Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/np0kEVldedmEeCv4g9SXuQu6fm8.roa
File: np0kEVldedmEeCv4g9SXuQu6fm8.roa (raw, json)
Hash identifier: vFvRRGxXBWGhG9wAH4aRy6IFZCrxDLiQ8UUGCzHX53I=
Subject key identifier: 9E:9D:24:11:59:5D:79:D9:84:78:2B:F8:83:D4:97:B9:0B:BA:7E:6F
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018E32D380A7B1E9AC7B8109734500CB608B
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/np0kEVldedmEeCv4g9SXuQu6fm8.roa
Signing time: Tue 12 Mar 2024 13:21:45 +0000
ROA not before: Tue 12 Mar 2024 13:21:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215347
IP address blocks: 77.92.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:32:d3:80:a7:b1:e9:ac:7b:81:09:73:45:00:cb:60:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Mar 12 13:21:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e9d2411595d79d984782bf883d497b90bba7e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:16:0b:b9:74:f5:ce:ad:d9:d8:39:9a:19:6f:
55:26:0a:5b:8e:e6:d8:2e:82:df:0a:eb:2f:e7:36:
b2:8d:a3:88:1b:aa:fa:bc:01:bc:d2:df:30:9f:7b:
72:f2:79:0e:6b:ce:e5:a6:65:fb:dc:66:12:c4:53:
59:5c:e7:4b:e9:93:cd:f1:ad:50:48:b0:15:3c:da:
dd:f4:ad:8e:e5:d9:be:0f:8f:bc:de:4d:67:49:4f:
bc:ad:d1:ad:83:1e:23:56:a7:4a:43:cb:09:64:1f:
5d:05:dd:6c:8b:60:a1:b2:24:fe:79:4d:49:66:58:
ef:1e:ec:db:0d:a8:98:39:a2:cc:15:74:6a:3a:ca:
13:49:30:0b:9c:3f:1d:36:91:f1:e7:0a:2a:67:2d:
37:f1:b2:ea:67:e5:a5:d8:d0:19:52:88:ce:f2:79:
48:48:b7:83:53:8f:c1:5c:17:83:ac:86:f6:6b:9d:
67:ee:f3:df:1c:0f:48:12:75:02:ed:96:96:c8:f9:
71:dc:e8:9b:67:37:6f:07:74:75:1c:af:28:fc:cb:
48:9e:4d:20:9f:dc:9a:cf:67:51:b5:17:ec:d5:52:
f8:aa:5d:8e:05:3a:bd:0b:24:92:47:5f:52:ca:4f:
e7:c2:5e:64:11:85:6e:7c:30:c0:08:84:58:c2:32:
cd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9D:24:11:59:5D:79:D9:84:78:2B:F8:83:D4:97:B9:0B:BA:7E:6F
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/np0kEVldedmEeCv4g9SXuQu6fm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.147.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:39:a1:7d:09:37:25:60:79:24:fd:34:91:56:c9:50:31:b6:
4d:87:d1:fe:60:1f:dc:27:7a:4d:20:2a:ad:a1:10:a6:52:6e:
85:70:38:40:86:fe:ac:44:f4:5f:09:10:ce:4f:3e:4f:47:01:
18:88:8b:2d:20:aa:bc:74:dd:da:90:43:36:c8:77:10:e3:66:
4a:39:dd:eb:09:db:e9:04:64:aa:1f:92:dd:50:d9:0c:23:01:
11:a8:f9:0d:4d:e4:c8:67:2e:42:14:ec:85:c3:f1:68:9a:54:
9f:c8:ff:84:65:7c:35:35:d3:04:f0:4b:16:81:5d:c9:36:56:
a4:2c:a9:f7:f4:4d:35:94:ed:6c:80:6e:1c:cf:8a:40:ea:a1:
99:0a:f0:db:ed:21:99:cd:2a:a3:7b:56:27:57:50:98:9e:10:
8d:1d:72:09:5c:50:f8:19:28:72:f4:2b:9b:8d:3c:cc:db:5d:
3c:10:38:44:f8:3f:52:a4:db:35:f7:56:3e:0c:85:75:a4:57:
3d:53:51:19:7c:17:95:29:19:36:ca:1b:8b:64:a5:bf:60:a1:
94:cc:4a:29:41:91:1b:f0:c5:bd:95:6a:11:d4:39:7a:eb:99:
8f:94:97:82:1e:4e:bd:6a:66:61:e9:c5:66:56:b5:c7:7e:c2:
7c:71:1e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:39:12 2024 by rpki-client on console-ams.rpki-client.org