Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/nSmTGiiX-xXuyNkVZy0bfLHCvyI.roa
File: nSmTGiiX-xXuyNkVZy0bfLHCvyI.roa (raw, json)
Hash identifier: Wf5DAzLp4kYLgDfi1qdbOjMyk/DCeC5swChkvUpV8lw=
Subject key identifier: 9D:29:93:1A:28:97:FB:15:EE:C8:D9:15:67:2D:1B:7C:B1:C2:BF:22
Certificate issuer: /CN=a2074339bb216b85bdc83d61778821adf9149d56
Certificate serial: 018CC9BC026CCE2A67F2C6FA7E68FA32B1A9
Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/nSmTGiiX-xXuyNkVZy0bfLHCvyI.roa
Signing time: Tue 02 Jan 2024 10:33:10 +0000
ROA not before: Tue 02 Jan 2024 10:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48200
IP address blocks: 84.39.96.0/20 maxlen: 32
194.62.23.0/24 maxlen: 32
2a01:b1c0::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:02:6c:ce:2a:67:f2:c6:fa:7e:68:fa:32:b1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56
Validity
Not Before: Jan 2 10:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d29931a2897fb15eec8d915672d1b7cb1c2bf22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:eb:16:5b:a2:66:67:4f:f7:d9:fa:1a:e4:
07:8d:8f:6f:20:ed:9a:e4:9f:5f:6b:c5:7d:ad:47:
34:db:1f:b6:11:b2:4e:4b:51:c2:9f:36:6c:d8:58:
29:44:2c:bd:69:5c:03:57:11:85:89:05:33:89:d3:
12:be:ae:5d:c4:29:83:d1:1d:c0:c5:7f:b9:84:b7:
36:19:1e:4d:42:b7:a0:2f:0c:1f:33:01:47:b4:60:
49:3c:ab:d2:be:2c:cb:a7:9f:9a:60:d4:08:45:3e:
c7:d1:7e:8e:ee:00:77:97:b3:58:ea:75:8b:cf:08:
50:e3:57:d8:4f:b5:ed:5a:44:d2:81:18:8e:b0:d2:
ea:df:66:48:c0:82:24:e9:82:63:f4:00:f8:90:6c:
de:b3:14:49:10:bb:00:5a:1c:e6:d6:fd:c3:39:2e:
15:1f:cb:aa:d0:6e:c3:c5:0d:e4:75:10:17:84:83:
2f:7f:e0:8e:06:dd:06:50:30:94:c9:1e:02:62:87:
6e:13:d9:c2:80:48:d2:ff:ce:6e:7e:74:39:ae:4f:
75:bc:77:8b:ff:f0:44:e7:f1:b5:6f:87:96:7e:2a:
5e:0f:2f:8f:28:63:9c:14:b1:5b:5a:c7:8a:86:4f:
8e:e9:15:90:b4:ab:b6:18:a9:9a:69:7a:4f:9d:48:
56:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:29:93:1A:28:97:FB:15:EE:C8:D9:15:67:2D:1B:7C:B1:C2:BF:22
X509v3 Authority Key Identifier:
keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/nSmTGiiX-xXuyNkVZy0bfLHCvyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.39.96.0/20
194.62.23.0/24
IPv6:
2a01:b1c0::/29
Signature Algorithm: sha256WithRSAEncryption
23:7c:a2:12:62:21:3a:f3:3a:8d:a2:01:3c:a9:66:e9:fc:fc:
be:12:bf:aa:a3:f1:47:aa:2a:7b:d9:d3:b5:90:64:1d:de:df:
28:ed:53:83:b8:2b:ae:e6:ff:bf:b6:96:67:28:ab:4b:de:77:
60:8a:55:62:f9:9f:55:8b:11:45:4e:62:6e:3f:87:23:59:c1:
eb:f3:c6:91:31:01:c6:6d:e8:d7:61:a4:1c:be:1e:c8:70:3c:
e8:ca:c3:2d:dd:6d:2f:75:43:bc:47:03:10:8b:89:bc:2d:3a:
a4:04:52:dd:d3:26:f2:61:39:4f:24:03:2d:d8:7e:f7:74:80:
c1:08:5b:65:48:b1:87:6d:3f:2c:bc:2b:00:32:ae:45:e3:4d:
6f:90:dc:7e:31:72:d7:68:64:c1:54:44:09:48:6b:f4:83:7b:
4d:f2:12:ea:c7:3c:fb:a6:ed:7b:85:b2:3e:11:fb:6a:e7:5d:
bb:c0:30:45:b1:62:d1:d1:66:c9:a5:cc:f0:32:5e:10:54:7f:
57:bc:32:86:f9:0b:99:d6:7e:8f:78:94:63:b0:1b:b9:ac:b6:
ab:05:b7:7d:be:fc:24:7e:39:6c:50:e7:e6:d9:b3:df:83:af:
8f:3a:9b:77:7f:b4:b5:ba:3b:a6:63:e0:46:9c:74:cb:cc:db:
22:d8:1a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:39:23 2024 by rpki-client on console-ams.rpki-client.org