Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/NN3idMrc6fFxAocAQ39FBwXKahg.roa
File: NN3idMrc6fFxAocAQ39FBwXKahg.roa (raw, json)
Hash identifier: 5Bt0LicYFc8Q9aSa59/Lj2ApbR15fSi4dRjdDm33MQM=
Subject key identifier: 34:DD:E2:74:CA:DC:E9:F1:71:02:87:00:43:7F:45:07:05:CA:6A:18
Certificate issuer: /CN=e2834429775e6555e5742492286254b1da9f1903
Certificate serial: 018CC349593CB1ADF15FF45620409BC9007C
Authority key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/NN3idMrc6fFxAocAQ39FBwXKahg.roa
Signing time: Mon 01 Jan 2024 04:30:13 +0000
ROA not before: Mon 01 Jan 2024 04:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200023
IP address blocks: 146.19.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:59:3c:b1:ad:f1:5f:f4:56:20:40:9b:c9:00:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2834429775e6555e5742492286254b1da9f1903
Validity
Not Before: Jan 1 04:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34dde274cadce9f171028700437f450705ca6a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:40:a2:8d:17:ec:75:03:8a:53:a4:f4:a7:19:
8c:0f:d1:c8:29:e0:48:4d:1e:15:04:1d:6a:30:7f:
5f:48:61:87:19:59:a2:88:b6:b2:be:1b:10:ff:b8:
f2:3a:b6:8d:69:ac:38:de:74:65:b6:3a:a6:83:bb:
74:7c:1f:c7:7a:e9:b3:57:cf:57:48:fb:b3:62:5f:
7d:be:5e:19:44:a0:e0:8f:3d:6f:71:f6:a2:cf:72:
3c:42:fc:95:30:b5:32:a1:51:59:f4:7e:7a:00:df:
84:45:18:a6:cf:75:c4:ab:5c:d8:71:67:52:95:63:
01:bc:d4:9c:bb:f6:fc:9d:f8:07:55:0c:97:d8:02:
f1:38:2d:9f:81:d0:7e:e2:ff:47:48:3b:68:da:f2:
93:02:ac:e1:b6:a8:07:96:8f:18:77:28:64:60:90:
f8:87:a7:1b:fb:fb:41:9d:da:11:7b:d7:2b:a4:c7:
31:2a:55:4e:23:92:d5:c3:db:fd:50:e9:59:2d:21:
be:81:97:e3:39:9e:66:52:ce:f2:cb:1f:6c:df:02:
07:6e:d0:41:a8:76:bf:0f:37:0a:70:03:95:7b:ef:
4b:9c:93:12:19:99:4d:3d:0e:fa:54:a5:db:55:35:
92:b9:3a:47:db:f8:c7:c3:17:03:87:47:e6:7b:23:
75:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DD:E2:74:CA:DC:E9:F1:71:02:87:00:43:7F:45:07:05:CA:6A:18
X509v3 Authority Key Identifier:
keyid:E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/NN3idMrc6fFxAocAQ39FBwXKahg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.250.0/24
Signature Algorithm: sha256WithRSAEncryption
51:59:5b:16:72:40:0f:ab:54:26:99:61:96:39:a2:cd:8e:c3:
c0:a5:23:3a:31:91:91:76:96:3e:27:23:a2:a4:fc:38:c6:57:
92:8c:60:8d:39:ef:6b:6c:f9:f4:17:5c:ff:7e:37:4e:e8:28:
6e:61:94:1f:2a:3b:37:63:9d:95:53:06:48:57:92:5e:28:6e:
c3:a0:49:65:5f:c6:10:39:0b:e0:9e:62:61:4f:88:8c:53:26:
4f:7b:4e:73:19:bd:38:c2:15:e7:29:3e:05:f6:13:0d:cc:c2:
99:f4:87:d8:c5:51:00:31:0e:06:ea:8f:7e:1a:49:8a:88:0c:
e8:3e:99:5c:a8:7e:eb:2a:d2:be:d8:20:70:ad:80:2c:da:23:
18:17:15:dc:b8:f6:03:f1:62:44:5d:cb:71:8a:38:df:2d:46:
58:5e:fd:00:ef:14:04:28:b3:98:37:50:08:55:2d:b2:59:70:
86:8b:1d:1f:dc:d6:be:16:ef:f9:05:fd:23:4c:e7:dc:ad:f5:
35:23:09:10:c2:dc:19:a5:cf:f2:18:9b:dc:b1:06:44:87:86:
93:32:28:aa:51:99:1d:ba:af:f0:59:f6:a3:da:bd:a1:bc:27:
f1:46:34:e3:33:35:be:a6:2d:b3:93:00:b7:46:9d:35:d3:90:
31:7b:fa:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:29:48 2024 by rpki-client on console-ams.rpki-client.org