Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/Neqj_Uo2IH979jpQtFxOAhP3KgU.roa
File: Neqj_Uo2IH979jpQtFxOAhP3KgU.roa (raw, json)
Hash identifier: eMlQILlUSDHWc+VPLLsa+M+kQcgb5M997fVJWehkeBA=
Subject key identifier: 35:EA:A3:FD:4A:36:20:7F:7B:F6:3A:50:B4:5C:4E:02:13:F7:2A:05
Certificate issuer: /CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Certificate serial: 018CC56EE09BB70B21EF9A30E902C2AE9427
Authority key identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/Neqj_Uo2IH979jpQtFxOAhP3KgU.roa
Signing time: Mon 01 Jan 2024 14:30:27 +0000
ROA not before: Mon 01 Jan 2024 14:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34079
IP address blocks: 188.92.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e0:9b:b7:0b:21:ef:9a:30:e9:02:c2:ae:94:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Validity
Not Before: Jan 1 14:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35eaa3fd4a36207f7bf63a50b45c4e0213f72a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:06:ba:de:1c:ed:81:07:92:0c:d1:7c:38:d8:
35:22:71:66:91:7a:f7:9d:4f:7c:7e:44:68:d3:b3:
b2:73:0e:e9:a5:ac:a1:e8:ce:80:90:a2:d0:2e:18:
06:01:67:db:77:b1:7f:fe:34:d9:69:bf:02:b2:8f:
5e:cb:7e:bd:0d:d2:32:ac:c3:51:09:80:d6:4f:e4:
61:eb:fc:48:f3:71:29:ee:0c:4a:c3:c3:f8:4c:71:
fa:90:c2:58:29:59:28:d0:85:c4:c9:c9:96:e0:bb:
8e:ef:86:db:69:af:c5:b2:98:82:5c:1c:05:9a:68:
b2:ca:09:9d:c0:22:79:7a:7a:87:45:1a:1d:1e:6b:
6d:33:de:ab:54:56:96:cb:64:43:85:ac:52:ed:3f:
f7:af:7f:b8:8a:07:7c:d6:88:b3:8e:48:0a:93:2e:
ce:11:a4:20:50:e9:6b:8d:d7:b0:f7:09:59:fd:f5:
f3:b3:17:43:74:41:f1:75:29:e5:95:4d:03:8d:45:
2f:57:fa:02:d1:06:cd:2b:3e:c1:ef:f0:3c:19:d2:
80:66:f8:b7:fb:ff:82:a0:c1:f7:a0:40:42:d5:4f:
7e:aa:f9:78:ed:c9:3b:cf:f0:04:58:c6:b9:57:47:
64:bb:3d:b5:fd:f1:fe:c6:b2:c4:6b:2b:8d:91:c7:
36:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EA:A3:FD:4A:36:20:7F:7B:F6:3A:50:B4:5C:4E:02:13:F7:2A:05
X509v3 Authority Key Identifier:
keyid:66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/Neqj_Uo2IH979jpQtFxOAhP3KgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.138.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:89:47:62:8b:9f:c6:da:85:58:86:49:90:63:d8:63:29:06:
36:56:09:44:a8:0d:b3:ef:6a:2b:ae:78:9e:e6:6a:1b:c4:a6:
c2:c8:e2:d9:fa:2a:bf:ac:e4:bf:9a:23:14:db:e8:1d:f9:44:
28:e0:e7:4b:0b:b9:ac:21:68:4a:3f:00:79:c9:30:3f:aa:79:
b6:c0:51:b9:4f:9c:34:38:09:61:fb:e2:4e:ba:5e:e6:fe:8c:
bd:5e:da:75:56:13:70:3d:a2:73:15:40:47:99:6b:32:cd:7c:
a0:9f:d5:cf:80:f0:ff:bc:e4:63:16:2d:3f:e7:5c:50:56:43:
1d:1a:56:2c:95:9c:98:00:c8:64:75:b7:ae:01:7c:95:6d:30:
93:d7:22:58:dc:eb:b2:d3:64:fb:38:fc:c4:d1:67:19:a6:4e:
4a:81:78:9e:c3:92:01:23:99:77:d4:d8:d8:9d:91:18:0c:c5:
01:45:65:de:a4:e1:49:8a:3f:7c:50:2c:c6:ef:62:87:f0:dc:
0b:14:84:59:fa:33:fd:1f:a1:16:89:11:8b:69:39:2e:79:23:
1a:8d:e6:9c:80:8a:f1:e5:7b:6a:b1:4d:ed:c4:28:2b:05:e1:
9d:c0:e1:2f:bb:41:02:8b:58:86:d2:14:15:8c:96:06:63:11:
3b:a8:50:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:38:56 2024 by rpki-client on console-ams.rpki-client.org