Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/nndVnxfE4JamjyFVIZaWZxpcEiw.roa
File: nndVnxfE4JamjyFVIZaWZxpcEiw.roa (raw, json)
Hash identifier: cCoRRpgisIfvI6Q3syu8/0GyyA9fouD9yAscCZzzc0Y=
Subject key identifier: 9E:77:55:9F:17:C4:E0:96:A6:8F:21:55:21:96:96:67:1A:5C:12:2C
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DF535053A2142E35873EF2F5C681D5A42
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/nndVnxfE4JamjyFVIZaWZxpcEiw.roa
Signing time: Thu 29 Feb 2024 14:11:49 +0000
ROA not before: Thu 29 Feb 2024 14:11:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62447
IP address blocks: 194.26.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f5:35:05:3a:21:42:e3:58:73:ef:2f:5c:68:1d:5a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 29 14:11:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e77559f17c4e096a68f2155219696671a5c122c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c4:2f:7c:d0:9c:bd:4b:0b:26:2d:03:71:6d:
63:2d:d5:78:74:50:0c:dc:be:81:83:f5:3f:35:a0:
fa:1a:ae:36:dc:d5:e7:86:a0:96:eb:e4:48:99:b7:
a2:cb:cf:85:a3:97:85:f2:ce:a6:e6:58:bd:ff:53:
09:95:40:91:67:b9:5a:3f:9e:04:48:bf:5b:c2:53:
bd:5f:35:cc:37:47:be:21:22:f1:5f:d6:9f:e2:49:
42:b0:ca:56:3b:31:68:c1:e2:43:d1:88:31:f5:e8:
e3:70:0b:7b:c9:53:e1:4f:06:28:2c:f3:32:c7:41:
c8:60:bd:6c:32:f1:ba:71:7e:5a:be:b2:66:da:60:
be:28:a3:40:8f:73:6e:7e:9b:0d:d6:e7:18:92:fb:
57:77:53:ba:75:c3:12:6e:03:8a:12:0b:5c:d3:92:
71:46:1c:01:85:39:50:8f:30:c3:de:85:e1:d0:0d:
6c:24:bc:4b:22:3a:89:cc:69:d6:aa:51:70:64:b4:
55:de:78:e0:80:1b:0e:89:d5:ba:78:b8:f0:fe:71:
18:0f:18:d4:78:77:c6:40:34:d9:5d:37:d5:56:9e:
ad:4c:94:7f:98:3b:b9:d8:a5:9f:fa:9b:ee:28:b0:
3f:a0:a2:a8:3e:e3:73:cb:d1:5f:93:5f:0e:59:6c:
38:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:77:55:9F:17:C4:E0:96:A6:8F:21:55:21:96:96:67:1A:5C:12:2C
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/nndVnxfE4JamjyFVIZaWZxpcEiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.227.0/24
Signature Algorithm: sha256WithRSAEncryption
97:18:35:47:f4:9d:14:4c:14:77:9c:6f:c7:47:8a:5e:80:c9:
27:15:44:8d:47:e4:6b:69:65:26:78:87:0f:2a:65:2a:9a:59:
95:29:fd:64:84:c3:d5:f9:7e:96:dc:5f:57:e2:f0:e3:e0:7c:
16:4b:9e:32:c9:03:a0:c4:e4:35:14:e1:36:b3:4a:af:32:a5:
9c:42:4b:4b:4c:3f:f3:f8:0a:ab:33:5e:8c:4e:34:30:1d:a9:
98:74:70:79:6b:22:4c:ea:23:66:05:93:c0:63:c0:0b:a2:0e:
1c:55:26:9e:e9:be:07:65:6a:ec:86:7b:00:86:90:86:fe:7f:
bb:3f:0a:03:40:dd:31:a7:91:57:1b:28:3d:bf:b5:8e:bc:ac:
da:c6:33:f4:34:c8:18:09:83:46:4d:4b:bc:7c:e4:55:f1:8e:
ad:73:2e:10:99:a3:de:38:b4:8e:c9:22:59:64:f3:ca:fe:07:
a8:f6:03:b2:82:57:eb:36:5c:02:99:cb:da:19:cb:b2:4d:18:
10:94:41:f5:51:08:14:28:d1:37:85:4e:85:d6:88:3f:92:eb:
71:15:07:b9:01:76:66:ae:94:f7:a8:68:ef:0d:ef:8d:9a:59:
dd:dd:88:0d:05:92:0c:9e:2d:cb:6d:9b:d7:08:cc:d2:e9:bc:
39:bd:d0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:08:19 2024 by rpki-client on console-ams.rpki-client.org