Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/NENTcyirxpS18KWMaJ4ppkv3kkU.roa
File: NENTcyirxpS18KWMaJ4ppkv3kkU.roa (raw, json)
Hash identifier: aXE49s2ylPFFgLFqGZRGP9jML1Wlh1OaMcSBkwgg5tQ=
Subject key identifier: 34:43:53:73:28:AB:C6:94:B5:F0:A5:8C:68:9E:29:A6:4B:F7:92:45
Certificate issuer: /CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Certificate serial: 018CC94E4E798412C351851D4331BA5501FF
Authority key identifier: 11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/NENTcyirxpS18KWMaJ4ppkv3kkU.roa
Signing time: Tue 02 Jan 2024 08:33:21 +0000
ROA not before: Tue 02 Jan 2024 08:33:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 185.232.206.0/24 maxlen: 24
185.239.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:4e:79:84:12:c3:51:85:1d:43:31:ba:55:01:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Validity
Not Before: Jan 2 08:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3443537328abc694b5f0a58c689e29a64bf79245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:db:41:7d:76:aa:1a:1f:45:41:fc:f8:fd:
6f:0e:b3:67:96:41:78:83:36:61:a2:78:6e:5b:9f:
de:64:35:e9:9f:24:89:f2:1a:4f:21:9e:e9:62:1e:
23:27:b5:7f:7f:12:11:97:a6:48:61:c3:8d:ed:73:
85:5e:e8:43:a1:6f:67:1c:9e:0d:95:67:37:00:1c:
97:22:df:0f:6c:00:51:99:41:a8:85:3d:eb:fa:82:
4c:25:48:47:85:25:9c:1d:e1:21:86:ff:c6:41:f9:
04:12:c2:a0:ad:f6:e3:a3:1b:8f:2f:ff:5b:e0:0b:
ac:b4:8f:df:41:52:f2:e4:65:fd:68:19:5f:0c:92:
eb:35:c9:c0:34:0c:1b:fd:f0:2d:ff:b9:74:6c:3f:
63:50:f3:03:dd:19:3f:6d:2e:6e:d3:9b:95:8e:57:
c0:72:23:8c:78:e2:15:01:78:2d:79:f3:55:64:b9:
76:4a:2a:a0:77:f9:6e:1c:a0:4e:76:5a:77:72:a2:
6e:dd:47:c6:29:07:c7:7c:76:4b:1a:a9:16:6a:51:
0a:77:37:1c:c1:af:8a:e0:21:7a:34:e6:70:72:8b:
05:be:e6:fe:94:10:df:c0:f1:07:4c:e3:4e:98:07:
bb:16:31:02:2a:cf:f5:1c:e0:df:38:c4:97:92:e0:
70:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:43:53:73:28:AB:C6:94:B5:F0:A5:8C:68:9E:29:A6:4B:F7:92:45
X509v3 Authority Key Identifier:
keyid:11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/NENTcyirxpS18KWMaJ4ppkv3kkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.206.0/24
185.239.140.0/24
Signature Algorithm: sha256WithRSAEncryption
96:92:8b:bb:f2:86:a5:c6:7e:13:65:3a:82:24:1e:ea:cf:61:
44:0d:7d:68:28:40:66:36:d3:6c:d5:1a:89:c9:69:f9:65:8e:
48:8c:1a:3e:c0:7a:c9:ef:51:4b:1d:1a:a2:6f:66:41:47:88:
48:f3:c5:1a:9a:23:92:1d:09:b7:2b:fd:32:48:df:c5:6a:a8:
d8:f1:87:54:4b:f9:b7:fd:73:6f:cb:83:30:d2:2a:a7:b6:d6:
42:98:5d:be:85:0c:04:b8:35:e6:5b:bf:4b:3e:91:ab:94:35:
78:16:5b:b6:e8:9b:54:9e:8b:d0:d0:d8:23:07:7c:dd:57:ff:
ac:b6:80:8e:41:e9:9a:7b:2a:b6:03:7a:27:d0:d0:fa:85:b6:
29:c1:8f:5d:a0:05:35:2c:01:34:14:97:55:11:2d:5e:fe:a4:
aa:2b:69:b2:6e:64:3b:c1:79:8e:68:a6:a8:46:76:63:7d:53:
a4:64:3b:4d:50:45:37:56:15:9c:3a:4a:4b:c3:73:00:6b:14:
24:3d:2c:a3:08:a5:59:aa:8f:e8:7c:30:73:c1:dc:93:9c:84:
57:74:d9:b8:e3:64:46:77:72:7f:93:c7:50:0b:d6:27:c5:59:
c6:5f:15:b4:b4:27:7b:4b:1e:7c:11:89:a3:d5:15:be:10:d0:
72:b1:2e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 10:00:34 2024 by rpki-client on console-ams.rpki-client.org