a:27:69:
4a:fb:60:50:99:c2:b8:a3:ec:85:66:cb:9d:f9:68:
c8:34:2f:44:54:0f:78:29:b5:1a:09:0e:58:16:79:
c8:7b:8f:0b:52:c8:28:05:0c:a9:13:d0:7e:1a:12:
6a:c1:7e:89:61:b4:f0:b5:8b:a3:24:ae:c5:1b:17:
60:2b:7b:2a:43:0d:07:0a:fe:62:b4:aa:45:41:c6:
e5:2f:68:f5:17:38:e9:cc:f1:d0:12:03:04:42:49:
e1:b3:d0:32:24:72:39:50:9a:15:c7:fd:50:bd:83:
53:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:88:7D:9D:DE:4B:CE:79:9D:2C:83:52:8E:C7:9C:16:89:D1:52:35
X509v3 Authority Key Identifier:
keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/Noh9nd5LznmdLINSjsecFonRUjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.205.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:84:83:ea:8b:a8:69:ac:ad:67:20:97:a0:57:53:70:68:48:
81:bc:68:fc:a5:a8:13:2e:82:ec:a3:ee:1a:cf:2e:bf:d5:72:
5a:88:c5:51:b0:41:b3:74:65:60:31:fc:1a:50:26:6f:10:a6:
b4:36:e9:cc:db:37:da:de:b8:87:e9:9a:a7:1c:24:46:af:d5:
16:ab:f2:df:ba:98:c6:2d:df:4f:4b:00:bf:14:29:16:f6:7b:
81:9b:c4:47:39:81:8a:af:f0:e5:4c:81:1b:c7:42:88:44:71:
ef:75:5c:e0:35:d9:5e:9d:08:5f:2f:44:f4:d3:fc:5b:3b:18:
51:e6:82:a2:5e:13:67:e3:28:a5:f0:a8:24:0b:18:7a:57:c7:
bb:e6:b0:7a:52:6f:4d:75:de:94:90:b6:1e:5c:c8:51:4e:77:
60:eb:9b:7a:df:5e:b4:b0:e2:c6:42:35:bb:45:e0:8b:68:28:
c1:d9:8c:f9:64:4f:d8:59:38:c8:d2:81:9e:84:ab:bc:4f:e8:
b2:ac:63:ad:55:c1:df:24:f2:49:42:f0:77:14:c6:01:92:74:
1a:64:23:ba:1b:ea:c8:88:73:b8:cf:4e:00:99:f9:55:b3:0a:
2c:53:50:e0:1a:02:db:5c:27:04:41:8f:9a:ba:4d:f6:02:d9:
3d:2c:03:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:58:32 2024 by rpki-client on console-ams.rpki-client.org