Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/NirsDoTKFuQlSUkZ-YfzZHiPB6E.roa
File: NirsDoTKFuQlSUkZ-YfzZHiPB6E.roa (raw, json)
Hash identifier: lkb/T0rTBB/rfnIrnAy367jb+dpzT2Lm1rzySFB/8gQ=
Subject key identifier: 36:2A:EC:0E:84:CA:16:E4:25:49:49:19:F9:87:F3:64:78:8F:07:A1
Certificate issuer: /CN=d4bbed63091439823ed391a472536c0fcafe8957
Certificate serial: 018CC3494F71CFCADF5F1BD938E8B7BEBFD5
Authority key identifier: D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/NirsDoTKFuQlSUkZ-YfzZHiPB6E.roa
Signing time: Mon 01 Jan 2024 04:30:10 +0000
ROA not before: Mon 01 Jan 2024 04:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29266
IP address blocks: 159.20.0.0/21 maxlen: 21
195.85.253.0/24 maxlen: 24
195.137.194.0/23 maxlen: 23
2a03:2180::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:4f:71:cf:ca:df:5f:1b:d9:38:e8:b7:be:bf:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4bbed63091439823ed391a472536c0fcafe8957
Validity
Not Before: Jan 1 04:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=362aec0e84ca16e425494919f987f364788f07a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:a7:77:d6:3c:2e:4f:8d:63:99:8e:40:8f:
e8:b4:15:01:88:aa:ea:5c:41:0c:00:2c:0c:93:2a:
9f:78:4f:c9:e6:77:43:66:7a:cb:4a:aa:2e:27:87:
00:d8:ca:36:67:b1:99:3c:56:5e:ad:06:1b:06:8e:
0b:29:51:37:1e:9c:c0:82:e7:18:b9:da:0c:d9:92:
8b:9d:96:4c:20:90:38:1f:54:a7:e5:b0:f5:17:dc:
27:05:98:2c:f4:2c:c8:e6:f5:83:52:33:5d:53:6b:
da:8f:d1:b7:35:7d:66:4d:16:19:64:57:6f:6e:d1:
ee:ba:02:08:71:0d:02:1e:49:f1:5b:f9:20:79:8a:
3b:cf:89:8a:80:c0:9b:89:a2:c0:a7:e0:f6:83:cd:
70:cb:cf:7c:49:ba:5e:38:73:44:64:7e:12:59:34:
0f:be:bd:df:ed:35:ea:87:f5:bb:9d:a3:05:0b:06:
58:52:37:97:ec:4f:50:02:d1:93:73:25:6c:13:b5:
88:8f:01:a8:61:5b:19:2e:29:7b:14:97:c5:4e:49:
6a:87:ac:bc:aa:cf:bd:4a:6c:e7:1d:c8:03:72:87:
fb:b3:72:5b:19:82:aa:db:fe:15:d2:59:da:7c:97:
ab:a8:32:99:e3:7f:ec:33:cf:16:5a:c4:6a:94:b1:
19:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2A:EC:0E:84:CA:16:E4:25:49:49:19:F9:87:F3:64:78:8F:07:A1
X509v3 Authority Key Identifier:
keyid:D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/NirsDoTKFuQlSUkZ-YfzZHiPB6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.20.0.0/21
195.85.253.0/24
195.137.194.0/23
IPv6:
2a03:2180::/32
Signature Algorithm: sha256WithRSAEncryption
a1:e7:eb:98:9f:3a:9f:7a:c7:1b:28:1d:33:ae:3a:a0:9f:b6:
3e:90:24:2e:d6:4a:4d:28:89:32:dc:d5:00:06:56:0e:3a:2e:
e2:fe:db:d0:2e:42:35:f2:14:4c:0c:92:3c:8a:bf:ad:76:53:
59:be:d4:0c:ef:d9:ce:91:99:09:fc:59:a9:32:7e:13:e0:19:
00:a9:d0:b8:37:d4:54:3e:ff:70:62:2f:3e:f4:fd:6c:bf:10:
95:55:ba:d2:d9:46:01:e4:d6:df:4b:ca:58:dc:39:27:d6:50:
b2:c4:69:fe:81:1d:37:db:06:67:f7:39:d5:1f:6c:cb:a3:60:
5b:8f:94:6f:f4:b8:4f:1b:bb:68:71:1a:f2:4c:51:57:91:6c:
cc:c8:c3:87:76:de:55:2a:6d:ab:8e:38:30:ab:b4:45:d5:e4:
37:9a:cb:11:c8:e7:38:5f:3a:01:bf:9c:57:0b:e6:28:a9:87:
3f:fb:33:53:a2:f6:91:54:79:31:14:5e:fe:4d:14:78:c7:f7:
f4:5e:9b:89:f6:24:ef:80:52:14:b3:97:a9:cf:d6:80:f4:5d:
80:fb:19:87:a0:b9:0a:7f:a4:50:54:5b:b9:5c:03:7a:6f:8c:
4f:0e:de:69:24:d8:64:11:9d:d7:30:7a:65:ae:c4:e9:ca:7c:
09:b3:8f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 12:19:48 2024 by rpki-client on console-fra.rpki-client.org