Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NhvVfB5wfH_QCW0b3gwFu7xUjvo.roa
File: NhvVfB5wfH_QCW0b3gwFu7xUjvo.roa (raw, json)
Hash identifier: WYMU0/zJz/j5QgXT7BrJok2dKFBmM9+K1X8Knj9j6Rw=
Subject key identifier: 36:1B:D5:7C:1E:70:7C:7F:D0:09:6D:1B:DE:0C:05:BB:BC:54:8E:FA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193214DDA6F9FB9A004C659D4FBDF8D7F1B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NhvVfB5wfH_QCW0b3gwFu7xUjvo.roa
Signing time: Tue 12 Nov 2024 16:56:10 +0000
ROA not before: Tue 12 Nov 2024 16:56:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13335
IP address blocks: 94.156.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:21:4d:da:6f:9f:b9:a0:04:c6:59:d4:fb:df:8d:7f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 12 16:56:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=361bd57c1e707c7fd0096d1bde0c05bbbc548efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:9f:42:19:15:b1:f4:12:e2:be:d0:af:5c:
f8:8d:a5:5c:3d:fd:59:33:7d:81:8d:aa:9c:be:f4:
4a:92:37:df:2b:d3:ce:8d:26:db:d4:e9:c9:88:0a:
ff:76:60:35:f7:e6:af:21:fa:31:0c:d8:bd:0a:98:
25:4e:8f:27:9f:fb:68:f3:4c:2f:39:2c:10:c1:d8:
35:13:25:69:7f:bf:d8:f6:73:17:7e:40:b1:70:6d:
98:1a:1e:20:13:bb:b8:14:58:7f:c5:95:b6:43:73:
39:ff:4e:53:1e:de:df:8f:73:54:53:f4:98:ea:5b:
2d:99:a2:b2:c4:a6:41:2b:54:a1:c7:58:e3:89:0d:
c9:fa:fb:21:f6:16:59:e6:78:49:79:05:e6:7a:17:
f0:e8:c1:0a:20:7d:7a:5a:59:b8:f7:96:9f:b4:2f:
16:9f:3b:d5:ca:c3:bf:e8:cd:4c:5f:ab:d0:98:03:
b7:27:03:19:e0:45:b9:75:00:ac:5b:09:76:e0:a0:
41:6c:d3:fb:f6:1d:4e:5a:94:ca:9c:ef:53:41:a3:
7b:61:2f:a4:52:ed:77:73:b8:00:e5:06:1d:1c:e4:
47:ba:69:a1:62:1b:72:8d:8e:5f:18:82:e4:54:f5:
48:4f:87:d8:f7:f6:c9:5f:be:80:ce:2a:9b:1d:b2:
dc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1B:D5:7C:1E:70:7C:7F:D0:09:6D:1B:DE:0C:05:BB:BC:54:8E:FA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NhvVfB5wfH_QCW0b3gwFu7xUjvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.10.0/24
Signature Algorithm: sha256WithRSAEncryption
36:96:f0:13:8c:f4:5c:fc:c5:4a:b8:1a:ef:53:93:4c:77:2c:
d1:00:f7:d0:5f:01:38:68:a9:aa:fe:dc:03:8c:bb:6e:38:8c:
f7:0c:2e:40:8d:3e:1d:bd:95:04:4d:2c:d3:fa:c0:d7:a7:40:
0e:cb:77:0c:c6:e8:16:ea:19:35:dc:68:ed:12:c8:bf:1a:fa:
f1:81:7c:8e:04:82:19:3f:73:fb:11:12:d3:28:0b:f4:b4:6b:
fb:9d:72:5c:90:49:aa:17:cc:df:2c:70:3c:f5:83:c1:3c:44:
3b:5f:43:bf:9d:fe:2d:3b:bd:42:46:6c:9c:eb:16:e4:ee:e2:
f3:7e:5a:f9:6e:df:bd:82:c3:e6:4d:af:c5:7f:d0:a3:cd:f0:
71:02:1a:0a:c1:5c:3d:f9:e6:0f:6f:f6:7d:ba:96:29:56:6e:
00:af:e2:d0:09:43:b2:ad:b4:ea:f8:16:09:d9:af:6e:94:40:
1e:09:cc:2e:10:eb:e5:1e:ed:a7:2c:c5:bb:41:fd:bf:5c:f1:
e2:bd:a4:3c:d2:33:6d:03:d0:a2:cb:54:24:2f:77:f5:e6:ea:
73:38:e6:31:4b:f3:73:b3:69:96:fa:45:5f:79:be:b3:c6:40:
15:e1:b2:0e:b7:77:f4:5f:f9:26:74:04:cd:60:5c:62:a4:f8:
d7:23:40:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:15:16 2024 by rpki-client on console-ams.rpki-client.org