Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/NYLery1DL2okJXx86uYCdrawKV8.roa
File: NYLery1DL2okJXx86uYCdrawKV8.roa (raw, json)
Hash identifier: AZ11c8RNzM/FsPg6QxoGocvTq2bD3l8YhNDrqV1qIN4=
Subject key identifier: 35:82:DE:AF:2D:43:2F:6A:24:25:7C:7C:EA:E6:02:76:B6:B0:29:5F
Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Certificate serial: 018CC6B8FAA2CEDD16DED22FDD08EA07C28F
Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/NYLery1DL2okJXx86uYCdrawKV8.roa
Signing time: Mon 01 Jan 2024 20:31:00 +0000
ROA not before: Mon 01 Jan 2024 20:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13032
IP address blocks: 91.202.128.0/22 maxlen: 22
193.41.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:fa:a2:ce:dd:16:de:d2:2f:dd:08:ea:07:c2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Validity
Not Before: Jan 1 20:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3582deaf2d432f6a24257c7ceae60276b6b0295f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c0:4d:32:20:75:ad:af:de:63:d5:14:84:39:
b2:2f:59:2d:82:27:b3:d1:9b:32:dd:74:54:11:c5:
3a:07:c1:4a:7b:5f:00:58:21:3b:f4:d3:3c:ae:a4:
6f:a6:12:42:84:95:f7:9b:ab:7a:2d:06:0f:15:36:
2b:b8:68:b0:87:f5:28:c3:d2:13:a5:a9:97:b6:c2:
cf:81:db:16:9f:4b:7c:39:1a:bd:a0:0d:73:e0:f1:
09:b7:93:0c:57:0a:a9:20:13:0f:f5:b9:f1:3a:87:
5d:3a:0f:65:40:8a:a3:0a:b3:4e:0c:ce:5f:c9:f1:
1e:e9:c5:de:75:89:8f:ab:4f:bd:0f:32:cd:16:62:
75:c4:7a:fb:e2:fe:af:91:59:57:e2:a4:e6:3f:1d:
0c:b7:70:cb:3c:50:6f:c1:99:cf:51:4c:fb:af:3b:
7b:4d:ea:75:31:3a:c3:1a:dd:f6:cb:9f:14:d6:7a:
78:20:5f:72:29:3c:4c:c5:d4:27:19:2f:37:a6:75:
b5:ab:fd:58:91:1f:7e:35:1f:1f:94:fd:5d:82:ed:
cf:e4:c0:b5:73:21:97:e5:a0:93:67:17:a6:7e:73:
6a:05:cb:00:58:8b:5c:0c:e2:30:a9:2f:a6:d0:1f:
59:3f:d0:e3:a2:fe:d9:58:87:5a:8a:f6:e9:f9:9d:
77:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:82:DE:AF:2D:43:2F:6A:24:25:7C:7C:EA:E6:02:76:B6:B0:29:5F
X509v3 Authority Key Identifier:
keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/NYLery1DL2okJXx86uYCdrawKV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.128.0/22
193.41.88.0/24
Signature Algorithm: sha256WithRSAEncryption
31:19:12:fc:43:6e:2e:0d:42:19:cc:49:1c:ad:c4:d6:db:a6:
39:c1:eb:f5:30:03:bf:95:0a:10:a8:17:03:bd:b1:e1:ae:88:
31:0b:6c:b1:c4:dc:1f:27:21:0d:6e:2e:dd:db:6e:c2:6f:c1:
73:6b:61:b5:2d:be:ea:b6:7d:db:2b:6f:63:f9:d0:fa:c6:8c:
8c:78:0c:14:ce:6a:49:4a:67:4f:f5:25:6f:4c:7b:af:ca:72:
e6:7d:f8:5b:12:c6:ea:5f:97:a2:60:2a:10:b4:74:f2:ec:91:
5d:f5:3a:98:ec:bc:c2:17:f6:e8:6a:9f:5e:1a:e5:2a:02:97:
35:73:7b:d9:55:a0:f8:52:2f:ea:63:f8:f5:99:68:73:9d:c3:
2d:1e:ea:1c:f3:2c:b4:a1:14:0b:10:7b:c1:e7:4c:e0:bd:8f:
ed:39:ce:bc:29:b3:8c:8d:ac:c3:9b:80:8d:8b:fd:39:d6:4a:
d5:fd:90:30:e9:4f:cf:42:f5:6b:a2:2e:cb:f6:89:e1:b6:74:
85:62:3b:98:24:3a:f0:df:a7:91:1a:70:01:b9:cb:66:9f:06:
7e:a5:7d:f9:00:a6:e9:4c:4b:9e:8f:9f:3a:d1:b1:21:90:0f:
b0:22:03:d5:2e:6b:87:bb:cd:7d:ba:68:2f:3a:ec:56:d8:f3:
1b:11:fb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:01:12 2024 by rpki-client on console-ams.rpki-client.org