Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/NsvT1IwWKpM5hkWkuD1DmzxTrYc.roa
File: NsvT1IwWKpM5hkWkuD1DmzxTrYc.roa (raw, json)
Hash identifier: LMayD8RwJpGtyT+wXPNoVqiazSUoEL5Siw181fDaAa4=
Subject key identifier: 36:CB:D3:D4:8C:16:2A:93:39:86:45:A4:B8:3D:43:9B:3C:53:AD:87
Certificate issuer: /CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Certificate serial: 01921D81F38D3CA6624E46D51F101781FD86
Authority key identifier: 39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/NsvT1IwWKpM5hkWkuD1DmzxTrYc.roa
Signing time: Mon 23 Sep 2024 06:11:48 +0000
ROA not before: Mon 23 Sep 2024 06:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 217.12.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1d:81:f3:8d:3c:a6:62:4e:46:d5:1f:10:17:81:fd:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Validity
Not Before: Sep 23 06:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36cbd3d48c162a93398645a4b83d439b3c53ad87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c7:d5:05:90:50:14:3c:87:72:56:77:66:16:
05:d3:81:36:e5:b3:67:04:90:9e:ea:11:70:94:98:
b8:c7:14:7c:b0:84:1f:0e:d2:b2:d4:49:29:25:40:
a6:a1:e0:ed:78:ad:99:e3:61:61:86:ae:88:fa:ad:
6d:b7:01:a3:ec:96:80:aa:2e:5d:88:79:51:9f:8b:
5a:f9:df:fc:b2:17:f0:da:30:92:ce:33:d2:2d:a2:
ac:38:66:28:b2:5a:8b:14:a9:3d:8c:aa:79:12:b9:
fc:06:59:8c:c2:b8:36:cf:9f:81:bb:7c:bb:af:61:
ea:ae:0d:7a:13:ff:fc:d6:9a:0a:5a:7a:ac:57:f6:
ca:04:25:56:c0:cf:af:a2:d3:86:6f:06:c2:d5:88:
ec:b8:eb:82:ae:f7:bf:e4:b7:6a:e5:e8:df:46:ab:
46:9a:6b:30:94:d9:90:49:2d:3e:00:ab:f9:18:f2:
8f:d2:91:12:98:2f:23:c3:b4:9e:fc:0b:d0:3d:0f:
44:f8:18:52:8a:4d:f0:68:ab:da:2b:42:d9:f3:60:
c6:5b:a8:b1:9d:12:3e:aa:98:10:18:01:2b:60:4f:
64:15:a3:dd:81:f1:23:11:a0:c2:ba:8e:68:bc:33:
aa:3c:f4:a1:3f:35:fe:54:36:d7:9e:c1:54:37:54:
c7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CB:D3:D4:8C:16:2A:93:39:86:45:A4:B8:3D:43:9B:3C:53:AD:87
X509v3 Authority Key Identifier:
keyid:39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/NsvT1IwWKpM5hkWkuD1DmzxTrYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.12.19.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:c4:2f:15:03:66:de:7f:c8:cb:57:6f:f6:37:db:7d:47:30:
24:4a:b6:fc:ed:b6:de:8b:1b:59:3d:09:a1:73:7b:07:86:93:
4a:69:91:8e:8b:32:3c:7c:dc:0a:34:ce:23:a4:0a:73:5b:fb:
23:71:67:bb:61:4b:8b:a3:77:e4:12:92:86:0b:14:60:bf:04:
24:db:da:24:0c:ab:db:9f:af:56:42:23:4a:62:b2:65:32:f1:
3e:ec:ac:eb:28:7d:e7:61:f3:c3:00:37:8c:5e:54:89:7a:34:
6c:36:1e:41:5b:6e:43:67:c8:54:62:3d:28:84:1f:a2:19:9e:
d4:61:98:17:d2:7f:00:b7:92:84:ba:5e:33:32:59:fc:20:8c:
a4:a3:5d:92:b5:ba:67:fb:6b:48:3c:e1:63:0f:da:22:1a:ea:
77:b1:5d:15:76:76:73:6a:b1:a2:03:b7:fe:bd:3c:1e:bb:d0:
80:72:19:c4:28:27:69:53:a2:d6:85:f8:19:33:31:f9:c8:b8:
24:d0:4c:20:fd:be:b8:48:62:e0:89:f2:e3:08:46:ff:3c:d5:
cc:a4:aa:ad:e3:13:37:a9:d6:05:d7:97:00:7c:26:47:e1:11:
fe:5f:2f:55:af:13:9f:d6:92:3e:cc:e6:16:fe:d2:60:2f:22:
cd:87:74:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:30:33 2024 by rpki-client on console-fra.rpki-client.org