Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/nbx1iWgB85M28eNeeUUy7AhgRCY.roa
File: nbx1iWgB85M28eNeeUUy7AhgRCY.roa (raw, json)
Hash identifier: N36gCVvFOx41es5TpDhTYyz2K6TMDk/qr2wVefwX578=
Subject key identifier: 9D:BC:75:89:68:01:F3:93:36:F1:E3:5E:79:45:32:EC:08:60:44:26
Certificate issuer: /CN=40e3953c5cb452f159f8e1505fc702e883657e72
Certificate serial: 018CC500B990A12CEECE5AD37164828731CB
Authority key identifier: 40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/nbx1iWgB85M28eNeeUUy7AhgRCY.roa
Signing time: Mon 01 Jan 2024 12:30:08 +0000
ROA not before: Mon 01 Jan 2024 12:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26506
IP address blocks: 209.16.176.0/24 maxlen: 24
209.16.178.0/24 maxlen: 24
207.229.122.0/24 maxlen: 24
209.162.157.0/24 maxlen: 24
209.162.155.0/24 maxlen: 24
2a02:3d0:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:b9:90:a1:2c:ee:ce:5a:d3:71:64:82:87:31:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3953c5cb452f159f8e1505fc702e883657e72
Validity
Not Before: Jan 1 12:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9dbc75896801f39336f1e35e794532ec08604426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:07:6b:d9:3b:57:fe:62:4d:3e:78:dd:4b:
9a:81:e2:78:8c:21:06:26:55:df:57:76:45:d9:c5:
e1:3e:56:b7:10:4f:ca:fc:24:44:2e:e7:7c:2a:aa:
30:df:91:1b:10:e8:ac:f0:c5:12:1b:68:01:cd:8c:
01:04:f0:42:86:e7:d9:e5:0a:86:93:72:08:5c:da:
d0:04:56:9c:e7:9f:a8:a1:e7:bd:d9:cd:3d:df:5d:
44:b4:c5:7c:10:3a:a1:ae:82:bd:c0:80:1b:4a:5f:
d2:25:55:cd:e6:92:90:d9:c3:b7:4a:37:1c:c9:73:
bf:bf:33:ad:db:85:96:48:56:e1:36:18:dc:ce:72:
25:2b:f7:9d:7b:24:a7:32:b2:2c:61:81:27:80:17:
db:de:6c:d4:ed:8d:93:2a:82:3d:40:6b:b7:e2:0b:
70:18:2c:af:c6:a6:55:3d:cc:97:d7:87:14:9f:f5:
0e:18:59:fc:54:49:db:dc:01:39:51:0d:d9:9c:1a:
21:8a:6c:1a:32:84:b8:58:57:d9:b5:27:4b:ba:06:
78:a4:cd:d1:f7:9d:86:4a:ec:64:a8:e3:c0:02:a5:
91:6b:71:c8:a7:86:ba:b2:29:5e:86:4b:4e:c5:fe:
66:0c:f2:c5:99:14:8c:a5:cb:d6:f0:f2:d4:98:90:
d8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BC:75:89:68:01:F3:93:36:F1:E3:5E:79:45:32:EC:08:60:44:26
X509v3 Authority Key Identifier:
keyid:40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/nbx1iWgB85M28eNeeUUy7AhgRCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.229.122.0/24
209.16.176.0/24
209.16.178.0/24
209.162.155.0/24
209.162.157.0/24
IPv6:
2a02:3d0:7::/48
Signature Algorithm: sha256WithRSAEncryption
4e:69:63:87:7a:4e:c0:88:e6:53:ac:0a:26:dd:4b:3d:70:33:
25:69:e0:25:cd:23:30:d1:8b:e0:3c:3c:a7:18:19:83:80:02:
36:a6:10:8b:c2:d1:4b:2e:2b:d1:de:14:8c:cb:e9:c8:01:86:
24:2c:98:f3:98:d3:03:ff:24:97:9a:cd:3f:19:3f:27:ca:e1:
f9:f3:5f:ef:6a:0a:ca:c8:bc:b1:36:56:07:f6:4d:f5:4a:3b:
0a:84:e7:0b:19:38:56:e7:f0:63:6e:24:65:19:dc:ca:b0:e4:
5c:e3:6e:c3:fc:f4:1a:99:c9:bc:ad:b9:55:14:bd:d9:97:7a:
77:90:9b:8c:6e:77:d6:d3:45:75:13:5c:54:0d:b1:a1:b9:0c:
db:56:ab:af:0b:07:b3:bc:23:16:90:f3:ce:02:51:a6:e0:f0:
59:7a:e1:74:fd:03:2c:56:1d:e7:b4:c9:b2:6a:ee:b9:28:6e:
2e:56:fc:cc:05:57:45:45:43:50:e9:f3:ca:07:19:17:8f:78:
77:54:f2:0c:34:4e:0c:26:86:ee:3e:c4:a6:5d:58:45:19:35:
67:7e:34:79:91:d3:66:00:53:4e:6b:e7:08:ed:69:28:21:2c:
ac:35:0c:e6:69:6a:4a:9d:5d:0f:f7:3c:43:46:e9:57:b8:91:
ca:f4:96:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:46:12 2024 by rpki-client on console-ams.rpki-client.org