Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/NfmUbjv9q7tBjD54ozkI-NB5w-Y.roa
File: NfmUbjv9q7tBjD54ozkI-NB5w-Y.roa (raw, json)
Hash identifier: +sCfTar3Ln1nAK7V7B7dx1fOhlrY/wqhyyiCmWWujjY=
Subject key identifier: 35:F9:94:6E:3B:FD:AB:BB:41:8C:3E:78:A3:39:08:F8:D0:79:C3:E6
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0192C8F2F01C3F6B6452526A2FA6E4ED27CB
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/NfmUbjv9q7tBjD54ozkI-NB5w-Y.roa
Signing time: Sat 26 Oct 2024 13:10:17 +0000
ROA not before: Sat 26 Oct 2024 13:10:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56971
IP address blocks: 5.144.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c8:f2:f0:1c:3f:6b:64:52:52:6a:2f:a6:e4:ed:27:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Oct 26 13:10:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35f9946e3bfdabbb418c3e78a33908f8d079c3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:af:11:6a:64:a9:af:66:f4:cb:df:19:8b:b3:
87:93:ca:2c:fc:ed:e3:95:ee:0d:e2:ed:68:2d:df:
fb:b7:94:48:61:0b:e3:33:e6:18:17:ac:ea:fa:cf:
03:c8:19:94:05:74:22:b4:3d:5d:75:e6:94:5d:0b:
e9:24:a3:bd:0d:2f:e0:c5:1d:ce:2f:f2:45:58:ae:
6f:8e:da:a5:7a:84:1a:5b:2d:0a:69:1a:cb:dc:fe:
6d:d2:99:1b:0e:2e:d7:26:f8:5c:58:60:cd:2f:84:
1f:41:00:ae:24:23:74:c1:f7:7b:f8:6e:82:56:12:
ec:c7:a8:e2:c7:1a:92:6d:7f:0e:7c:f3:e0:04:3d:
01:8c:fc:85:45:fd:31:1c:68:ac:43:7c:43:32:5e:
92:f8:69:91:cc:ae:e4:7e:cc:d0:33:3d:56:3b:c8:
e5:8b:77:72:63:ed:e6:de:6b:d1:3a:8f:ce:bf:5a:
cf:94:39:0b:b0:4e:a3:85:a9:2b:de:0e:5d:57:a3:
d0:da:aa:31:1a:19:84:c6:19:ba:fb:31:f9:50:c6:
ff:24:85:24:dd:46:14:5c:24:e4:02:f5:bb:14:84:
ae:41:35:2e:7d:81:8e:34:11:2e:5c:e7:43:a8:3f:
9d:06:10:27:88:ed:e4:c3:a5:8f:f8:3c:c7:a1:94:
9c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F9:94:6E:3B:FD:AB:BB:41:8C:3E:78:A3:39:08:F8:D0:79:C3:E6
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/NfmUbjv9q7tBjD54ozkI-NB5w-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.179.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:dc:ce:59:f3:a4:63:be:1c:66:d3:98:90:e5:56:eb:86:68:
38:57:48:e8:3b:57:e6:79:98:95:dc:a4:de:91:e2:f5:23:9e:
ea:fc:53:af:ae:ac:e2:b5:f3:8c:52:b2:50:d5:81:6d:95:52:
16:ab:df:a6:8e:59:fb:9e:be:9a:d7:51:8f:93:55:f9:10:09:
50:cc:7a:20:b5:b8:4d:e0:c4:a7:08:54:ed:19:5a:22:8b:44:
66:08:0b:c8:5f:1b:19:ab:c7:66:af:cc:e3:09:90:3e:73:7c:
09:63:c0:21:82:68:4f:92:7b:55:5f:8b:16:ad:03:9f:51:f2:
99:70:fe:57:09:38:21:a3:25:14:3b:1f:99:92:93:c5:db:a4:
f0:f7:de:16:0c:2d:be:27:41:cd:76:f2:0b:b7:fe:20:5d:24:
04:a6:7a:ed:22:b0:20:88:c8:c7:10:4e:fb:40:dd:51:24:48:
bd:9e:bd:bc:cb:d8:e3:42:9d:3a:da:ed:35:0b:c0:97:3a:03:
75:aa:8e:8e:23:b9:44:d4:d1:7b:0d:49:5e:b5:28:52:eb:38:
75:71:2b:f6:83:3b:90:87:d7:cc:34:d3:a1:8f:89:cc:97:f8:
ec:2d:f6:f7:37:4a:29:1b:d2:a9:42:a3:e9:e7:0c:32:a4:6b:
f1:fb:f6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:35:36 2024 by rpki-client on console-ams.rpki-client.org