Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/nvkzdavijW348d7Xc0F4OjvXmHg.roa
File: nvkzdavijW348d7Xc0F4OjvXmHg.roa (raw, json)
Hash identifier: 9Ts1UL6Jffy6m/WLN3vnaRgS9Re8nZTkXVuxHCq+3a4=
Subject key identifier: 9E:F9:33:75:AB:E2:8D:6D:F8:F1:DE:D7:73:41:78:3A:3B:D7:98:78
Certificate issuer: /CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Certificate serial: 018F2A17A232FE4C1E5C19EC5378ED55CD12
Authority key identifier: 74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/nvkzdavijW348d7Xc0F4OjvXmHg.roa
Signing time: Mon 29 Apr 2024 13:42:22 +0000
ROA not before: Mon 29 Apr 2024 13:42:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212190
IP address blocks: 45.90.239.0/24 maxlen: 24
213.232.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2a:17:a2:32:fe:4c:1e:5c:19:ec:53:78:ed:55:cd:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Validity
Not Before: Apr 29 13:42:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ef93375abe28d6df8f1ded77341783a3bd79878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:ce:3b:ff:e0:60:c3:c1:2c:50:bd:e2:f4:
17:d8:e5:2c:be:73:0e:81:2b:48:ae:ea:03:28:88:
b4:d0:3a:41:33:73:75:09:40:43:a5:04:df:dc:de:
0f:9d:4f:12:bf:6f:98:d0:c0:60:7b:2d:23:fa:a0:
13:9a:76:49:fe:61:b8:f1:44:9c:bb:74:16:64:e7:
83:9c:2e:e6:0a:2f:75:17:60:09:66:08:8f:98:ac:
f0:a6:4b:e9:8e:e6:5b:ee:39:83:34:f0:ca:ee:b0:
77:70:e2:97:c3:39:98:dd:db:0f:f1:35:af:67:2c:
48:d4:c8:6f:75:d3:6b:8d:1c:54:6a:47:c4:19:b3:
df:1c:8f:9d:81:f6:61:e6:b6:85:4f:56:2f:a2:89:
e5:1f:75:b0:09:b8:c8:a5:85:d9:8b:7a:d0:0e:00:
5c:5b:a3:4e:93:98:1f:97:8b:8e:81:e2:2a:a6:3d:
92:df:a0:0d:2d:ed:68:ed:ff:8a:52:61:4a:57:8f:
da:f9:3f:7a:7d:ff:79:30:f7:5d:ba:89:32:9b:5d:
31:2c:d2:22:d4:6f:c9:99:b1:bb:b2:81:a3:f7:4a:
cd:c1:73:33:6c:f9:e5:80:2c:45:b4:27:2f:c8:1e:
85:1f:4d:43:ae:7c:f2:5c:74:2d:3c:d1:5d:9c:6d:
46:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F9:33:75:AB:E2:8D:6D:F8:F1:DE:D7:73:41:78:3A:3B:D7:98:78
X509v3 Authority Key Identifier:
keyid:74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/nvkzdavijW348d7Xc0F4OjvXmHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.239.0/24
213.232.217.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:ca:0b:4c:ea:b5:fd:22:d4:60:17:10:0c:4b:a8:5d:02:e3:
60:b9:90:fe:55:e4:c6:ef:7d:d7:63:3a:e3:30:d8:8c:d0:5c:
da:20:a0:48:49:c2:6d:bd:31:85:e0:93:fd:b2:cb:8c:b6:05:
a6:60:6e:77:fb:81:e8:8b:d7:23:f3:b9:9c:ba:17:91:fb:e6:
6b:5a:56:c6:3e:88:3d:38:d3:97:83:8f:c4:b3:16:e7:32:e7:
ef:12:9c:64:5d:3c:78:b0:13:a4:c8:f8:09:6d:91:26:ef:5a:
c6:af:10:4a:e8:8a:3a:e5:7a:f9:ad:60:7b:1a:f1:86:de:68:
2a:97:01:ba:64:1f:71:ed:6a:0f:06:07:78:d9:6a:0e:68:fd:
de:67:ab:41:9c:d3:b9:5e:79:05:2f:96:c3:ec:eb:29:e3:2e:
74:d3:5d:4e:2a:b4:bf:1b:9a:46:35:4c:ea:f2:bb:03:51:6c:
b5:a1:18:72:84:67:bb:a3:66:6b:49:73:33:e5:72:a3:a9:71:
46:cc:60:71:57:74:50:cc:fa:98:47:af:fe:0e:cb:fd:07:cf:
06:a4:db:da:a6:bb:a2:1a:b4:2d:cb:96:2b:82:43:36:b4:88:
6c:c5:a2:a0:e8:1f:10:42:92:0c:43:0e:83:21:3f:36:ba:50:
c6:81:13:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:24:35 2024 by rpki-client on console-fra.rpki-client.org