Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/ncoBLA1HDUTqidFJmrj7JUto9Aw.roa
File: ncoBLA1HDUTqidFJmrj7JUto9Aw.roa (raw, json)
Hash identifier: 9FMViztroUpmlun2KH3GUKCRJy1G+1yGs8243QRCjI8=
Subject key identifier: 9D:CA:01:2C:0D:47:0D:44:EA:89:D1:49:9A:B8:FB:25:4B:68:F4:0C
Certificate issuer: /CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Certificate serial: 018CC4251E96AEC46AA0D464FFF76AD45145
Authority key identifier: 1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/ncoBLA1HDUTqidFJmrj7JUto9Aw.roa
Signing time: Mon 01 Jan 2024 08:30:16 +0000
ROA not before: Mon 01 Jan 2024 08:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9153
IP address blocks: 193.168.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 01:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:1e:96:ae:c4:6a:a0:d4:64:ff:f7:6a:d4:51:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Validity
Not Before: Jan 1 08:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9dca012c0d470d44ea89d1499ab8fb254b68f40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:91:70:65:d2:1e:b2:4e:95:c5:a1:f2:70:c0:
62:77:6d:4d:67:f5:77:4d:12:aa:68:4c:81:46:c7:
d1:ac:82:77:a6:c9:38:06:35:b5:b3:8b:19:86:bf:
01:1b:04:cd:e4:34:c8:43:e6:6c:9f:48:4f:7f:38:
86:12:1e:79:ae:6e:b8:85:d7:b5:c8:b5:fd:6a:a8:
14:a7:a0:dc:50:53:d5:7e:5f:fb:48:6b:37:3a:c9:
c5:0e:14:05:da:af:e2:ac:96:31:e7:8e:40:05:ed:
4f:1e:9f:a5:06:74:f0:51:0b:3d:a9:18:5c:df:87:
f8:0d:49:b2:69:6e:4c:ea:58:27:be:cf:3f:10:11:
76:98:8d:e9:38:eb:df:50:13:fb:17:8c:05:b0:fb:
04:2d:0a:0d:52:12:68:8e:27:4c:e3:d2:f6:1e:81:
02:e3:7a:e4:fc:6f:f6:f3:a4:4d:b2:17:eb:e3:e6:
e4:b4:5f:cb:6d:e1:90:10:82:09:b3:44:ea:42:0e:
f6:c1:d8:dd:eb:f1:33:4a:93:ca:ec:54:8c:1e:8b:
d9:22:fb:e5:e8:89:76:03:db:76:a1:3e:1d:06:fa:
5d:91:3b:e9:65:ad:e1:5a:73:3d:d6:78:06:bb:69:
2c:a4:87:fa:27:f2:ee:b0:f9:58:9e:b5:b2:6b:f2:
70:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CA:01:2C:0D:47:0D:44:EA:89:D1:49:9A:B8:FB:25:4B:68:F4:0C
X509v3 Authority Key Identifier:
keyid:1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/ncoBLA1HDUTqidFJmrj7JUto9Aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.132.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:16:3c:ba:6b:3c:77:ee:e8:28:3c:7b:68:ee:89:2e:42:f2:
e6:b2:36:8d:43:06:cf:81:6a:82:ec:0c:d8:7b:12:1d:b5:23:
85:22:dc:40:0c:01:ea:79:0a:5c:68:94:09:2d:92:91:ef:e3:
ed:34:1a:b4:71:36:eb:1f:fc:0a:99:b0:c7:2d:7e:a4:21:80:
13:43:40:7b:40:2d:b3:c2:64:89:ca:e7:6c:22:17:b6:30:dc:
0d:1d:fc:e5:51:d1:48:4a:6c:55:e3:49:e3:3d:ed:3d:c3:b9:
a9:22:a5:95:e9:7d:92:52:05:b8:7f:30:33:ed:3e:92:56:51:
dc:6c:cc:26:72:63:67:c4:38:3a:51:53:73:5b:4e:93:ef:26:
65:4d:f6:ac:60:8b:5a:c4:1c:84:ce:ea:ec:40:9c:d0:49:1d:
f7:dd:6f:3d:b0:39:9a:cf:c2:23:13:f0:5e:12:49:2b:e3:64:
bc:45:26:0b:ac:de:e0:a5:df:5a:05:6f:d6:27:d2:12:e1:6e:
9a:6a:08:6d:0d:ed:78:1f:eb:21:dd:6f:76:9f:d5:34:64:99:
ca:9f:4f:4b:f4:87:4e:b3:55:dd:ec:eb:cf:a4:e0:18:61:0b:
72:30:af:48:e7:6e:57:ac:5f:9d:c5:46:2c:84:21:e8:df:85:
f5:46:2b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 05:38:58 2024 by rpki-client on console-ams.rpki-client.org