Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/NF0WiVichU4Hzas4KR8KZ4I9BeE.roa
File: NF0WiVichU4Hzas4KR8KZ4I9BeE.roa (raw, json)
Hash identifier: npm1VOf53UEHnd/3tPy4HPSN0yfFxBCjznojWF6z1TQ=
Subject key identifier: 34:5D:16:89:58:9C:85:4E:07:CD:AB:38:29:1F:0A:67:82:3D:05:E1
Certificate issuer: /CN=cd394757e1416202a4022956dbf48d707458520c
Certificate serial: 018CCA2AD9ABF7C54EA538021A71B9AC5AB2
Authority key identifier: CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/NF0WiVichU4Hzas4KR8KZ4I9BeE.roa
Signing time: Tue 02 Jan 2024 12:34:14 +0000
ROA not before: Tue 02 Jan 2024 12:34:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.39.10.0/24 maxlen: 24
2a12:1b80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:d9:ab:f7:c5:4e:a5:38:02:1a:71:b9:ac:5a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd394757e1416202a4022956dbf48d707458520c
Validity
Not Before: Jan 2 12:34:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=345d1689589c854e07cdab38291f0a67823d05e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:24:41:bb:67:20:50:83:16:61:b5:6e:f6:
4a:8a:dc:a5:8f:51:67:5b:6d:3b:49:2d:08:22:f5:
d1:8e:d2:d2:6c:1a:21:5c:ca:45:e5:6e:0e:d7:9f:
76:ac:15:0b:89:f6:da:be:30:f4:24:a7:c4:51:de:
3f:4d:65:6b:92:29:9e:7f:fe:0a:30:b4:16:23:90:
60:9b:48:a9:dd:1d:46:c2:01:fd:8a:b7:ba:62:ab:
30:95:78:b3:e7:8e:b2:56:e2:a6:41:5d:cb:12:d2:
e9:e4:b1:82:58:22:4a:87:a5:ec:f9:9a:a2:ce:de:
62:8e:c5:0c:d6:29:93:63:aa:64:58:e1:9f:70:33:
c1:46:81:06:45:73:b6:30:d8:6e:40:b0:6d:a6:81:
c8:67:40:ab:30:25:09:1d:37:60:72:46:29:51:f0:
c3:02:98:f5:0f:06:9b:04:6a:81:c1:ae:39:45:5d:
53:1b:e4:da:10:5e:08:22:24:79:a8:bb:8d:01:9b:
f1:92:70:81:a5:72:e6:4c:65:eb:eb:8e:96:f3:15:
ab:07:3d:26:bb:39:da:9d:92:9b:78:d6:12:2f:68:
1e:be:59:ab:42:dd:45:70:fb:ea:36:76:dd:2a:10:
7c:b7:93:81:d1:6a:8b:ec:4b:d5:c6:8b:9b:32:85:
02:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5D:16:89:58:9C:85:4E:07:CD:AB:38:29:1F:0A:67:82:3D:05:E1
X509v3 Authority Key Identifier:
keyid:CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/NF0WiVichU4Hzas4KR8KZ4I9BeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.10.0/24
IPv6:
2a12:1b80::/32
Signature Algorithm: sha256WithRSAEncryption
60:64:fb:e0:72:57:6d:ff:e7:80:21:5a:4d:a9:75:d1:fd:49:
ec:86:d6:73:19:c0:1f:c4:6b:bd:fe:d2:36:bb:83:8d:49:63:
33:f5:0a:42:5f:11:26:e7:7e:56:e9:90:9c:b3:0c:7f:18:7a:
22:d3:63:62:0c:3c:87:33:eb:26:b1:43:0a:76:bb:91:f4:de:
4f:59:61:2c:bd:e0:8b:d7:bc:8d:bf:24:df:f4:f4:bc:5a:19:
f8:e0:cb:2d:39:c7:76:29:c2:95:6e:14:23:8f:ce:fe:76:cc:
35:73:b9:d3:73:62:fe:0d:66:45:c8:c6:c9:4c:ae:e0:ed:a2:
39:4e:6f:f7:25:c4:bd:4f:79:d5:19:67:c7:fe:0e:1d:88:cc:
10:8e:cf:04:0a:90:93:a8:7d:3a:fc:aa:1b:ca:4c:77:d1:4b:
6b:9b:75:c1:5e:51:32:7a:54:33:ee:c8:b2:f5:49:fd:92:0a:
df:a6:0f:1b:a4:7f:76:df:b7:da:6e:c8:95:d4:f5:2d:84:29:
25:82:28:64:8b:cd:01:44:a6:50:30:5e:10:8c:b7:57:61:b9:
64:65:4d:25:fd:e2:94:b6:c1:be:36:31:90:d4:32:b7:9a:4b:
2b:fa:89:a3:d3:9f:5a:d1:6a:51:ee:be:a9:f2:15:00:6c:ca:
2a:f8:e1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:16:06 2024 by rpki-client on console-ams.rpki-client.org