Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/npGmTRoFHTTsmU0HzSVV6ApW5fg.roa
File: npGmTRoFHTTsmU0HzSVV6ApW5fg.roa (raw, json)
Hash identifier: LeRBBL2zuY9aQrqUy/NMkd80gl6gYNbwyZYwecCWyyY=
Subject key identifier: 9E:91:A6:4D:1A:05:1D:34:EC:99:4D:07:CD:25:55:E8:0A:56:E5:F8
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 018CC7274F5D683F144B7E5957337DFF2798
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/npGmTRoFHTTsmU0HzSVV6ApW5fg.roa
Signing time: Mon 01 Jan 2024 22:31:31 +0000
ROA not before: Mon 01 Jan 2024 22:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48292
IP address blocks: 213.238.165.0/24 maxlen: 24
213.238.161.0/24 maxlen: 24
213.238.162.0/24 maxlen: 24
213.238.163.0/24 maxlen: 24
213.238.164.0/24 maxlen: 24
213.238.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:4f:5d:68:3f:14:4b:7e:59:57:33:7d:ff:27:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 22:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e91a64d1a051d34ec994d07cd2555e80a56e5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f6:86:e9:ad:0c:76:db:4a:e4:42:bd:c9:be:
40:5e:3d:b5:59:a4:69:b4:a2:8d:1c:85:89:8b:39:
15:b7:be:2d:15:5c:0b:f6:4b:da:c4:e8:a3:c7:36:
58:be:c4:d6:2b:cd:bb:91:60:6d:59:ab:63:84:d4:
4b:d0:f0:7a:b2:ef:4d:5b:92:d5:43:a0:6f:e9:0c:
7c:a3:47:23:fe:29:ed:62:76:b5:24:b1:36:9c:a6:
a9:60:96:3a:23:a8:63:70:be:db:00:c2:db:2b:bb:
3f:d5:53:19:6f:db:e0:ea:ca:c3:ff:8f:8c:9a:50:
28:24:a6:56:5d:73:17:9b:52:6c:03:b0:b7:62:e1:
f3:19:9b:78:5a:d7:e3:ea:36:ef:b9:51:ec:59:92:
b5:46:1a:01:dd:f8:20:d9:58:12:3c:84:86:26:0d:
41:95:6d:9f:d2:18:30:bd:86:7b:6b:fb:cd:8d:b9:
43:44:d5:2e:66:05:20:e9:66:5c:95:d6:ad:d1:e3:
a2:9c:48:45:1a:79:f2:b8:da:35:b5:ae:fc:9f:9b:
94:fa:88:15:1c:7d:42:96:2c:7a:13:5c:b6:df:97:
d9:14:cf:cb:f0:04:5b:c7:8d:be:4c:ca:eb:75:62:
a1:4a:70:87:b7:1a:07:22:da:84:ba:2c:37:c5:3f:
f1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:91:A6:4D:1A:05:1D:34:EC:99:4D:07:CD:25:55:E8:0A:56:E5:F8
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/npGmTRoFHTTsmU0HzSVV6ApW5fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.160.0-213.238.165.255
Signature Algorithm: sha256WithRSAEncryption
68:b2:c9:35:89:1e:dd:1c:f8:f5:6d:26:76:13:2b:15:68:d8:
f8:0f:7b:b6:dc:a2:33:31:7d:3b:99:67:95:4d:d5:5c:bb:fa:
2e:31:d3:ba:fd:47:51:4b:90:f6:bd:48:a0:0c:e3:55:c4:fa:
3b:30:c8:73:90:8f:98:86:3e:92:95:2a:24:b7:54:47:9d:b8:
38:42:d1:ee:ce:3c:6b:10:68:e9:1c:d7:9a:fd:7e:96:5d:40:
9f:69:9c:62:33:90:6c:8b:89:fa:1b:50:79:a1:ef:3f:e2:01:
20:8c:46:09:06:f6:2d:37:c5:af:d9:b9:30:ca:84:af:6c:ce:
74:3b:26:7b:67:93:f2:83:05:48:25:25:1e:51:16:0e:fb:31:
9f:8d:53:71:8f:76:26:a4:de:59:58:70:3f:a7:5b:6c:02:bf:
e0:58:b4:0a:0a:a3:fc:9c:fd:dc:27:15:41:1d:3e:73:aa:a3:
28:f5:75:57:45:54:cd:21:55:f4:bb:7e:df:97:0f:13:21:11:
8f:06:33:52:fa:51:93:ab:a1:6a:f4:f3:41:b4:2b:f5:a3:96:
00:f4:7b:25:59:51:be:8e:30:e6:1e:26:ac:b6:e2:8e:f7:36:
b0:66:c6:26:88:96:b1:15:dd:97:d5:df:91:8c:af:f7:67:0b:
ec:db:f3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:34:18 2024 by rpki-client on console-fra.rpki-client.org