Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/NEQMAEnuQFwP9XIceX82Z-HtL4g.roa
File: NEQMAEnuQFwP9XIceX82Z-HtL4g.roa (raw, json)
Hash identifier: Bb2O42FzrZ87N9FvbSebCZamOGIxsft+71oE8oMsRhc=
Subject key identifier: 34:44:0C:00:49:EE:40:5C:0F:F5:72:1C:79:7F:36:67:E1:ED:2F:88
Certificate issuer: /CN=5df11a180df17994e48ad331872cfd00ad9aba04
Certificate serial: 018CCA29D35C011C1D48769B302BA757CD56
Authority key identifier: 5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/NEQMAEnuQFwP9XIceX82Z-HtL4g.roa
Signing time: Tue 02 Jan 2024 12:33:07 +0000
ROA not before: Tue 02 Jan 2024 12:33:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44466
IP address blocks: 195.80.61.0/24 maxlen: 24
195.80.62.0/24 maxlen: 24
195.80.63.0/24 maxlen: 24
195.80.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:d3:5c:01:1c:1d:48:76:9b:30:2b:a7:57:cd:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df11a180df17994e48ad331872cfd00ad9aba04
Validity
Not Before: Jan 2 12:33:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34440c0049ee405c0ff5721c797f3667e1ed2f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ec:e6:dd:8a:4d:50:48:d2:3f:b5:a9:51:bd:
06:66:24:32:60:23:25:33:00:53:13:6a:42:1b:50:
5d:ad:5f:96:64:0b:5a:19:2b:43:ad:bb:d1:06:81:
d1:d1:48:5d:70:39:34:f7:5e:ed:63:6c:65:f1:15:
f0:3e:5a:4c:af:83:ef:c5:4e:84:19:11:ff:d5:8a:
b6:2f:2b:95:de:9b:06:0f:7c:2d:74:94:39:08:94:
75:89:cb:bb:e6:54:69:a9:08:30:24:07:9e:94:10:
4f:51:6b:fa:4f:c4:f3:e0:9e:40:89:e6:5b:44:9d:
b4:60:53:67:1d:28:16:c5:9e:cd:67:ca:66:c2:48:
1d:2f:21:1d:04:a5:d7:da:12:22:e6:01:f1:45:7c:
1a:1c:aa:a6:cc:e5:0e:f1:49:71:89:0f:cf:69:45:
23:30:0f:10:e9:90:89:30:9c:2b:56:9b:05:c7:c0:
66:cc:25:cf:8a:e3:b4:e1:01:b3:0a:55:43:69:3b:
86:0b:a7:5d:5d:f8:48:e7:b8:05:c7:6a:7c:88:f6:
b7:d3:80:b4:6f:e5:e0:21:57:05:c4:11:4f:c3:e8:
a6:8d:46:1e:32:e7:18:5d:68:66:71:dc:41:a0:b8:
15:b4:23:6c:87:fc:20:a5:25:a8:6a:d8:c2:9a:9a:
88:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:44:0C:00:49:EE:40:5C:0F:F5:72:1C:79:7F:36:67:E1:ED:2F:88
X509v3 Authority Key Identifier:
keyid:5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/NEQMAEnuQFwP9XIceX82Z-HtL4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.80.60.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:d8:a3:38:e8:90:58:57:a7:10:67:83:7f:58:e7:77:51:b4:
27:0d:d4:3b:65:41:76:65:53:9b:bd:9f:18:46:0d:28:15:c9:
fb:76:72:5f:19:64:2c:11:ac:9a:f2:d5:a6:15:75:1b:a4:78:
cf:83:bc:2e:36:11:95:5c:2b:55:21:28:7b:ac:40:78:59:a2:
77:f5:72:e5:4a:31:e0:a1:1f:a1:70:5d:aa:5e:40:07:14:a7:
18:9b:c6:ae:b8:52:60:e2:cd:10:95:30:0a:69:09:ca:d4:51:
bd:6e:48:f1:6c:f6:af:11:2e:d8:11:f8:bb:72:a3:63:2d:86:
8d:5c:41:50:d9:53:3b:96:fa:20:04:a3:4c:ab:39:c0:e4:7d:
68:41:90:b7:f2:8c:8a:be:54:6c:68:f6:6e:31:e6:d1:d5:5f:
95:44:61:27:e4:c6:6f:87:83:85:2a:74:55:57:b0:68:e2:57:
ea:67:b1:13:b2:15:5f:27:9f:1f:ff:f8:69:f4:92:29:70:b6:
46:06:19:85:36:9f:15:63:d1:3d:a0:2d:2f:01:7d:f4:bf:b8:
ab:75:c5:59:b3:81:23:56:5c:81:73:a3:09:a3:d5:fc:8f:40:
9a:23:27:f0:de:56:4e:67:1d:fc:e1:51:4e:17:57:39:65:15:
35:b5:1f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:57:50 2024 by rpki-client on console-fra.rpki-client.org