Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/cNL39TTohO1gDo439pHRmpo-7LA.roa
File: cNL39TTohO1gDo439pHRmpo-7LA.roa (raw, json)
Hash identifier: tBez5PjjsvkxwdfEdUBlqdtB2m1EFNsWezLblmDCynU=
Subject key identifier: 70:D2:F7:F5:34:E8:84:ED:60:0E:8E:37:F6:91:D1:9A:9A:3E:EC:B0
Certificate issuer: /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Certificate serial: 018CC72744170200FD87ECED64A4F202F4C6
Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/cNL39TTohO1gDo439pHRmpo-7LA.roa
Signing time: Mon 01 Jan 2024 22:31:28 +0000
ROA not before: Mon 01 Jan 2024 22:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208746
IP address blocks: 193.56.233.0/24 maxlen: 24
193.56.235.0/24 maxlen: 24
193.56.236.0/24 maxlen: 24
193.56.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:44:17:02:00:fd:87:ec:ed:64:a4:f2:02:f4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Validity
Not Before: Jan 1 22:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70d2f7f534e884ed600e8e37f691d19a9a3eecb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:42:78:64:c6:8e:7d:d0:13:4b:dd:ca:6c:02:
8a:b9:6b:c9:c8:be:36:65:46:50:5e:9c:36:d3:ea:
00:07:99:e6:52:d3:f9:2b:c4:97:2c:fd:a6:3a:f1:
16:38:09:f8:ca:7e:95:32:6f:fc:de:0f:00:da:fc:
03:c8:38:89:26:f7:7e:bf:72:89:e6:2d:75:b6:f6:
45:78:ec:e6:71:cf:05:ec:fa:93:d4:4f:af:89:78:
45:6c:85:25:f2:5a:24:e7:37:50:fa:11:45:4d:74:
c6:9b:6b:f9:3a:1a:77:c4:32:bd:7d:ab:b3:bb:4a:
07:0d:34:05:ec:22:4d:fb:7b:11:46:88:c1:e3:35:
52:ae:de:2c:4e:e5:f8:8e:c0:c8:e1:47:04:16:f0:
3d:a2:23:63:1b:9d:66:1d:53:81:64:ab:38:14:c3:
84:45:e2:78:f0:66:e2:90:57:68:a2:f2:29:3a:d7:
d5:f3:83:2c:d3:79:a2:c5:98:23:97:e0:82:18:ff:
1c:0b:33:26:8a:13:15:c3:4e:bc:22:11:9b:e2:f4:
d1:d7:5c:83:11:75:08:35:c2:18:05:86:84:28:6d:
9e:a3:19:93:0b:13:59:2d:bf:ec:52:2b:71:d2:52:
c4:51:16:3a:ed:3b:01:c4:e9:48:ac:25:fc:bf:76:
18:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D2:F7:F5:34:E8:84:ED:60:0E:8E:37:F6:91:D1:9A:9A:3E:EC:B0
X509v3 Authority Key Identifier:
keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/cNL39TTohO1gDo439pHRmpo-7LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.233.0/24
193.56.235.0-193.56.237.255
Signature Algorithm: sha256WithRSAEncryption
8d:42:77:f1:35:0f:42:80:f0:3b:db:d7:e5:95:06:0c:f1:f0:
b8:38:a0:bd:5d:f9:6e:90:85:d2:01:ef:cc:79:3d:6c:7e:31:
41:31:d9:88:3c:78:3b:df:08:52:dd:92:74:db:b1:b4:ed:88:
f1:2b:c3:83:ef:01:51:a8:98:b9:cf:1a:9b:be:e4:c7:90:4c:
22:e6:e3:35:12:54:30:3d:ce:30:18:41:4a:81:57:d5:9f:f9:
c7:d8:82:ef:5c:46:ac:e8:e5:22:4f:51:a8:dd:62:69:a8:3b:
81:07:7a:81:01:b5:0c:57:dd:d5:ea:37:3e:65:20:b9:a5:44:
b6:18:bc:82:a0:f2:bf:d4:a5:96:51:f8:77:36:72:a9:5e:cc:
ea:7d:3d:3e:a3:d1:2b:92:73:ba:2b:5d:03:4d:64:6d:89:71:
a4:db:32:4c:b8:a7:cb:f8:e2:6c:83:de:9a:3e:50:f1:d3:1d:
85:e8:05:80:96:c6:40:13:02:22:16:3b:17:2a:95:4d:85:a2:
aa:77:9e:d3:ec:01:58:a7:52:84:fb:48:d7:38:b6:a6:65:fa:
63:7e:0b:6f:60:2a:83:9c:e7:48:54:a0:89:f9:2e:68:5d:0c:
16:a2:1b:5e:59:2d:51:0a:eb:60:64:07:39:a2:10:ee:47:a8:
98:55:47:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 18 01:59:22 2024 by rpki-client on console-fra.rpki-client.org