Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/NlbCNAhkL9BJtdEz5sx_grmcBio.roa
File: NlbCNAhkL9BJtdEz5sx_grmcBio.roa (raw, json)
Hash identifier: rO0CRIxHGLvSpgGQNZ3nMAcVeKfnEM3IqvTU7iwTdB8=
Subject key identifier: 36:56:C2:34:08:64:2F:D0:49:B5:D1:33:E6:CC:7F:82:B9:9C:06:2A
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018CC2DB34CC4917AA71548639F3F6DC28A7
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/NlbCNAhkL9BJtdEz5sx_grmcBio.roa
Signing time: Mon 01 Jan 2024 02:29:54 +0000
ROA not before: Mon 01 Jan 2024 02:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205301
IP address blocks: 194.242.22.0/23 maxlen: 23
194.242.28.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:34:cc:49:17:aa:71:54:86:39:f3:f6:dc:28:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 02:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3656c23408642fd049b5d133e6cc7f82b99c062a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b3:dd:17:3f:81:b6:49:8d:a6:f5:7b:1b:3a:
d7:b6:40:c2:5e:33:f1:1e:72:3a:48:c7:49:6f:a2:
45:4c:14:eb:ab:26:2a:d6:2c:1b:ef:b7:b1:b3:97:
6f:a8:90:84:9a:7b:c4:e3:f9:ee:b2:78:9a:c7:91:
17:26:3b:18:20:c7:53:97:ea:ac:9b:26:66:8f:ac:
ec:d5:3f:c4:82:f0:5e:12:53:a1:f2:6a:15:5b:17:
c4:51:af:95:b5:ba:75:d6:89:eb:f2:14:45:83:47:
86:5d:96:da:62:b1:8d:35:7d:52:53:ab:1e:df:a6:
7a:29:5d:89:d2:2c:59:de:14:e6:25:89:b5:8d:9a:
c3:f3:d5:14:80:98:67:e5:c6:f6:7a:aa:a7:b8:18:
ac:1b:1d:3e:00:2b:69:54:e9:0c:55:5f:95:08:4f:
58:8d:8a:ac:cc:90:24:bb:20:8f:55:f5:42:ff:37:
45:eb:f6:96:c6:26:27:17:ea:db:ed:73:4e:9d:7c:
8e:45:b2:58:23:04:91:bd:a3:40:f4:50:3d:0c:37:
36:79:cd:80:cb:13:33:e0:3b:ec:1a:64:c3:18:b3:
fd:97:3c:66:40:fa:4b:55:38:b0:cd:24:a4:79:0d:
6c:d0:b1:68:56:68:83:f2:4c:63:20:93:1a:35:6e:
49:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:56:C2:34:08:64:2F:D0:49:B5:D1:33:E6:CC:7F:82:B9:9C:06:2A
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/NlbCNAhkL9BJtdEz5sx_grmcBio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.22.0/23
194.242.28.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:98:8c:63:18:59:8f:d6:f9:85:71:23:c1:de:b2:88:ae:fa:
93:dd:5e:63:94:18:89:b4:54:e9:8f:a8:1c:95:a0:5f:19:1e:
3a:57:e2:df:0f:6f:c2:b6:b3:5b:cf:c7:75:f6:7e:0a:97:12:
c4:12:c9:a3:b0:99:48:0a:28:4a:5e:c5:f8:1e:bb:7f:b7:4e:
d4:18:82:96:d7:2a:71:e3:10:a1:26:30:33:58:d9:61:f9:ca:
ae:47:0a:52:e8:a6:7f:9d:7b:5e:6a:4b:98:6a:17:84:e5:fe:
83:ae:59:a4:6c:f1:87:a9:50:6f:1a:fc:ed:9b:61:d9:16:07:
24:6e:f3:ec:99:8c:61:2b:6f:3a:b2:55:b3:31:05:dc:7b:42:
01:bc:c3:03:c6:b7:67:fd:ca:f3:e4:87:dc:28:7c:c6:c1:a8:
e7:b7:7e:5e:22:5a:0d:2a:be:6a:c1:7b:c1:fa:7f:a7:19:1c:
ce:ca:39:db:9d:92:93:0b:ff:84:d7:b1:0f:bb:59:8b:cc:45:
c7:c5:dc:27:0c:4f:8f:de:b2:5c:3c:e2:0e:a7:1d:f5:7e:7f:
e7:ef:df:57:cb:9c:ba:56:97:80:ec:90:f2:f6:b3:4b:a1:b3:
37:44:48:6c:ad:c2:85:e0:4c:fb:9e:85:6d:1b:40:06:66:c6:
57:16:b4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:52:36 2024 by rpki-client on console-ams.rpki-client.org