Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Nu1HoUMRCcMn7TPU9UUoyKKHpJ4.roa
File: Nu1HoUMRCcMn7TPU9UUoyKKHpJ4.roa (raw, json)
Hash identifier: C41toSzu+9CQ768DMLOqSDzuq2ocjEwFmRhoW1ax+ec=
Subject key identifier: 36:ED:47:A1:43:11:09:C3:27:ED:33:D4:F5:45:28:C8:A2:87:A4:9E
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018CCA29C81BAC74B82E664FC27F23F2B8F3
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Nu1HoUMRCcMn7TPU9UUoyKKHpJ4.roa
Signing time: Tue 02 Jan 2024 12:33:04 +0000
ROA not before: Tue 02 Jan 2024 12:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206065
IP address blocks: 213.176.68.0/22 maxlen: 24
213.176.88.0/22 maxlen: 24
213.176.112.0/21 maxlen: 24
213.176.20.0/22 maxlen: 24
213.176.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:c8:1b:ac:74:b8:2e:66:4f:c2:7f:23:f2:b8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 12:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36ed47a1431109c327ed33d4f54528c8a287a49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:7c:83:96:e2:72:d7:3a:ad:10:61:b2:bb:
84:75:b2:b2:f9:73:3b:b6:d3:83:6c:70:cb:bf:be:
55:5d:22:1e:25:cc:a5:5e:c3:86:49:29:fc:63:e0:
4f:0b:d8:25:1b:7a:a1:10:27:d7:71:81:74:0e:3e:
ef:36:69:b8:b9:e4:14:da:11:67:11:73:df:2a:6f:
48:eb:02:8d:bf:c5:c6:fb:9b:25:9f:74:74:eb:50:
19:a2:45:3d:fc:cb:e2:0b:72:89:f9:65:a2:5e:6b:
c8:83:04:e5:04:c2:47:16:f2:6b:9e:2e:02:c1:58:
97:67:df:c8:b7:ba:bc:b8:1c:1f:8e:63:c6:15:fa:
50:49:9d:99:f6:23:2b:ca:c3:b0:f2:62:9c:7c:76:
ac:bc:0a:50:94:67:e8:7d:56:53:c4:72:5e:91:7e:
75:52:9f:99:1e:14:e9:2e:5c:bd:7c:40:83:67:01:
dd:67:42:e2:63:12:fa:55:2b:39:e4:dc:d2:37:56:
28:bc:fd:fa:55:ae:9a:25:a8:39:02:f5:21:b1:d4:
83:ee:50:e1:3d:d9:87:e2:df:94:b1:88:43:27:4a:
0e:77:b0:18:05:41:ab:6d:1e:1c:1b:98:33:88:35:
96:92:ea:b3:17:12:48:6f:91:0f:31:c7:1d:ed:4a:
1c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:ED:47:A1:43:11:09:C3:27:ED:33:D4:F5:45:28:C8:A2:87:A4:9E
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Nu1HoUMRCcMn7TPU9UUoyKKHpJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.20.0-213.176.27.255
213.176.68.0/22
213.176.88.0/22
213.176.112.0/21
Signature Algorithm: sha256WithRSAEncryption
61:bb:fd:ab:cc:2b:ae:51:81:7a:82:35:25:1a:ab:53:49:ac:
4b:20:1d:d8:ce:45:a1:2e:3d:38:ce:16:02:f9:48:37:82:6c:
dd:ce:22:0d:ef:f7:ac:62:0b:3e:35:9d:99:69:c2:2a:6e:19:
5a:1d:3c:92:c9:26:0b:a5:7c:9e:c8:86:ff:9f:c2:98:ea:57:
96:90:b7:4b:18:60:cc:7d:39:fc:c9:9f:07:a8:74:a9:62:f8:
6c:0f:b4:a2:85:44:bd:f9:2b:42:33:82:af:3d:f8:e2:a1:58:
54:55:ed:97:7c:a0:4f:33:5f:d7:96:db:d2:20:e1:6d:4c:b3:
02:de:99:36:b1:60:e8:d1:12:54:54:06:56:4e:65:d9:27:ee:
5e:a5:55:07:ae:6c:0b:69:82:86:8e:0c:4f:e4:eb:f8:6b:03:
cb:81:4e:d2:64:41:b2:9e:b1:c6:35:cc:f9:87:70:2c:0f:3e:
b2:4b:d0:fa:e7:e8:41:74:ad:a2:38:ab:4c:fd:18:c4:48:b6:
21:20:c8:c8:ab:d7:cc:59:fa:06:78:7f:e6:48:79:f6:8f:21:
99:fd:f4:1e:c6:aa:9b:e6:c7:60:3f:c8:ce:01:29:c4:11:96:
55:66:ef:fc:cf:50:59:bc:70:f5:7a:3a:be:8d:fd:58:ba:8d:
90:b6:73:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:04:46 2024 by rpki-client on console-fra.rpki-client.org