Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/nkDff6-8CPk0D-IruGIouNklBtA.roa
File: nkDff6-8CPk0D-IruGIouNklBtA.roa (raw, json)
Hash identifier: 4Vdz1QDFn/InWHVRWo+bLGoHRhaj5wsAcfWRZH7Q3u8=
Subject key identifier: 9E:40:DF:7F:AF:BC:08:F9:34:0F:E2:2B:B8:62:28:B8:D9:25:06:D0
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649ED0A1718127F089AABB6C6FA968B
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/nkDff6-8CPk0D-IruGIouNklBtA.roa
Signing time: Mon 01 Jan 2024 18:29:42 +0000
ROA not before: Mon 01 Jan 2024 18:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202357
IP address blocks: 78.83.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:ed:0a:17:18:12:7f:08:9a:ab:b6:c6:fa:96:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e40df7fafbc08f9340fe22bb86228b8d92506d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:9a:6f:3b:68:5e:49:08:54:5f:3c:94:b0:
62:27:2f:e4:aa:f3:06:83:e3:cf:85:44:da:09:2b:
62:50:16:ca:9c:66:2d:e1:cc:02:d4:aa:77:c6:75:
7a:d8:2c:07:5a:04:a1:09:b1:18:08:f1:3f:68:7f:
c3:da:8d:ce:9b:33:f3:4f:75:07:2f:d7:94:e9:e2:
14:be:4b:35:23:e7:f4:5c:b9:9c:93:e6:ce:68:e2:
4e:88:d6:bd:26:2b:93:75:1c:b1:5d:e1:54:ec:c7:
80:4c:80:40:57:eb:be:ab:22:7d:94:0c:6b:df:d5:
ad:04:8b:e3:f4:1e:73:66:c2:7a:ee:71:84:9a:50:
b2:35:25:13:53:ba:20:7b:95:9d:0b:2f:42:c8:7d:
a0:b1:99:9d:16:f2:9e:6f:2a:46:11:4a:51:96:13:
d2:51:3f:3c:e1:20:91:82:1c:17:9a:70:ed:20:66:
54:ed:6c:cd:c5:2c:26:81:99:cf:ad:a0:9e:22:00:
f4:aa:eb:be:c5:df:63:07:53:21:89:9d:9b:c6:13:
53:41:91:68:66:7f:c7:82:76:83:ac:22:24:13:a2:
5f:c0:34:35:28:88:50:48:b1:6b:e9:90:b0:d7:94:
c9:d5:1c:46:03:01:2c:5b:5c:3e:be:8f:c8:9f:6f:
cc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:40:DF:7F:AF:BC:08:F9:34:0F:E2:2B:B8:62:28:B8:D9:25:06:D0
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/nkDff6-8CPk0D-IruGIouNklBtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.83.234.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ab:12:fe:4c:85:88:a3:6c:31:e3:cb:49:8c:79:48:28:5d:
85:0d:fc:79:16:f0:46:ed:11:f9:58:66:c4:6f:5d:f1:fb:6e:
31:16:ce:1f:89:75:6a:62:9a:79:da:02:6b:c9:e9:4b:af:b8:
6d:4b:2f:7d:a0:b8:e3:cf:91:0a:80:43:9c:8a:8f:7d:cb:2c:
35:3b:4f:db:b4:a9:14:57:bf:96:3a:1a:f2:57:61:fc:72:84:
72:56:1b:31:85:e5:d2:b2:ef:02:ba:db:06:ba:0e:78:88:bd:
74:0d:45:56:c3:9e:bb:f4:70:bd:56:57:b9:ca:db:47:2a:18:
af:5d:54:f1:c7:b8:08:15:e1:2b:e5:d0:12:6e:b5:0e:82:a8:
ed:52:92:c8:15:71:aa:63:4a:28:4c:53:75:d6:a6:a6:c2:25:
10:0b:7f:e1:fa:f1:0e:a2:21:90:8e:fb:86:30:d0:db:41:b8:
0a:b1:ac:14:84:83:fa:cf:1f:b4:2a:08:16:71:46:b8:c1:7e:
c8:4f:6f:28:a1:0d:09:25:ed:23:cf:e1:63:da:a8:b6:22:f3:
09:c7:1c:1d:cd:29:5f:25:78:a4:07:86:30:dd:b2:1d:d5:5b:
a8:55:05:21:ed:e5:c5:87:92:4d:26:25:05:c1:4a:d7:90:f5:
6e:80:86:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:03:50 2024 by rpki-client on console-ams.rpki-client.org