Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/NGYnJlEu-t1jidLBpj5UbLfo8TY.roa
File: NGYnJlEu-t1jidLBpj5UbLfo8TY.roa (raw, json)
Hash identifier: sK8nhlGsIh310F6ja7mFacKWgCrf8xnxf1HuPF7tZjE=
Subject key identifier: 34:66:27:26:51:2E:FA:DD:63:89:D2:C1:A6:3E:54:6C:B7:E8:F1:36
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 018CC6B8167B4EE73AEDF12F9DC4A85C6DB1
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/NGYnJlEu-t1jidLBpj5UbLfo8TY.roa
Signing time: Mon 01 Jan 2024 20:30:02 +0000
ROA not before: Mon 01 Jan 2024 20:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42115
IP address blocks: 213.87.192.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:16:7b:4e:e7:3a:ed:f1:2f:9d:c4:a8:5c:6d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 1 20:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34662726512efadd6389d2c1a63e546cb7e8f136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d3:19:d3:6e:71:71:fe:0d:58:20:00:1b:4c:
4e:0e:ed:c6:cd:19:1b:af:59:5e:0d:57:cb:8d:77:
3f:cc:4a:9a:a2:2b:ec:d2:5f:83:bd:5f:75:de:25:
a1:4b:24:b8:ab:97:45:a2:db:1c:04:d3:ac:31:74:
f6:95:b8:87:1f:f0:51:fa:a9:e3:9a:01:c5:ac:99:
22:3c:29:c6:25:7a:e0:90:2f:ae:3a:1b:ba:2d:30:
d9:82:73:d8:60:84:ce:83:77:e8:db:50:d9:93:a4:
14:ee:2b:ef:0a:4d:ff:10:b3:3f:5f:7b:ed:5e:35:
a1:77:e1:11:a7:25:a2:25:e0:c4:c2:6b:56:df:b0:
5b:c9:b9:f8:14:a4:4a:88:df:97:bf:e5:5b:51:b2:
04:a1:67:48:ab:f9:1d:52:91:b5:57:50:a9:c6:b8:
0e:b3:a1:7a:5c:d7:3e:8b:b1:f0:d9:00:a7:3e:9d:
fc:5b:16:54:9c:69:c5:3c:56:6d:fa:c1:fe:03:10:
56:6a:3b:24:47:48:b4:8e:a9:c8:b7:df:f5:a4:bd:
d6:50:3d:ca:09:28:5b:a3:24:e3:e3:ed:ff:57:ea:
a0:cb:0f:07:6c:dd:94:9b:91:d2:f8:e9:f0:81:cb:
75:f0:50:12:36:a4:02:94:84:5d:51:f0:8c:46:6b:
5a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:66:27:26:51:2E:FA:DD:63:89:D2:C1:A6:3E:54:6C:B7:E8:F1:36
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/NGYnJlEu-t1jidLBpj5UbLfo8TY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.87.192.0/21
Signature Algorithm: sha256WithRSAEncryption
70:59:a8:08:07:3a:ad:4a:a9:7b:4b:86:e3:0d:bf:7b:35:1c:
5f:a6:9c:43:60:39:2c:0e:fb:d3:1c:73:89:ca:6b:01:65:61:
4d:8d:3b:7d:3d:cb:a8:c0:7c:84:99:7c:ff:d0:0a:38:a3:01:
c5:45:8f:26:19:45:c0:a3:fe:56:ea:c8:9f:ea:dd:b1:d5:95:
45:c8:3f:84:b5:30:f9:7c:6b:51:9f:6c:37:fb:c5:d0:b4:9a:
5b:7c:d2:9a:1b:d6:a2:ba:4a:a3:d8:2f:51:e3:a9:b6:27:4f:
1c:88:12:36:2f:d6:3c:08:cb:1b:af:a6:e5:2c:83:f2:3a:02:
9f:f6:0a:fc:dd:44:b2:d0:57:0d:24:9f:54:90:bc:32:99:6c:
d2:b2:2b:27:eb:4a:38:0e:0f:b4:b4:5f:62:66:dd:49:3e:33:
b6:52:85:17:14:ac:a2:0e:38:41:3e:47:2d:a6:eb:e2:81:3f:
03:c6:97:13:8e:68:cf:24:da:12:b6:bb:52:3f:ab:db:72:ff:
78:2b:d6:f2:60:e5:cd:ef:7e:6a:ca:a3:b3:bd:c8:c5:fb:8a:
b2:e7:57:76:19:25:21:10:16:c0:a5:bc:95:79:62:cb:f2:88:
7e:23:fa:f7:68:91:b0:cf:69:63:56:94:11:9b:50:c2:0a:fe:
8c:3a:bb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:16:56 2024 by rpki-client on console-ams.rpki-client.org