Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/NC2Dx_jz3fLuTHLKWC0SCKLOLWU.roa
File: NC2Dx_jz3fLuTHLKWC0SCKLOLWU.roa (raw, json)
Hash identifier: cUgSk48eMtT2pLjqYlCI8azmUGPYfnFobjTz9wf/JyM=
Subject key identifier: 34:2D:83:C7:F8:F3:DD:F2:EE:4C:72:CA:58:2D:12:08:A2:CE:2D:65
Certificate issuer: /CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Certificate serial: 018CCA2984B16721D3F7BE1A9482A014E61D
Authority key identifier: E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/NC2Dx_jz3fLuTHLKWC0SCKLOLWU.roa
Signing time: Tue 02 Jan 2024 12:32:47 +0000
ROA not before: Tue 02 Jan 2024 12:32:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34564
IP address blocks: 194.126.228.0/24 maxlen: 24
2001:67c:2310::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:84:b1:67:21:d3:f7:be:1a:94:82:a0:14:e6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Validity
Not Before: Jan 2 12:32:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=342d83c7f8f3ddf2ee4c72ca582d1208a2ce2d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:81:02:ab:37:fd:e5:6f:02:ee:e7:59:e2:
04:23:5f:c5:51:c3:c7:73:23:9a:f5:2e:0b:dd:c1:
55:a1:48:7a:eb:96:ab:9c:1a:81:b0:2a:a1:3c:60:
e4:e2:da:41:9e:1d:b5:1d:e3:a4:78:7f:6b:ae:8c:
0c:94:99:1c:64:3d:66:0b:ae:37:c0:23:94:64:e3:
49:e5:78:cc:54:39:9d:bd:29:43:d1:d3:8e:4a:3e:
7e:21:7d:ed:fb:78:a8:4a:b0:e4:c6:1e:4d:ca:fd:
d5:89:e1:e8:77:19:df:62:a5:6c:ad:ce:5b:b1:c9:
63:92:fd:76:b5:1f:c9:25:fc:f4:01:04:42:24:b1:
fb:d9:b3:8c:b8:83:0c:3d:43:d4:c2:e0:76:ba:65:
7f:8f:12:4e:20:1a:49:30:73:3c:cc:4c:15:91:30:
c9:dd:35:d0:71:6b:ff:23:5f:63:c0:67:fc:62:9a:
c9:c9:89:3b:13:d0:37:66:57:8d:fd:b9:fa:11:a2:
b9:f8:bc:ea:37:66:fc:d1:b6:9a:38:7e:30:c5:08:
51:1d:bc:ff:92:37:2d:17:54:13:c9:ac:68:89:00:
e9:33:15:aa:24:92:ab:4f:a4:8c:71:d8:b6:ad:4e:
da:a2:5f:ba:19:01:d3:82:7c:e7:85:29:1d:a0:2a:
32:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2D:83:C7:F8:F3:DD:F2:EE:4C:72:CA:58:2D:12:08:A2:CE:2D:65
X509v3 Authority Key Identifier:
keyid:E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/NC2Dx_jz3fLuTHLKWC0SCKLOLWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.228.0/24
IPv6:
2001:67c:2310::/48
Signature Algorithm: sha256WithRSAEncryption
4f:b6:d0:95:76:42:81:08:f4:85:74:1f:90:2c:3a:bb:08:59:
bb:5f:b8:02:29:57:24:03:13:f7:5c:3a:ab:8f:ac:aa:8b:52:
58:a7:55:f8:f5:9f:dd:43:09:3d:10:a0:7a:89:c1:b6:d0:ea:
bd:de:11:5f:7a:48:a2:61:60:ae:f2:8c:04:f6:6d:03:6c:0d:
bc:68:44:70:c9:20:4e:a9:9f:52:7e:24:5e:34:e5:9f:17:b3:
b5:a0:29:13:e2:5c:a5:b9:11:3d:da:76:52:11:00:ff:a9:7f:
d2:fb:f0:b1:67:80:ab:c4:62:aa:9e:0a:f0:9b:b9:2a:05:34:
22:e0:18:b8:09:21:b1:02:04:cc:66:38:bc:51:fd:6d:fe:f3:
c9:80:90:8f:30:e3:d0:f2:73:c6:0f:dc:0e:5e:d4:99:21:47:
99:be:8d:b4:a2:a2:5c:ec:d9:06:59:17:4d:dc:c5:00:45:bf:
58:28:1a:e6:fa:04:a7:10:a9:c4:4e:f5:d4:1f:8d:54:46:9c:
2f:da:30:45:a9:55:14:8f:e7:a2:a9:7e:1a:42:e8:c7:17:f1:
6f:08:8c:0c:1f:00:4c:65:a6:82:a1:51:57:0d:10:8d:0b:6a:
8b:0f:02:2a:da:5c:cc:1d:6f:18:e3:34:f2:e5:76:98:c1:0a:
4f:0c:f9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:40:14 2024 by rpki-client on console-fra.rpki-client.org