Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Nptk-jWkrTO_AEfsTHcsFnmRCkw.roa
File: Nptk-jWkrTO_AEfsTHcsFnmRCkw.roa (raw, json)
Hash identifier: HiRdSWi6NfYcUmzIHHqX8yvv8JzQvsGIBd3KnfcLQtg=
Subject key identifier: 36:9B:64:FA:35:A4:AD:33:BF:00:47:EC:4C:77:2C:16:79:91:0A:4C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019266482F4809976A51B86165970E96730D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Nptk-jWkrTO_AEfsTHcsFnmRCkw.roa
Signing time: Mon 07 Oct 2024 09:20:59 +0000
ROA not before: Mon 07 Oct 2024 09:20:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207557
IP address blocks: 45.141.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:66:48:2f:48:09:97:6a:51:b8:61:65:97:0e:96:73:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 7 09:20:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=369b64fa35a4ad33bf0047ec4c772c1679910a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f6:de:90:51:bd:46:6f:ee:93:d9:d4:c3:24:
a7:3a:9e:e5:46:21:b9:75:e7:06:bb:f7:32:2a:3e:
da:1f:1d:6b:78:77:a2:bb:f3:90:f7:8d:9e:40:08:
76:92:39:86:a6:c2:02:8a:41:7e:3b:ed:c8:16:b1:
a1:6c:20:de:66:80:db:6e:b1:33:79:81:2e:c6:03:
1a:2b:b7:5d:68:af:75:0b:f2:ec:9d:9e:6d:46:d1:
28:3d:71:e4:85:e2:f2:3c:02:58:10:57:57:5c:ae:
30:4c:38:63:c0:af:5b:bd:58:3a:33:db:91:0d:f5:
f1:8f:12:d3:70:96:55:f7:9f:b6:e6:2f:45:92:df:
9d:cf:28:d0:51:90:eb:4d:85:3f:4b:d0:ef:53:73:
d7:90:d4:74:dc:42:f3:ce:76:ef:2f:09:70:db:1a:
fd:00:39:57:ea:d7:c7:e8:1d:da:98:05:0f:ca:02:
23:2c:b6:90:f8:a6:37:0f:fa:dd:34:fe:f8:79:92:
a2:36:07:d4:4c:d8:aa:70:63:3b:34:68:3c:f8:5b:
4e:09:75:32:22:33:fd:7f:03:de:3f:2e:9e:66:dd:
31:69:de:3b:66:38:fc:b6:46:cd:b6:5d:8d:60:f0:
3b:58:5e:43:a8:9f:00:fc:3c:12:15:93:c1:44:bb:
bc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9B:64:FA:35:A4:AD:33:BF:00:47:EC:4C:77:2C:16:79:91:0A:4C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Nptk-jWkrTO_AEfsTHcsFnmRCkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.159.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:bc:1b:36:74:54:27:46:22:a2:36:07:47:68:af:5a:1c:1a:
39:2e:e1:18:e3:cb:ad:4e:5b:33:db:59:a8:83:7e:a4:24:cd:
b1:6a:fb:90:2c:4a:43:3b:38:eb:ba:6a:76:b8:3a:23:5e:70:
4d:60:e3:be:61:24:31:08:6a:04:01:76:44:1d:0a:ac:5e:4b:
0d:47:4d:cb:9c:9b:c4:bb:10:02:27:f9:83:c1:8c:d3:51:6b:
41:ad:e9:c5:ff:92:7b:cc:2d:91:a2:4f:ea:0c:fd:8c:3c:c1:
79:33:24:4f:b2:f9:bc:64:e5:ae:3a:5d:05:a0:fd:da:e3:3b:
0c:bd:68:5a:cd:dc:68:0c:e7:10:fc:29:ba:9a:b9:26:ae:05:
99:b2:3c:4b:59:97:6f:f1:05:4d:fa:57:9d:92:42:47:dc:5e:
cc:03:d7:79:12:16:1a:80:f6:d2:af:88:2c:a1:52:0b:e8:71:
51:02:f6:e8:d2:72:e1:13:cb:30:0c:ac:97:b3:6a:16:1f:99:
3b:62:e2:89:84:83:d2:6a:4a:24:7f:09:f5:7a:6d:e5:7a:f2:
b8:11:51:63:eb:7f:21:59:8e:1e:0d:46:c9:74:a9:eb:06:38:
84:02:52:80:7b:29:7f:7f:7a:45:27:71:74:ef:6d:82:bb:73:
3e:91:2a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:05:56 2024 by rpki-client on console-fra.rpki-client.org