Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NO0Ezi9Ic4_-PeCJ1bZ6YRItNo8.roa
File: NO0Ezi9Ic4_-PeCJ1bZ6YRItNo8.roa (raw, json)
Hash identifier: hP9/2k81lTpkanweEfGDdQQdD+jKoFzZYafa4F7zu6c=
Subject key identifier: 34:ED:04:CE:2F:48:73:8F:FE:3D:E0:89:D5:B6:7A:61:12:2D:36:8F
Certificate issuer: /CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Certificate serial: 018CC6B925F13CCF73FAE77EFD32B4970103
Authority key identifier: 35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NO0Ezi9Ic4_-PeCJ1bZ6YRItNo8.roa
Signing time: Mon 01 Jan 2024 20:31:11 +0000
ROA not before: Mon 01 Jan 2024 20:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42143
IP address blocks: 185.207.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:25:f1:3c:cf:73:fa:e7:7e:fd:32:b4:97:01:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Validity
Not Before: Jan 1 20:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34ed04ce2f48738ffe3de089d5b67a61122d368f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:77:3f:95:91:5e:91:06:2b:f3:4e:6d:7c:49:
4b:8e:8d:46:4d:21:45:da:c1:e0:c7:79:a1:fc:3d:
6b:de:90:5e:e8:48:63:6e:41:bc:15:cf:3c:88:55:
7f:52:a4:d6:31:c6:97:b9:fb:15:05:c4:8b:71:45:
83:c3:5a:7a:7e:69:7e:30:c1:3e:bc:61:65:12:c2:
76:ca:ea:d5:2b:46:e5:3a:f7:29:7b:21:e1:d7:a4:
b7:76:20:4b:69:6e:f0:b3:4d:c3:59:9d:c3:10:39:
8a:91:eb:7d:64:09:c8:5c:50:9d:05:82:d4:3b:37:
1e:f4:3c:4c:49:a3:f3:90:27:da:bd:fd:ba:07:fd:
6d:27:93:47:da:84:0b:ca:8b:6b:e1:c7:02:7a:e0:
a1:13:f1:ae:71:18:b8:f6:38:6d:c4:2d:b5:19:80:
89:c5:d2:aa:a7:f0:9f:6d:f5:ad:c4:58:b9:ea:cc:
28:a1:32:af:6b:8e:e4:28:2c:e1:03:f6:d4:3f:ad:
c4:4d:a2:cf:f2:79:f7:3b:5d:25:0a:1a:d0:90:2c:
1c:a8:78:51:83:aa:e5:6f:44:55:98:0e:f2:29:1d:
9f:02:0a:10:56:ae:96:d2:d1:a7:a7:1f:19:de:fd:
56:3c:03:6d:da:fd:4a:cc:87:00:d7:b1:57:e1:59:
4d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:ED:04:CE:2F:48:73:8F:FE:3D:E0:89:D5:B6:7A:61:12:2D:36:8F
X509v3 Authority Key Identifier:
keyid:35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NO0Ezi9Ic4_-PeCJ1bZ6YRItNo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.52.0/22
Signature Algorithm: sha256WithRSAEncryption
38:2e:27:5a:d1:b5:3e:3c:95:e1:e6:84:82:04:df:01:b9:60:
b4:5e:3f:12:90:36:3b:e1:aa:3b:64:e2:ae:dc:1a:9d:73:eb:
9b:19:f2:40:50:57:96:74:6f:8d:eb:82:04:9e:7f:2d:56:76:
1e:34:4b:ae:3d:06:df:1e:c6:8c:a0:9e:a1:51:9e:ef:a8:2a:
9d:1c:30:77:78:a3:0c:2a:be:65:78:af:d5:d3:8b:60:32:8b:
62:4c:36:9f:ab:87:19:24:2e:44:61:a0:fd:2c:e3:99:c6:13:
51:c3:5f:b8:8f:9c:10:a6:c0:a5:c2:36:60:80:7e:1e:97:0b:
c8:4d:07:97:68:90:8b:72:1e:4c:78:87:b5:3f:d4:95:4e:c0:
bf:c7:84:74:51:e2:52:10:a1:46:38:1f:d4:2c:43:21:36:56:
89:9a:b0:08:3a:4b:e1:09:2b:db:f0:b5:12:79:27:80:1d:cd:
70:47:fb:f2:d3:38:d8:8f:54:87:62:6c:87:bd:35:c7:d3:83:
a5:d1:09:0a:e2:8b:f9:cf:74:a8:72:81:ed:67:c4:f1:4e:69:
2c:2a:3d:9b:a6:0a:27:86:ab:7c:91:3c:03:f5:5e:63:03:53:
1a:16:b3:33:12:a7:dc:e4:78:4f:4d:e2:99:49:f8:2b:87:a0:
7f:ec:30:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:09:03 2024 by rpki-client on console-fra.rpki-client.org