Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nXQ79W198i9bys-mX6R6vXxGKiM.roa
File: nXQ79W198i9bys-mX6R6vXxGKiM.roa (raw, json)
Hash identifier: ki7P/nTLZsMQjdFu8UqKU8e2HS2FwUXNFynsLhs6VCo=
Subject key identifier: 9D:74:3B:F5:6D:7D:F2:2F:5B:CA:CF:A6:5F:A4:7A:BD:7C:46:2A:23
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018CC56E155FAAA5F1C1D815374E128CCA66
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nXQ79W198i9bys-mX6R6vXxGKiM.roa
Signing time: Mon 01 Jan 2024 14:29:35 +0000
ROA not before: Mon 01 Jan 2024 14:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212384
IP address blocks: 178.253.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:15:5f:aa:a5:f1:c1:d8:15:37:4e:12:8c:ca:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 1 14:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d743bf56d7df22f5bcacfa65fa47abd7c462a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:93:54:a5:d6:b8:2d:13:52:79:e5:64:6a:2b:
e1:2d:2f:9f:f0:4f:a1:3d:fb:45:b4:83:a4:03:8a:
09:42:d6:b4:c9:0c:c3:84:99:38:61:1c:91:1a:54:
5e:2b:f5:89:0c:50:bf:91:d9:06:1d:55:6f:a0:ba:
58:19:c3:4d:12:9d:3c:ab:c1:ce:6d:04:6f:20:a4:
dc:08:29:e2:d5:84:03:62:09:d1:16:83:27:83:c0:
95:26:8d:0f:8f:6b:b2:09:c1:af:23:c9:d6:fd:76:
93:6a:c7:a3:2b:40:18:9e:90:ba:88:75:67:33:ae:
62:dc:6e:f6:e0:2a:f9:4c:e8:93:fd:ab:89:06:c3:
78:5e:2c:df:14:2a:3f:c2:73:c0:69:82:4b:61:18:
9e:83:b9:cd:66:63:5b:9b:95:7d:91:2d:e8:bf:00:
93:5e:54:a3:04:c8:d2:92:f2:62:76:7a:d7:69:a3:
14:36:3b:17:c3:c2:1a:dd:6f:c9:2b:10:e7:75:a7:
8b:52:79:52:41:30:91:ad:a5:92:dd:0a:99:ae:55:
d5:6e:d7:f3:4f:a8:e6:ef:2b:8f:a2:88:f7:16:20:
68:c5:12:5e:8d:c5:10:a3:ab:d1:ab:22:fc:86:77:
f1:50:9e:1d:d3:2f:3e:9a:cc:4c:a1:a6:aa:95:f0:
24:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:74:3B:F5:6D:7D:F2:2F:5B:CA:CF:A6:5F:A4:7A:BD:7C:46:2A:23
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nXQ79W198i9bys-mX6R6vXxGKiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.215.0/24
Signature Algorithm: sha256WithRSAEncryption
93:4b:b4:2a:06:1a:63:55:7e:a2:ad:71:1d:65:a3:1c:c2:78:
d8:cc:c0:6c:06:2c:50:44:e0:85:49:07:b2:ce:9a:5a:06:c9:
3d:d1:ec:cf:8e:b5:7a:24:ca:41:e1:1f:4c:8d:1c:13:c3:41:
f8:da:91:9b:18:4a:83:23:13:99:22:0b:2b:72:5b:5d:b0:72:
11:8c:d4:63:a5:cb:d9:ee:b8:94:8b:21:5d:4c:82:f3:2b:86:
20:09:3b:69:f6:ef:6c:e1:a1:c7:08:e8:9b:83:ee:85:4b:13:
80:f7:52:14:ed:e7:56:48:47:2b:6a:e6:e2:54:f1:55:f3:3d:
77:29:62:c3:ee:35:08:f5:91:4d:23:d9:14:e1:63:19:75:a1:
65:61:3e:ca:a1:76:24:55:84:b7:dd:37:9c:7f:dd:13:f1:cf:
a6:3e:1b:61:cf:53:bb:89:68:91:a9:ad:b6:c8:62:ee:a4:2b:
0a:14:ff:63:b0:27:9c:11:12:96:c0:3f:88:c3:ef:2a:65:63:
42:62:cd:e6:da:a9:7d:b1:37:49:2a:7e:2f:4b:d1:ee:ad:57:
d3:6f:d1:1d:c9:34:81:1e:50:14:47:b5:3e:4d:82:08:90:08:
9d:80:7e:e4:fd:41:67:c1:df:56:bf:d0:30:43:12:d1:7d:29:
79:78:7f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:19:47 2024 by rpki-client on console-ams.rpki-client.org