Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/N7NxbKNaihUbQtHmz0VijiTsQdY.roa
File: N7NxbKNaihUbQtHmz0VijiTsQdY.roa (raw, json)
Hash identifier: +uhTpOUmr6QiegUWdVqBAVhCJuYP465LlPdFzthf4g0=
Subject key identifier: 37:B3:71:6C:A3:5A:8A:15:1B:42:D1:E6:CF:45:62:8E:24:EC:41:D6
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0191E4EB91B2FC4D5F3F489FE3393679A1B1
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/N7NxbKNaihUbQtHmz0VijiTsQdY.roa
Signing time: Thu 12 Sep 2024 06:28:48 +0000
ROA not before: Thu 12 Sep 2024 06:28:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 273177
IP address blocks: 193.160.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e4:eb:91:b2:fc:4d:5f:3f:48:9f:e3:39:36:79:a1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Sep 12 06:28:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37b3716ca35a8a151b42d1e6cf45628e24ec41d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:41:48:69:69:3c:16:73:62:37:6e:92:d4:cc:
06:2a:2b:17:12:f2:07:5a:71:2b:b2:d6:75:6f:ab:
44:8c:87:88:20:88:9f:09:f5:f1:1a:29:a0:60:56:
4e:9c:1a:ef:9e:65:16:91:f2:91:31:d7:9f:06:75:
60:36:f1:ea:93:19:71:47:4e:ba:1c:f1:9a:c7:7e:
b8:6d:0d:51:af:5f:d5:82:e3:6c:fe:c4:33:6e:e8:
03:9a:cd:c2:89:89:6f:98:dc:f9:56:9d:7a:5f:8c:
0f:9a:c3:0d:27:b0:5e:f0:96:03:d9:40:49:0a:a7:
ca:24:a8:37:ec:13:6a:36:ed:cd:66:73:12:0c:93:
f1:25:8e:03:b2:f3:b3:12:ce:67:ad:ce:42:68:31:
39:71:9e:8f:6f:bb:4b:08:c8:b6:6a:60:eb:d9:c5:
97:29:d7:e9:8f:c1:8a:24:c7:4a:71:34:98:ac:05:
94:51:c9:60:db:97:ea:86:65:c6:65:19:e9:26:ff:
e8:78:90:c1:8e:32:20:21:03:75:d4:2b:cd:43:46:
e8:df:f8:45:a0:56:c7:d1:0c:f4:03:9e:b9:64:72:
88:14:75:16:9d:68:39:b0:87:db:bf:f2:e5:f3:0c:
bf:f5:db:5c:4b:5f:9a:8b:ad:5c:6a:f4:c4:ee:93:
c2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B3:71:6C:A3:5A:8A:15:1B:42:D1:E6:CF:45:62:8E:24:EC:41:D6
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/N7NxbKNaihUbQtHmz0VijiTsQdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.220.0/24
Signature Algorithm: sha256WithRSAEncryption
25:7c:fb:b0:8c:b4:1c:ca:aa:47:74:8e:60:d1:70:20:cf:53:
65:51:87:71:44:c0:8f:1b:4d:69:07:8c:88:d7:3d:82:6a:db:
94:31:e2:bb:94:0f:b9:d0:88:4f:93:b7:fe:03:e6:8d:4e:91:
56:07:1f:78:c6:76:33:d7:e9:95:c4:eb:54:cd:e2:11:96:12:
8b:23:93:16:43:9e:97:24:99:c7:df:7a:b1:87:9c:ba:61:49:
c3:94:93:09:de:4b:5d:1e:79:65:18:69:ba:9e:a2:3e:87:26:
bc:12:b0:e6:ea:5a:de:96:36:e8:76:ae:6f:ea:03:49:d0:87:
ab:67:00:bb:63:78:c6:d2:e9:9b:25:5b:a1:99:8a:b2:e3:0d:
03:53:61:91:be:11:a7:f3:7c:77:86:88:8a:0b:a1:b1:b6:6e:
9f:ee:aa:56:83:02:d6:20:ca:fe:0d:e0:af:12:67:d0:da:f8:
9e:96:54:65:01:49:e7:bb:26:be:c7:06:7c:ad:4f:51:2e:c1:
d2:ca:17:46:4d:d2:c7:fb:d9:42:05:c9:e7:d4:50:5c:7e:be:
4e:c8:53:e0:aa:c2:0d:01:4a:03:4a:a8:b1:d3:94:a9:ea:62:
d4:c5:c2:2c:80:8c:67:3c:03:2c:90:2a:ab:64:14:71:b3:f3:
5a:92:0b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:04:33 2024 by rpki-client on console-fra.rpki-client.org