Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/NGwXGNXFfQaXunVZTwT4rJiSSTg.roa
File: NGwXGNXFfQaXunVZTwT4rJiSSTg.roa (raw, json)
Hash identifier: zDEORFAzsu+HeiNEwz8zIgjVvkI1QWLYWkvNFCzFo0E=
Subject key identifier: 34:6C:17:18:D5:C5:7D:06:97:BA:75:59:4F:04:F8:AC:98:92:49:38
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CFC5384269E8128587BC842BCF63023AF
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/NGwXGNXFfQaXunVZTwT4rJiSSTg.roa
Signing time: Fri 12 Jan 2024 06:19:40 +0000
ROA not before: Fri 12 Jan 2024 06:19:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34723
IP address blocks: 81.180.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fc:53:84:26:9e:81:28:58:7b:c8:42:bc:f6:30:23:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 12 06:19:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=346c1718d5c57d0697ba75594f04f8ac98924938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:04:96:dd:10:0a:03:19:e5:e0:42:5c:bf:b3:
9a:44:aa:42:7e:29:6e:6b:ee:d6:c5:6f:77:9d:53:
e9:bf:55:d5:cc:ea:73:61:ad:5b:b7:95:98:d5:fb:
3b:bc:87:53:cb:2b:ed:69:20:60:d5:64:2b:d9:99:
c1:36:66:75:00:4b:47:22:2c:af:ec:5c:ee:f4:56:
cd:9f:d1:f1:52:2b:f8:fe:c8:5c:2c:58:b5:e2:bb:
91:b4:de:37:5d:76:b8:b0:8a:7c:90:9f:ce:c5:7f:
e2:c1:7f:ba:33:a7:d3:e5:dd:68:b4:5e:1e:b8:6d:
31:8d:46:4a:e8:40:f8:82:fa:f9:37:6e:a9:0f:7b:
05:23:24:6d:74:50:5a:54:81:fb:20:d2:1a:09:3f:
f5:8e:64:90:10:14:47:a9:af:a6:9b:18:14:15:ed:
dc:bb:1b:11:dd:ab:9f:2c:a6:08:d0:69:92:98:b5:
24:1c:b6:35:c8:b7:3d:e0:44:4a:23:78:cf:61:67:
5d:7f:82:59:cf:1c:80:d1:e3:15:66:21:5f:2b:35:
2b:a4:e9:67:6b:04:78:b3:73:ac:9f:4e:f8:0b:e8:
fd:6c:97:ca:00:ae:37:d2:5a:ee:7c:73:ed:0c:62:
0c:5d:ab:34:ff:bc:08:d5:45:bd:7a:1a:c1:cd:67:
3b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6C:17:18:D5:C5:7D:06:97:BA:75:59:4F:04:F8:AC:98:92:49:38
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/NGwXGNXFfQaXunVZTwT4rJiSSTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.24.0/24
Signature Algorithm: sha256WithRSAEncryption
09:a6:17:b8:8d:fc:c9:69:84:7f:69:cb:6c:3f:ec:5b:43:ab:
14:8e:41:8b:b6:4e:17:51:5d:8f:3c:64:8c:10:38:3b:10:89:
72:2d:cf:c1:ed:25:10:b1:f3:55:6e:fc:7d:6c:7e:69:4a:e1:
7a:5d:65:88:98:16:71:fa:08:1c:1f:0d:ac:91:21:8d:7f:8f:
ac:84:b6:9e:4a:ce:c3:17:cd:f0:2b:e0:71:4d:09:40:79:38:
58:30:5c:f3:50:85:29:6d:61:a0:82:f6:58:b8:9f:7b:b2:77:
b4:d0:28:49:da:37:02:74:52:54:15:4c:a6:60:74:c9:00:08:
88:98:53:e7:03:f4:9b:27:d2:9c:49:4c:4e:94:6a:8f:f3:8a:
d9:43:e5:f6:46:49:41:70:f9:6b:87:6d:d5:5c:25:a9:46:3c:
78:17:b5:01:71:a3:c6:56:78:a7:1d:78:7f:c6:23:76:75:fc:
07:c1:e4:83:3b:41:e8:3e:83:7a:96:fe:42:ba:0c:97:77:3d:
a1:7f:7e:db:da:39:c7:9d:80:4f:30:55:1f:d8:7d:0d:f3:44:
c3:88:78:3b:78:bf:ca:66:e7:f8:d3:d8:65:73:91:9c:ac:ff:
99:5b:62:b7:da:0c:cf:60:65:5d:66:d6:a1:9a:46:dc:ae:c8:
1c:ef:7c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 06:51:15 2024 by rpki-client on console-fra.rpki-client.org