Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/nrAbi_s5MUQlsYFWj9hdj-I_feo.roa
File: nrAbi_s5MUQlsYFWj9hdj-I_feo.roa (raw, json)
Hash identifier: bPs3skrgCxCAFH0ZjfYmotyC9RrXaw1iQngmJJJYPlw=
Subject key identifier: 9E:B0:1B:8B:FB:39:31:44:25:B1:81:56:8F:D8:5D:8F:E2:3F:7D:EA
Certificate issuer: /CN=cf66224bcfb8b82deaabac8c4ca250371b974611
Certificate serial: 018FA5E86869C58AF8CC38D2B2C0C6F03C58
Authority key identifier: CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/nrAbi_s5MUQlsYFWj9hdj-I_feo.roa
Signing time: Thu 23 May 2024 14:43:42 +0000
ROA not before: Thu 23 May 2024 14:43:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31742
IP address blocks: 45.14.228.0/22 maxlen: 22
46.255.248.0/21 maxlen: 21
83.137.224.0/21 maxlen: 21
93.191.24.0/21 maxlen: 21
185.119.20.0/22 maxlen: 22
212.85.252.0/22 maxlen: 22
2a00:d300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a5:e8:68:69:c5:8a:f8:cc:38:d2:b2:c0:c6:f0:3c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf66224bcfb8b82deaabac8c4ca250371b974611
Validity
Not Before: May 23 14:43:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9eb01b8bfb39314425b181568fd85d8fe23f7dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2a:15:54:e1:af:25:c7:1d:ff:46:a3:ff:ac:
d1:e7:a3:88:2b:7b:67:27:e8:19:61:f2:08:ff:4f:
4a:92:3f:51:e6:df:cd:af:22:72:56:96:33:70:57:
f4:a7:e1:71:4f:16:66:2a:54:36:cc:e3:ad:a5:1b:
ed:91:72:80:76:c4:19:f0:3f:2c:32:5d:01:83:cd:
f8:97:dd:20:61:d6:d0:94:fb:6e:92:5b:b6:c5:89:
c3:ed:8e:da:86:9f:61:a3:b2:7a:1a:55:03:bc:9c:
4a:d7:ee:3d:03:cc:1f:82:ca:f3:c8:6e:ca:d7:53:
10:7e:b7:1b:5c:7a:cd:30:f0:e3:75:54:b9:c6:4b:
0a:2f:b5:b0:40:a9:23:60:33:3b:13:d8:ec:08:44:
41:a3:29:58:76:b5:63:54:ad:01:d3:87:fe:98:5b:
86:0f:55:b0:f8:06:bf:8c:e3:59:b7:ba:89:c3:52:
1b:83:8f:ef:3e:9a:52:26:ca:14:0c:51:65:0d:e9:
78:83:87:b4:28:85:cd:d7:75:ce:da:55:8c:e3:22:
68:47:96:f9:77:11:e9:5c:26:22:77:5a:7f:ec:14:
ed:97:f7:d2:0e:8a:bb:d7:42:88:91:58:de:e1:17:
8c:3f:4c:0d:a6:c8:2d:c0:6e:10:05:49:57:7e:ca:
2b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B0:1B:8B:FB:39:31:44:25:B1:81:56:8F:D8:5D:8F:E2:3F:7D:EA
X509v3 Authority Key Identifier:
keyid:CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/nrAbi_s5MUQlsYFWj9hdj-I_feo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.228.0/22
46.255.248.0/21
83.137.224.0/21
93.191.24.0/21
185.119.20.0/22
212.85.252.0/22
IPv6:
2a00:d300::/32
Signature Algorithm: sha256WithRSAEncryption
4e:b4:3b:1b:b7:c6:a8:00:41:38:4f:a5:51:8c:78:96:eb:2e:
04:ee:ea:44:96:ad:1b:93:e2:0c:44:8b:2b:34:87:f2:79:da:
6d:b8:17:80:a0:e5:18:b9:8e:04:c6:31:11:8f:53:8b:0e:fd:
2f:26:46:25:5f:ba:33:04:71:65:6b:7d:93:15:2d:f9:8b:1c:
bb:41:db:46:11:a6:e9:a1:9d:87:b1:fd:79:da:70:49:c9:6e:
b6:78:d0:fc:61:37:0f:35:77:a8:17:32:57:61:35:21:4c:09:
5b:d1:eb:bb:1f:e2:7b:aa:6d:f7:b8:4c:06:88:5f:e6:19:10:
32:28:fd:89:06:31:9f:59:6d:70:43:1a:28:d4:dc:4f:81:76:
e3:94:84:6b:64:0a:e1:cc:a5:51:42:1a:84:80:b0:c7:3b:82:
3b:19:52:6a:8e:7c:fb:10:6a:ca:e8:28:ba:b0:96:13:81:29:
dd:79:28:be:d6:9e:b1:1a:8a:8e:37:bb:2e:93:0b:49:60:d6:
9a:b2:2a:ac:af:22:a1:04:5b:6d:06:78:79:aa:36:55:0c:64:
eb:bc:5d:7c:da:51:0c:14:4c:46:76:ea:2b:1d:e3:90:ef:8b:
1b:a4:af:fe:db:94:1d:a1:a6:86:70:0c:c4:c9:35:7a:87:c5:
80:99:e4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:03:46 2024 by rpki-client on console-ams.rpki-client.org