Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/nLJslEycJ5aeXZMBhi-Yw4IYrBA.roa
File: nLJslEycJ5aeXZMBhi-Yw4IYrBA.roa (raw, json)
Hash identifier: Grs7WhCWKbVhrbLZtE/0e+7GrR+8zGOHSWBobEGugeo=
Subject key identifier: 9C:B2:6C:94:4C:9C:27:96:9E:5D:93:01:86:2F:98:C3:82:18:AC:10
Certificate issuer: /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Certificate serial: 01920A8D02C19D734FBDD6EF226C2054C0A7
Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/nLJslEycJ5aeXZMBhi-Yw4IYrBA.roa
Signing time: Thu 19 Sep 2024 13:51:06 +0000
ROA not before: Thu 19 Sep 2024 13:51:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197722
IP address blocks: 185.157.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0a:8d:02:c1:9d:73:4f:bd:d6:ef:22:6c:20:54:c0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Validity
Not Before: Sep 19 13:51:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9cb26c944c9c27969e5d9301862f98c38218ac10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:ca:9f:7a:22:b5:a6:cd:71:47:5e:03:2c:
54:0e:b8:5f:95:7c:9b:ee:5e:74:04:87:4d:21:83:
78:4d:72:dc:90:bd:db:2e:2f:b3:57:f9:92:aa:63:
60:6a:0a:a6:fe:fb:04:b0:3b:c7:1d:9b:6a:b6:94:
cb:00:3b:8c:ef:7c:91:e7:af:de:8d:7b:45:4d:df:
bb:ad:86:60:22:4d:df:30:a0:6c:99:f2:3f:19:15:
a5:7c:3d:dc:18:5a:98:56:e7:ff:e2:c0:1c:b2:04:
59:5d:03:9a:46:bc:bc:12:ed:6f:59:f6:3c:80:43:
32:27:d6:39:88:9c:dd:57:e7:bd:be:70:35:5f:33:
23:bd:cc:ec:41:10:c9:c4:df:93:c7:0d:26:b9:1f:
a4:9b:94:a4:5e:78:5a:d2:52:2c:f3:50:62:c7:59:
aa:a0:f7:76:c5:4f:1c:3c:38:1c:34:ce:80:a8:e3:
75:7c:4e:7e:55:df:74:e4:23:39:f4:57:eb:b3:08:
a3:67:74:2f:d6:c5:b2:0f:41:ac:1c:cf:74:99:16:
0b:8e:99:6e:e3:6d:38:00:13:82:1c:f3:eb:12:a5:
81:14:fd:28:1c:4b:8b:fa:fc:b5:07:e1:75:aa:4f:
e3:3d:b1:7e:6a:2a:67:3a:c1:07:e9:b5:f7:d1:bb:
10:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B2:6C:94:4C:9C:27:96:9E:5D:93:01:86:2F:98:C3:82:18:AC:10
X509v3 Authority Key Identifier:
keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/nLJslEycJ5aeXZMBhi-Yw4IYrBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.92.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:b8:70:1a:af:b8:3a:de:a1:c6:3d:6b:a4:9b:f6:96:e6:78:
8e:8d:3d:9d:ea:dd:12:7e:72:db:62:20:54:ca:d8:d7:60:44:
e5:8e:76:ad:be:19:1b:33:ab:da:fa:52:5f:fb:84:7d:17:85:
d6:a6:5a:ac:a7:a7:7e:c0:4a:14:4b:1e:51:d3:77:d6:7b:47:
d9:d0:49:10:81:74:3f:d8:1e:44:38:0d:5d:9d:45:8c:1e:0e:
51:2e:6f:1e:0c:a8:0d:52:2f:e4:8a:26:a7:5d:20:4e:1c:74:
d5:08:22:06:db:7d:e0:87:1e:b8:af:7b:1a:c4:60:b2:d1:42:
f2:da:71:b3:4b:d2:27:a0:15:eb:c2:46:8a:01:2d:fa:bc:3f:
21:33:21:a3:90:db:07:68:50:0e:57:c7:9b:f4:b7:14:a1:9e:
7d:c3:1b:7b:dd:98:8e:61:e5:a1:87:8e:51:85:28:db:89:6a:
90:f1:2d:56:0e:e9:83:c6:41:49:95:72:1f:dd:3d:be:ad:8d:
f0:e1:d5:af:2a:94:88:97:aa:80:92:ac:27:56:d5:28:97:3d:
0c:ba:c2:d2:b3:ce:91:32:ac:0a:b2:0a:4f:f7:ad:3e:3f:e2:
45:a9:24:8b:77:d0:d9:c1:fc:ac:c7:1a:12:f6:ef:9d:7d:e8:
05:2d:ad:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:11:01 2024 by rpki-client on console-fra.rpki-client.org