Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/NLca1YP1iE6dkYY8YvZyLbdtrVQ.roa
File: NLca1YP1iE6dkYY8YvZyLbdtrVQ.roa (raw, json)
Hash identifier: yvBjM6R9XL/LenDuipAmrcwz38ok60QZ5IkS8bWFG1Y=
Subject key identifier: 34:B7:1A:D5:83:F5:88:4E:9D:91:86:3C:62:F6:72:2D:B7:6D:AD:54
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649DFDA771DAB229613853326614BB0
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/NLca1YP1iE6dkYY8YvZyLbdtrVQ.roa
Signing time: Mon 01 Jan 2024 18:29:39 +0000
ROA not before: Mon 01 Jan 2024 18:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51383
IP address blocks: 195.34.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:df:da:77:1d:ab:22:96:13:85:33:26:61:4b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34b71ad583f5884e9d91863c62f6722db76dad54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:30:0a:38:09:2a:5c:e7:ea:26:88:e0:54:50:
3c:f1:e2:32:61:53:91:23:61:38:2c:f6:0c:65:98:
84:ad:b8:78:3d:89:28:ae:c3:ad:9b:0f:2f:b7:a3:
ea:65:0b:fa:5b:ac:c4:8d:50:06:c9:99:e7:38:fd:
12:04:bd:d1:29:58:28:b4:11:f1:27:58:00:11:f8:
00:7d:b7:88:02:5e:53:fa:1b:0a:bc:c1:30:79:f8:
0d:97:8d:99:65:b3:70:98:56:c7:19:33:4c:32:21:
93:a8:91:38:f7:03:5e:2e:0a:89:e2:2e:df:84:b5:
2a:f2:5a:20:70:c4:0d:8a:d9:54:fd:87:46:1e:68:
4a:02:a4:83:36:f6:83:f4:fc:d8:cc:17:f2:94:e1:
ad:6b:4b:46:e7:50:e0:65:dc:e7:9b:c6:e3:a2:c6:
e1:6b:c2:82:aa:6a:2a:4b:13:55:07:bf:62:fe:f9:
fb:dc:00:bf:a3:b8:de:50:f5:4c:08:53:33:7e:b8:
4a:ff:f7:49:cd:1d:aa:4e:65:3d:ca:bf:0a:73:e1:
91:d2:a9:87:2f:82:2f:09:4b:87:b0:f3:38:78:be:
c9:c4:65:12:95:db:a4:b9:e1:b4:8c:2d:01:42:84:
3e:a5:0c:b1:9b:4b:16:50:2c:4b:f8:63:d1:1b:14:
1f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B7:1A:D5:83:F5:88:4E:9D:91:86:3C:62:F6:72:2D:B7:6D:AD:54
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/NLca1YP1iE6dkYY8YvZyLbdtrVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.34.97.0/24
Signature Algorithm: sha256WithRSAEncryption
48:d6:f4:a8:3f:d3:c7:6d:77:dc:3b:9d:f5:d2:47:27:57:98:
3a:95:4c:88:bb:18:0a:3e:30:f7:bb:f3:70:d5:ee:c9:fe:21:
50:a5:f0:1d:6b:69:4e:9a:8a:87:b9:bd:b9:96:60:f9:6e:83:
95:10:2f:c4:72:33:ba:84:c6:29:5f:55:dd:6b:c5:95:cf:68:
cb:9a:21:05:9d:48:11:a0:13:22:d3:bb:ce:60:18:b9:7c:3d:
13:5a:cf:e5:f2:4f:cf:df:09:58:ce:fe:c3:ed:10:e4:15:58:
82:66:21:5d:8d:f9:4e:4c:14:03:bb:2c:a3:a6:16:9c:b0:c5:
5a:21:b2:94:3f:94:16:bd:bc:13:c7:c7:3a:d6:b3:ca:15:3a:
6c:4d:31:5a:8f:59:d2:14:b0:16:58:93:6f:65:ab:c1:7c:0e:
bb:df:ae:94:1c:d5:60:c5:0f:fc:9d:c4:21:2b:84:9a:3b:37:
9c:96:e0:fe:81:8e:8b:4b:86:76:b6:4c:32:f9:b0:c9:85:91:
b9:08:37:d4:0b:57:e5:65:af:9c:82:c4:9c:95:ce:4c:57:05:
68:54:95:f7:c5:9c:68:df:b0:85:de:33:44:27:21:73:d7:c4:
71:f1:d6:99:d5:85:5c:5a:81:c3:2d:96:f8:b3:43:ba:dc:5b:
df:84:25:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:28:50 2024 by rpki-client on console-ams.rpki-client.org