Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Nz9t_EuuWVzdVu7zPRTHuAgNeBQ.roa
File: Nz9t_EuuWVzdVu7zPRTHuAgNeBQ.roa (raw, json)
Hash identifier: sddrCSeEF8giOLKE1lszelKF536Dwz9As3VDjb/uDW4=
Subject key identifier: 37:3F:6D:FC:4B:AE:59:5C:DD:56:EE:F3:3D:14:C7:B8:08:0D:78:14
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018CC42568A984A0880D664D03AC6E3598EB
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Nz9t_EuuWVzdVu7zPRTHuAgNeBQ.roa
Signing time: Mon 01 Jan 2024 08:30:35 +0000
ROA not before: Mon 01 Jan 2024 08:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205212
IP address blocks: 193.34.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:68:a9:84:a0:88:0d:66:4d:03:ac:6e:35:98:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 08:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=373f6dfc4bae595cdd56eef33d14c7b8080d7814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a4:ad:10:51:ba:f9:d7:12:74:fa:c8:fe:04:
e3:7b:29:31:74:a7:18:ac:aa:e0:9e:a8:ae:b7:e8:
b1:d3:50:bc:7d:52:36:04:a1:b3:3a:79:7f:44:12:
28:f9:23:fa:c7:6d:b8:08:bb:b4:10:06:1f:ce:4c:
8e:78:72:b9:87:43:e0:7d:9f:f5:99:8e:18:27:35:
e8:5e:25:e7:05:49:df:a5:e4:54:a7:98:ad:14:a7:
9f:5d:91:4f:00:a9:a1:bf:71:bf:53:f1:dc:d2:88:
99:42:de:76:bd:de:44:3d:29:13:fc:2d:59:2e:2a:
41:26:52:b9:d0:c1:d0:30:f8:f1:71:5b:28:95:8d:
ca:64:35:c2:4d:89:e7:5d:d0:ef:8f:a0:f3:af:1c:
3b:6e:f4:b0:96:bd:0d:ff:eb:9d:a4:a6:13:98:b3:
21:18:34:3b:6e:92:72:00:7f:96:0d:1e:e5:ae:57:
a0:37:fa:23:06:61:c3:af:51:fa:cc:5b:81:ad:c0:
3c:fb:ea:a7:19:41:2a:8f:9d:28:ce:a8:e6:b3:3a:
bb:fd:0d:75:0d:45:f1:71:36:df:97:7f:7a:8c:b2:
75:78:6f:76:40:0b:f7:2d:80:78:f6:ba:1d:19:dd:
83:49:e4:6d:e3:39:c2:aa:72:25:5f:7b:9a:49:a4:
00:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3F:6D:FC:4B:AE:59:5C:DD:56:EE:F3:3D:14:C7:B8:08:0D:78:14
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Nz9t_EuuWVzdVu7zPRTHuAgNeBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.76.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:02:46:a3:e7:ee:fc:f0:3e:37:bb:f8:eb:71:f2:5f:1e:97:
98:39:6e:e9:c9:df:1b:0e:95:da:71:b6:d1:4d:3c:63:e5:8b:
d4:a6:f8:af:17:71:76:0c:0c:85:c9:4c:bf:4a:c0:17:89:49:
32:fa:51:18:7c:2f:f4:e1:5f:59:a7:93:0d:83:84:f6:35:bf:
04:41:c7:3c:8f:ff:6e:a9:39:3b:e5:15:1a:cb:1a:ee:c8:c5:
57:d0:e4:f6:4a:b9:7f:87:e3:6b:a4:68:1b:85:0a:ef:b5:a1:
57:4b:69:e5:d4:f2:d1:54:3b:89:f2:8e:f1:ba:21:ad:23:a5:
20:2a:67:91:ac:10:8e:24:32:97:ca:78:3d:a0:24:ea:43:0f:
05:4d:7c:ba:4e:e0:92:13:5c:67:18:a2:76:02:14:48:a5:2f:
a7:64:12:97:f7:67:34:d7:91:9b:00:72:38:18:9e:92:cb:a9:
cf:7a:0a:a0:ad:ed:1a:34:49:80:8d:7c:62:98:48:7e:3e:fc:
3b:10:80:76:b9:b6:7b:29:42:7c:95:af:21:d5:f0:0e:20:42:
9c:ca:bf:8d:e1:9b:03:19:df:a7:da:76:2a:c2:bf:d7:7e:cf:
fd:df:ca:5d:81:20:73:ff:e5:1b:9a:3a:f0:1e:9c:c5:e6:e5:
1e:05:5c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:59:06 2024 by rpki-client on console-fra.rpki-client.org