Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/NEHQMYap5FrR6FYqHT-d4kdm-_U.roa
File: NEHQMYap5FrR6FYqHT-d4kdm-_U.roa (raw, json)
Hash identifier: I7aMCvc+/pPI4I46Eh+dzA6n80szj18LrT+Juvcmhqs=
Subject key identifier: 34:41:D0:31:86:A9:E4:5A:D1:E8:56:2A:1D:3F:9D:E2:47:66:FB:F5
Certificate issuer: /CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
Certificate serial: 018CC7261DF7B25FAE5C22865E78AFE6DA16
Authority key identifier: 83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/NEHQMYap5FrR6FYqHT-d4kdm-_U.roa
Signing time: Mon 01 Jan 2024 22:30:13 +0000
ROA not before: Mon 01 Jan 2024 22:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 176.100.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:1d:f7:b2:5f:ae:5c:22:86:5e:78:af:e6:da:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
Validity
Not Before: Jan 1 22:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3441d03186a9e45ad1e8562a1d3f9de24766fbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:62:f0:13:d8:9b:07:64:60:a2:c7:d5:e5:0c:
74:69:9a:4f:ab:ed:52:d1:cc:64:0a:7d:53:d0:c3:
aa:7d:3a:04:5b:d7:c6:cf:5f:27:54:84:2d:7f:09:
27:5c:1b:59:a4:91:59:21:b2:64:8f:8f:6f:ca:55:
bc:9f:cf:12:13:51:ec:80:d7:26:c8:33:b6:48:6d:
f3:33:1b:51:79:5a:70:16:a9:a3:14:bc:3b:c3:e8:
3e:f2:22:be:86:de:26:9a:11:0a:11:1f:99:fb:94:
88:e9:82:9b:3f:46:9f:f0:ac:eb:a0:8e:1d:8c:0d:
8e:89:01:ed:b1:e3:e0:69:6a:db:ba:b1:02:9a:3e:
3e:dd:15:a0:98:63:58:39:a1:0f:c4:1b:65:68:99:
90:3b:39:90:e9:f9:77:4a:56:95:ef:29:15:3b:d2:
4a:01:a9:a8:b3:c2:52:43:30:fe:9f:36:7d:cc:12:
c7:ea:01:ca:02:9b:8a:91:1d:59:40:d1:37:f1:7e:
d8:aa:27:fc:8a:db:1f:e5:95:17:bf:ef:e0:98:11:
c9:eb:15:c5:98:9f:eb:36:62:b1:9c:77:62:45:4a:
f5:a2:3e:30:7d:1e:01:f5:3e:f2:20:d1:59:3e:e7:
3a:7d:78:0f:5c:e7:c7:9f:34:b1:a6:06:30:4e:16:
21:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:41:D0:31:86:A9:E4:5A:D1:E8:56:2A:1D:3F:9D:E2:47:66:FB:F5
X509v3 Authority Key Identifier:
keyid:83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/NEHQMYap5FrR6FYqHT-d4kdm-_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.147.0/24
Signature Algorithm: sha256WithRSAEncryption
35:b3:9a:f0:4c:9a:d6:2a:ad:03:4f:4b:11:31:5e:b5:03:e8:
3e:a8:8f:11:10:ac:29:bf:07:5c:0d:9f:f2:44:64:45:35:c5:
92:d1:98:f9:3d:cf:28:b9:f1:84:33:35:37:29:d3:d8:e9:3a:
a8:51:c6:9b:19:6a:3e:64:cc:7c:21:27:9f:66:ef:6e:59:6b:
a7:d0:15:cf:a7:71:34:bb:35:59:75:66:31:66:48:7d:80:98:
0e:86:ce:ae:11:94:fb:82:80:8a:22:22:ef:5b:f9:69:6c:d2:
12:dd:88:8a:db:a9:17:d4:0f:63:19:3b:6b:43:c7:23:25:db:
54:71:17:13:20:31:38:72:66:78:b8:c9:91:a8:5d:0e:f1:92:
b1:60:e4:ce:94:9f:5e:1e:9e:e0:d4:66:77:4d:4f:2a:64:04:
c4:8d:64:83:e6:8f:90:cd:b8:ff:e5:fc:a0:92:f7:5b:12:91:
f9:b4:97:3d:e4:6d:0a:36:e4:36:5e:10:e3:0e:00:58:5e:5b:
29:81:cc:d0:f7:63:e0:d9:aa:09:4d:9a:a8:34:a5:a8:ea:34:
d0:e5:21:f9:3f:9f:0f:0b:c0:da:0a:c0:dc:8c:0d:cf:7d:d8:
0f:23:ac:11:bb:61:be:a2:fd:f8:e3:bb:81:07:7e:2f:3b:3b:
0d:01:78:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:30:17 2024 by rpki-client on console-fra.rpki-client.org