Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/N1CHLbvL93EX_Xx7e6H9V7mFFWo.roa
File: N1CHLbvL93EX_Xx7e6H9V7mFFWo.roa (raw, json)
Hash identifier: mcIMl2E702kkPcVXkYOv/1SSQfzH1XAVdDJmC7aS6so=
Subject key identifier: 37:50:87:2D:BB:CB:F7:71:17:FD:7C:7B:7B:A1:FD:57:B9:85:15:6A
Certificate issuer: /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Certificate serial: 018E9E526B0B2178767A90D726B638E719F2
Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/N1CHLbvL93EX_Xx7e6H9V7mFFWo.roa
Signing time: Tue 02 Apr 2024 10:19:45 +0000
ROA not before: Tue 02 Apr 2024 10:19:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12541
IP address blocks: 212.31.198.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9e:52:6b:0b:21:78:76:7a:90:d7:26:b6:38:e7:19:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Validity
Not Before: Apr 2 10:19:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3750872dbbcbf77117fd7c7b7ba1fd57b985156a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:36:5b:f6:b8:0b:3b:5f:af:a2:e0:78:3b:03:
08:55:85:57:c5:e3:56:08:a9:b4:a6:61:e9:9d:f4:
d6:1c:0f:1f:2f:c1:30:19:17:76:9e:a6:b4:ce:4c:
13:fb:0f:de:6e:fc:b0:e1:5d:59:f5:46:0f:49:3d:
e9:8e:f3:e2:e1:a3:df:5c:9e:1d:52:ff:81:bf:71:
78:28:f0:41:78:b9:72:c6:c5:10:50:25:43:da:f9:
ef:c4:aa:a0:9d:65:62:f9:49:69:e1:87:86:ef:8f:
43:53:05:05:89:63:0b:aa:9b:81:50:96:f9:0a:48:
85:cb:11:ae:18:65:57:48:2c:5f:7f:c0:f2:ed:72:
8c:f6:1f:c4:e6:cb:1a:64:35:29:9f:41:85:32:98:
e4:50:14:a4:ca:6d:5f:a9:86:34:1b:97:e5:15:10:
0b:9a:57:ac:39:51:48:36:c4:23:32:74:58:0f:46:
9f:70:7d:49:d0:e5:45:74:95:d8:db:8f:bc:38:c0:
da:f6:39:98:f3:89:80:d5:32:86:34:14:60:bf:38:
7c:4d:62:34:1a:97:ee:b5:0a:5a:87:61:58:2d:3f:
cf:6d:3b:f3:95:0b:ef:73:3c:03:93:25:a2:88:f8:
5a:83:94:ba:70:b6:29:08:a3:61:fd:86:2b:cb:81:
61:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:50:87:2D:BB:CB:F7:71:17:FD:7C:7B:7B:A1:FD:57:B9:85:15:6A
X509v3 Authority Key Identifier:
keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/N1CHLbvL93EX_Xx7e6H9V7mFFWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.31.198.0/23
Signature Algorithm: sha256WithRSAEncryption
88:f9:fe:b1:39:a6:d9:7b:fb:e7:b0:1e:48:a1:7c:83:c4:26:
7b:5f:7c:0d:cf:b5:43:fc:5d:64:30:e5:e5:1e:6b:a0:39:54:
a9:f2:a2:71:d3:d7:da:93:b5:ea:ba:cc:a8:9d:25:c0:f8:42:
9a:26:62:db:d4:95:f0:c5:dc:df:12:17:38:30:fe:a9:aa:dc:
8e:22:46:6c:28:8b:e9:02:b8:d8:49:96:2d:0f:53:7e:ec:c8:
ea:50:35:a9:53:61:7f:fb:85:5e:18:8f:3a:53:a9:b7:b7:da:
8f:00:96:8d:a6:75:22:cc:6e:79:67:5f:a4:93:4d:63:b1:50:
63:e5:f7:0d:a2:f6:95:7c:67:50:02:e9:fe:fb:42:bb:f5:46:
f9:b3:59:e3:87:99:a6:1f:f2:62:85:4c:a3:1c:d8:9b:b1:6e:
10:99:59:8f:be:74:39:54:fb:8b:5e:0c:2e:1b:4e:8c:61:d1:
ae:47:3c:8c:53:5a:2d:ef:32:bf:b3:07:dd:c8:6e:04:1e:94:
68:6c:33:30:6c:03:05:79:78:79:67:a3:80:76:52:77:f7:5a:
d3:f2:6d:66:cb:83:a3:96:cb:bd:e5:86:b7:90:ef:3c:a8:82:
6b:30:b5:7b:aa:6b:1b:f8:89:2d:a1:e0:1b:cd:00:fa:f3:06:
64:a7:df:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 06:22:37 2024 by rpki-client on console-fra.rpki-client.org