Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/NcCO14KGGGK5bKqcWdAQzBhFLX4.roa
File: NcCO14KGGGK5bKqcWdAQzBhFLX4.roa (raw, json)
Hash identifier: 8TM468SHsaGRVM7etlYc/2v/ZsiAPeIf4EWBa7BQxT0=
Subject key identifier: 35:C0:8E:D7:82:86:18:62:B9:6C:AA:9C:59:D0:10:CC:18:45:2D:7E
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 01927B526B83C961142C9572B20C16B86D43
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/NcCO14KGGGK5bKqcWdAQzBhFLX4.roa
Signing time: Fri 11 Oct 2024 11:24:11 +0000
ROA not before: Fri 11 Oct 2024 11:24:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 103.216.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7b:52:6b:83:c9:61:14:2c:95:72:b2:0c:16:b8:6d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Oct 11 11:24:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35c08ed782861862b96caa9c59d010cc18452d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:59:20:ad:37:4c:91:39:a1:b5:3b:cc:ff:
01:71:4b:44:28:b2:ce:9a:16:56:5c:ae:7c:c9:c3:
d9:38:ea:dc:77:b2:02:69:82:a3:7a:13:83:2a:32:
2b:64:68:b7:3d:da:f4:a7:99:60:3b:6a:b5:c6:98:
be:5a:3b:77:cb:1a:64:e1:70:31:4f:b7:1b:73:a9:
b7:20:b3:38:4c:52:f4:c9:13:3d:63:7f:72:f8:06:
6e:4e:05:b8:c2:b5:1d:a3:d8:5e:4d:32:f3:11:e0:
f2:a8:47:ad:cc:2b:7b:5b:37:77:fe:83:38:a2:67:
38:dd:2a:4f:b2:bd:00:6f:bc:fe:af:b1:34:8a:8b:
60:af:40:70:18:56:9a:49:38:a3:0a:fd:2b:90:16:
f2:25:24:6a:57:3d:9e:aa:e6:fc:01:ce:c4:7d:ca:
84:c5:6d:fc:e6:22:19:99:6c:54:ca:ed:3e:6c:86:
4b:a1:52:54:57:18:56:46:2a:67:0b:60:fd:41:b3:
dc:fb:77:a6:c6:5d:53:80:0e:98:8a:ed:a2:57:81:
91:e1:8c:e9:06:48:3a:e2:03:52:96:15:bd:d2:c5:
dc:e7:f2:b4:cb:a8:29:ca:10:9d:0e:d4:6d:1d:c0:
25:61:a0:8b:3a:99:e1:a4:bb:10:91:c3:e9:e6:83:
4e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C0:8E:D7:82:86:18:62:B9:6C:AA:9C:59:D0:10:CC:18:45:2D:7E
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/NcCO14KGGGK5bKqcWdAQzBhFLX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.174.0/24
Signature Algorithm: sha256WithRSAEncryption
37:88:10:ec:c7:2f:47:91:3f:d4:97:19:4e:45:7f:34:81:f1:
d7:a4:fa:95:d0:8c:ef:b1:34:54:a1:ec:32:5b:1e:cb:71:cc:
0b:4c:c3:6b:b2:d9:c5:74:4d:69:e7:58:82:04:35:c7:73:96:
ac:2f:64:ea:67:db:5e:72:a9:86:0a:64:e9:ef:a9:56:72:42:
97:b4:54:46:2a:0a:09:59:48:c3:e2:fb:42:ed:5a:94:b0:b9:
30:85:1e:7c:9d:ee:8e:f2:bc:a1:a5:82:09:25:c2:d7:b7:43:
11:7d:be:fb:dd:a5:b8:17:ad:b8:b5:3a:82:d0:68:8f:a9:3c:
45:48:08:cd:35:c7:86:4b:94:db:8c:de:12:d2:f3:2d:79:27:
88:e6:e6:63:88:e7:00:b6:91:84:d4:58:47:18:10:97:7c:75:
46:df:25:a8:8a:74:7d:ca:3b:f9:a3:cc:9c:fc:44:4a:da:84:
85:c4:23:e9:80:c7:95:da:2b:81:a8:90:22:4a:81:cc:16:ee:
12:59:e9:6d:a9:c1:c5:b8:cf:32:01:4a:2a:f4:d2:f4:c0:fa:
ed:3f:bd:97:b4:b6:6e:dd:92:ac:9a:ff:24:bc:96:6d:59:06:
15:e2:34:2e:79:26:51:84:4a:20:d4:3d:f2:52:b0:1b:11:3d:
e7:70:d8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:48 2024 by rpki-client on console-fra.rpki-client.org