Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/nrzG_dT7c0oAGOJaMzkDc2o-2p8.roa
File: nrzG_dT7c0oAGOJaMzkDc2o-2p8.roa (raw, json)
Hash identifier: 1oVpSDQ6D73nFYcHyJITg/cSgHjaJkEHx8zuh0Ff8L0=
Subject key identifier: 9E:BC:C6:FD:D4:FB:73:4A:00:18:E2:5A:33:39:03:73:6A:3E:DA:9F
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF8F2A721A8FBA569B8D940D9355FB
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/nrzG_dT7c0oAGOJaMzkDc2o-2p8.roa
Signing time: Tue 02 Jan 2024 06:32:23 +0000
ROA not before: Tue 02 Jan 2024 06:32:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213002
IP address blocks: 185.241.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:8f:2a:72:1a:8f:ba:56:9b:8d:94:0d:93:55:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ebcc6fdd4fb734a0018e25a333903736a3eda9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:99:17:eb:01:a8:ca:23:c6:43:f1:04:07:ab:
2a:fe:46:1f:31:f9:91:b6:f1:cc:f4:4b:b0:30:8c:
41:95:a9:0c:bc:f0:80:3a:67:78:2b:59:4d:71:df:
92:2e:ee:d1:fe:50:00:47:82:52:3e:c3:67:ee:0e:
a5:39:05:a6:b7:e5:d3:57:a4:39:24:04:4c:8d:9a:
7f:5e:ca:4d:04:22:ae:e5:d9:51:fd:33:28:56:6b:
77:b8:56:84:d4:cd:52:3e:33:2f:80:ef:07:eb:44:
05:fc:c9:7b:21:f7:b7:7b:77:43:c9:67:97:fa:08:
50:0e:f7:32:26:eb:88:bd:eb:dd:3b:d4:61:54:9b:
2c:d8:76:40:cd:f4:4c:32:ad:5d:30:2a:e5:fc:24:
8f:f5:23:99:2c:b2:63:90:35:ba:9c:1a:2d:7c:e2:
4d:3a:ca:21:22:6e:1b:33:b2:57:c5:a6:1d:ed:2d:
c7:81:2f:87:d3:39:42:c3:00:8e:84:59:df:bf:9e:
5c:b3:e7:68:2b:ea:3e:51:73:2d:7f:33:c3:28:fe:
1b:ea:0e:63:72:33:90:16:d2:52:9b:82:37:41:66:
04:c2:b9:0b:42:d6:39:da:17:09:06:c4:33:f4:ac:
c3:87:42:58:10:90:68:ef:cd:be:27:c2:68:d7:f7:
e0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BC:C6:FD:D4:FB:73:4A:00:18:E2:5A:33:39:03:73:6A:3E:DA:9F
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/nrzG_dT7c0oAGOJaMzkDc2o-2p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.10.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:e5:31:47:83:52:7d:eb:bb:2c:31:7a:2f:c6:5b:13:39:83:
bd:a7:63:68:b7:28:56:2c:21:51:7b:7e:db:f2:03:31:d9:63:
8c:a2:89:fe:24:32:91:8f:f7:fd:5d:53:3b:24:00:bd:0c:9a:
5d:cf:87:fc:dc:91:e4:90:37:76:31:bb:3d:31:c7:dc:a3:57:
19:b4:cd:26:32:d9:93:85:45:42:fb:29:16:da:85:d4:db:f5:
bd:21:4c:69:08:47:ca:06:e5:8e:89:2e:fb:a7:ec:9e:a1:9d:
c4:86:f3:fc:a8:ec:43:48:44:71:bc:e9:d2:da:6d:99:fb:cc:
38:05:e7:3a:53:0d:e1:6d:84:c5:38:d8:34:47:5f:5b:8c:7a:
5d:74:66:93:70:b8:14:e2:00:f0:ba:75:ba:cd:f4:58:ab:9b:
b9:d1:22:c5:4a:8f:d0:23:9f:73:18:ee:19:bd:fb:ed:f1:62:
70:d9:72:a5:20:ac:4d:dd:20:a3:0c:c7:e6:a5:17:38:7c:3b:
e1:52:3f:43:59:b2:f5:20:9e:99:05:a9:42:fa:87:f7:a9:3e:
d3:76:43:44:44:62:ce:66:2e:4e:b1:a2:b5:05:59:ac:29:65:
e6:9a:cd:a4:14:e5:36:58:d4:94:af:28:d6:74:31:9c:1b:38:
e1:1a:aa:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:39:29 2024 by rpki-client on console-fra.rpki-client.org