Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/N4oLizaRQrO3gEcQtRH4ef96MXs.roa
File: N4oLizaRQrO3gEcQtRH4ef96MXs.roa (raw, json)
Hash identifier: Clr9u8q+Pu8s6Xd03v64ajNijY61YjkP7j+86lp/Zk4=
Subject key identifier: 37:8A:0B:8B:36:91:42:B3:B7:80:47:10:B5:11:F8:79:FF:7A:31:7B
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018DE709B0E5B7538CBDCA666AEA357BC36F
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/N4oLizaRQrO3gEcQtRH4ef96MXs.roa
Signing time: Mon 26 Feb 2024 20:09:48 +0000
ROA not before: Mon 26 Feb 2024 20:09:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215727
IP address blocks: 5.178.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e7:09:b0:e5:b7:53:8c:bd:ca:66:6a:ea:35:7b:c3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Feb 26 20:09:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=378a0b8b369142b3b7804710b511f879ff7a317b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:37:39:f0:71:ec:0c:7e:6e:63:9b:c7:ee:ad:
3e:3b:ab:c5:f8:19:cf:c5:db:51:ad:58:f2:35:5a:
d2:bc:ec:91:c4:cc:26:0c:3b:a9:e9:5b:21:1a:f5:
0c:9c:50:4f:d8:c4:0d:3d:f5:e8:0e:ff:00:2e:6d:
7d:d4:2c:eb:c0:18:cb:91:41:03:ed:8e:e9:4c:8a:
29:54:34:43:8b:fe:56:b4:ca:64:64:a0:26:b3:4d:
5b:3f:12:ad:b4:a2:5d:d6:15:d2:4b:4d:0c:95:bd:
11:21:32:dd:4c:9a:9c:57:d9:30:98:4e:fa:f7:5e:
83:b2:2c:74:48:40:56:96:b2:d6:26:87:37:e5:65:
f4:48:f5:f7:8d:b8:eb:7f:5e:09:68:dd:6e:d3:c8:
69:d2:c3:23:0c:aa:34:cb:db:86:ec:0c:9a:7f:31:
8d:c0:51:db:73:ea:50:52:5c:b5:8a:f3:fc:3a:9f:
e4:91:fe:d3:c2:f0:9b:0e:36:6e:d3:24:ee:ef:1e:
1e:3a:b5:32:90:e1:7f:30:ce:3a:f5:cb:5d:20:a2:
fc:38:66:de:64:86:81:89:ad:0c:a5:63:11:60:47:
2a:cf:19:c5:ba:e9:a1:0c:07:d8:4b:f4:cc:6c:df:
49:23:07:18:2b:ea:a1:b8:ab:31:21:5d:65:00:e3:
1e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8A:0B:8B:36:91:42:B3:B7:80:47:10:B5:11:F8:79:FF:7A:31:7B
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/N4oLizaRQrO3gEcQtRH4ef96MXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.101.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:08:95:3f:7f:1c:36:ae:eb:16:f8:5f:80:54:7b:4f:ad:53:
86:92:15:47:28:30:a2:77:82:5b:bf:54:2f:03:e5:9f:8f:f5:
53:cd:59:25:cf:ab:69:57:33:f0:b4:56:62:2f:9c:1a:dd:84:
0c:08:b0:c0:1f:63:7b:dc:e8:42:3a:5a:ba:a2:dc:e9:92:b8:
33:e0:14:14:c9:c5:82:00:fb:40:b2:84:1c:c5:3f:93:ff:b2:
2a:d1:8a:fd:90:c0:5f:68:06:be:48:9a:15:99:bc:a6:de:01:
62:13:b8:51:f4:4b:f2:45:17:0b:7b:ce:e2:4d:97:7b:ea:79:
93:66:b5:07:90:ef:a9:ff:d5:63:f1:f4:5a:00:28:96:8d:41:
32:dd:1e:e5:d0:39:2b:ee:3a:02:e2:f6:cc:cd:94:66:bc:ef:
a7:32:e6:19:24:2c:da:9d:d7:28:f6:94:23:6c:25:57:4a:b6:
93:23:26:54:d0:bd:aa:b2:78:b5:b1:76:82:c3:a5:06:ab:e9:
fe:03:df:62:5a:45:7e:1d:0b:e7:01:db:19:ab:f7:65:67:80:
2a:57:50:c3:be:85:05:0b:80:ea:f2:7d:fe:de:9a:39:57:3f:
5d:b9:ce:ad:b6:36:6e:db:01:30:ff:12:8f:ff:23:33:07:0f:
26:3c:40:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:35:36 2024 by rpki-client on console-ams.rpki-client.org