Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/NQf8hNiT_SjF5dMz_hABom5zokY.roa
File: NQf8hNiT_SjF5dMz_hABom5zokY.roa (raw, json)
Hash identifier: nN5y+aN5U45lrDtJcfcpW1QvQyYWoKLd0Ay1vaTaPqg=
Subject key identifier: 35:07:FC:84:D8:93:FD:28:C5:E5:D3:33:FE:10:01:A2:6E:73:A2:46
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CC7953201C1B4AAD512C27AC91E6EB559
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/NQf8hNiT_SjF5dMz_hABom5zokY.roa
Signing time: Tue 02 Jan 2024 00:31:32 +0000
ROA not before: Tue 02 Jan 2024 00:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203727
IP address blocks: 193.233.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:32:01:c1:b4:aa:d5:12:c2:7a:c9:1e:6e:b5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 2 00:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3507fc84d893fd28c5e5d333fe1001a26e73a246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:89:71:ee:f2:80:2c:c5:67:25:5a:ac:1a:d2:
f4:c6:b2:a2:45:2f:70:41:be:a0:9d:57:d4:e0:ab:
7a:48:a8:af:bf:6e:30:cb:d4:b7:83:b6:f9:ee:af:
eb:89:28:35:1d:b3:61:5d:1e:2a:05:18:0d:e7:0e:
1c:e9:3f:33:16:00:f5:1b:7f:1e:7a:7e:6e:98:f5:
ab:2e:7e:06:3c:de:15:d1:e9:b6:02:1c:8a:d8:4f:
65:9b:62:b0:9e:3b:ec:f2:9f:a6:ef:8f:2d:6f:eb:
56:4d:fa:61:58:33:17:f6:d2:11:ed:d7:d5:b6:c1:
33:7c:9c:81:dd:cf:3a:24:3a:c1:97:6a:57:58:ea:
8b:3b:ac:e8:b7:b9:4c:0f:f4:32:91:f4:a8:5c:3c:
cb:a9:ce:bf:f0:eb:d2:6a:e6:a5:06:d9:b7:c7:74:
7f:5a:84:ab:3f:88:3e:93:11:9f:35:02:ae:7c:97:
ab:12:95:5d:e4:8d:96:b2:50:a7:d8:b9:20:80:78:
85:ce:60:3d:72:f6:5b:1d:be:7e:4e:6d:5c:76:63:
ee:ef:55:cd:74:c5:33:fa:39:11:5a:18:51:bd:c9:
38:05:14:e5:ea:1a:1b:ec:c4:32:46:d4:5f:53:84:
e4:bf:a7:d5:f2:c9:ee:2a:7c:76:61:d5:2c:61:cf:
e5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:07:FC:84:D8:93:FD:28:C5:E5:D3:33:FE:10:01:A2:6E:73:A2:46
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/NQf8hNiT_SjF5dMz_hABom5zokY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.255.0/24
Signature Algorithm: sha256WithRSAEncryption
01:8f:78:05:16:bc:92:a9:d5:75:46:43:b1:20:1a:d0:40:e9:
09:79:4c:a8:f7:7b:c7:47:af:cc:f3:97:8a:ed:d0:63:b8:51:
a2:17:a9:a1:1a:7a:51:b2:30:a3:95:de:59:9d:6c:99:e2:8c:
4a:2d:73:cd:2c:e9:8f:f1:f8:25:5a:74:d4:83:3a:94:88:67:
f5:e9:12:8a:e9:16:fb:87:0a:4f:bc:09:7f:09:41:29:9e:ac:
37:48:32:55:f6:7d:d0:21:f3:d4:07:05:be:55:09:3b:fb:d0:
5e:9a:96:4b:6f:7e:2a:a0:5a:5d:59:c6:c9:a2:73:19:2d:64:
a2:c8:c0:ee:ed:3b:6f:05:09:f0:bc:6d:f5:ad:41:90:31:3a:
e8:03:bd:6e:f0:40:c8:7a:39:12:fd:6d:b3:b7:27:0d:da:bf:
a5:f1:48:42:e2:74:33:96:6b:ec:44:b2:d6:2c:94:6c:35:92:
7c:3e:f5:d4:71:a2:b3:12:f9:4a:28:15:a9:a7:6b:ac:e5:97:
ea:97:1d:e2:4d:41:c4:60:61:2a:4a:52:36:4e:05:bd:dc:b5:
f3:4a:38:c4:c5:e3:22:e3:9d:db:15:97:78:7a:43:6a:f1:37:
6a:f8:59:a1:e2:03:e1:43:3a:11:95:83:0b:0a:67:67:1f:03:
44:6c:6f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:16:14 2024 by rpki-client on console-ams.rpki-client.org