Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/NSsE053xCucfXB8V94HiBFPQwAU.roa
File: NSsE053xCucfXB8V94HiBFPQwAU.roa (raw, json)
Hash identifier: rqvV8paoypRg7IbdfLuRRJyCzsZUpHS4EX6hYaD2vNg=
Subject key identifier: 35:2B:04:D3:9D:F1:0A:E7:1F:5C:1F:15:F7:81:E2:04:53:D0:C0:05
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 018CC794EC6AB4492A276B06B462E2216F1C
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/NSsE053xCucfXB8V94HiBFPQwAU.roa
Signing time: Tue 02 Jan 2024 00:31:15 +0000
ROA not before: Tue 02 Jan 2024 00:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49453
IP address blocks: 178.20.31.0/24 maxlen: 24
178.20.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:ec:6a:b4:49:2a:27:6b:06:b4:62:e2:21:6f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 00:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=352b04d39df10ae71f5c1f15f781e20453d0c005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a2:16:7f:96:32:48:aa:78:7e:de:ea:e7:3b:
80:2e:ce:d1:7e:29:8a:9e:8b:9d:f0:09:39:37:a0:
da:4b:58:03:84:ef:f4:95:53:9f:33:0b:d6:5c:c2:
0a:96:75:21:5b:21:57:49:0b:fa:40:16:a3:e1:d4:
9c:be:f9:0f:c2:12:8f:d1:08:51:ae:95:8b:03:0b:
25:0d:22:96:e8:f5:79:5d:54:96:01:95:bb:85:61:
41:c0:eb:a5:1e:ac:3f:62:cd:bd:b7:9c:91:a8:7a:
54:fd:54:07:84:b9:b5:6d:69:ea:67:59:55:14:98:
16:e3:90:0f:b4:12:d7:ca:f3:8b:bb:d9:5b:11:ba:
5a:8e:85:65:87:6c:87:9b:3f:39:b0:87:0b:05:e6:
b1:2d:b4:2e:29:17:25:1e:d2:18:8c:6a:db:b2:23:
4b:a9:05:25:a8:f1:08:12:9e:8e:e1:19:d0:3a:d2:
a7:d0:50:bd:35:fb:91:fb:d2:7b:4f:9a:f5:3b:16:
c6:b9:51:db:92:e8:35:63:b2:cb:af:5b:ac:d7:7c:
ef:0a:a0:6f:94:6d:2f:c0:11:84:c0:7e:5f:cf:98:
47:8d:db:34:94:62:9a:57:93:17:36:ce:4b:c9:6b:
7b:7b:05:19:3a:eb:2c:3f:17:39:8d:de:e6:03:fe:
51:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2B:04:D3:9D:F1:0A:E7:1F:5C:1F:15:F7:81:E2:04:53:D0:C0:05
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/NSsE053xCucfXB8V94HiBFPQwAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.29.0/24
178.20.31.0/24
Signature Algorithm: sha256WithRSAEncryption
74:bc:fe:9b:d7:68:26:c2:8d:08:16:71:9a:c8:0b:11:c7:b3:
03:cf:1a:76:28:06:43:08:19:9a:04:32:b1:5a:94:0e:a6:d5:
85:c8:d6:38:b1:72:1e:76:18:b5:be:d6:d7:9d:ef:1d:b2:80:
35:f9:f2:84:44:cd:4e:ef:5e:27:b5:47:a7:6f:54:c8:e1:55:
1f:d3:77:0a:fe:3e:28:fc:22:4a:d3:28:75:83:9d:b6:2d:0c:
ab:5b:6f:0e:ad:80:cd:20:48:26:93:cd:6f:45:a6:a6:07:86:
df:48:8b:53:fd:bd:4e:db:61:fb:2a:3c:b3:ba:5e:77:67:6b:
79:0a:55:9d:cc:a3:be:49:ff:c9:25:69:be:ce:50:cc:fc:7e:
13:62:00:dd:b0:58:89:73:07:7e:65:05:b5:42:ec:76:9f:a0:
3f:d1:82:84:ee:3a:e1:1b:5e:bc:3f:ca:89:18:5b:9e:4b:c8:
d4:4a:ce:4e:72:96:30:c9:58:91:7b:e3:0e:34:3d:5a:cd:b4:
0a:e6:f6:00:14:4c:46:66:9c:80:a7:88:cd:b7:cc:b2:5b:09:
4f:62:d7:3f:c8:a4:44:08:48:f6:50:bc:e7:51:c8:4d:a3:31:
dd:17:b2:07:fe:9e:23:d1:98:dd:c9:ad:80:a7:92:44:ae:82:
f9:d0:5e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:47:24 2024 by rpki-client on console-ams.rpki-client.org