Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/nFkFnEJmsZskdSgwNDP4srT-Q_A.roa
File: nFkFnEJmsZskdSgwNDP4srT-Q_A.roa (raw, json)
Hash identifier: mwAJ3Z6C0tcLaK4njgaXFNvsaY61WZMv1FnM1LfvbsQ=
Subject key identifier: 9C:59:05:9C:42:66:B1:9B:24:75:28:30:34:33:F8:B2:B4:FE:43:F0
Certificate issuer: /CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Certificate serial: 018CC6B77AE23E292290C6C232C6A46C2DC8
Authority key identifier: 86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/nFkFnEJmsZskdSgwNDP4srT-Q_A.roa
Signing time: Mon 01 Jan 2024 20:29:22 +0000
ROA not before: Mon 01 Jan 2024 20:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35701
IP address blocks: 192.109.204.0/24 maxlen: 24
195.234.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:7a:e2:3e:29:22:90:c6:c2:32:c6:a4:6c:2d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Validity
Not Before: Jan 1 20:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c59059c4266b19b247528303433f8b2b4fe43f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:23:14:5b:61:af:4d:3a:03:a1:78:a6:3b:76:
b9:6b:86:79:18:6f:2a:aa:23:8e:95:4e:f8:76:93:
4a:df:84:32:84:f3:2f:86:fe:2b:48:1d:78:0e:ed:
eb:74:05:c0:94:d5:6a:89:07:f8:2d:53:ba:e3:5e:
5c:76:80:f7:9e:63:84:64:6f:11:39:fe:42:ab:45:
f3:62:9a:bd:3d:b2:d5:ed:ec:16:43:ca:a0:4e:d2:
d0:6d:ec:bf:5b:0c:1b:ec:4e:6f:11:95:a3:0f:3a:
fc:0d:f2:0d:c4:ea:33:8a:70:f6:c2:7d:d3:3d:3b:
2a:01:5d:39:2c:cb:40:ba:64:db:2d:b0:de:f5:e1:
88:4e:a9:33:9b:f4:10:4a:37:96:bb:65:2a:e6:63:
8c:e0:3c:1c:47:74:22:b0:7b:79:0e:ae:06:b9:4b:
98:81:29:9f:6d:09:b7:7b:91:25:71:4a:be:11:d5:
8b:35:1a:c6:0f:f6:39:1d:27:d8:e8:0d:92:02:17:
48:53:3a:20:13:dd:b5:5f:46:49:fc:0f:4d:74:e9:
08:91:a2:5f:57:c8:f5:da:41:49:38:df:9c:ca:d5:
eb:fc:0b:43:ad:fa:49:cb:f8:f2:ac:ef:d7:89:6c:
50:f2:f9:f6:9c:8d:22:99:09:38:0f:c7:96:f6:f8:
65:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:59:05:9C:42:66:B1:9B:24:75:28:30:34:33:F8:B2:B4:FE:43:F0
X509v3 Authority Key Identifier:
keyid:86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/nFkFnEJmsZskdSgwNDP4srT-Q_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.204.0/24
195.234.45.0/24
Signature Algorithm: sha256WithRSAEncryption
07:98:4a:66:3c:a4:ea:37:e2:0e:aa:93:43:fb:8c:aa:75:8d:
fe:3a:45:0f:6f:61:fe:ac:e7:f5:08:a9:74:2d:49:51:44:66:
08:cf:a2:00:d7:96:4e:00:94:9e:8b:de:47:26:3b:8c:08:45:
d7:13:6a:0c:80:08:94:40:f1:32:ad:d3:f8:ab:f8:d8:96:a9:
64:70:cb:30:74:ba:22:d6:af:45:6a:44:0f:b6:ac:17:a5:cf:
af:0b:b9:20:0b:43:3e:48:4a:89:41:57:a3:ce:f0:37:26:b3:
00:f1:84:4e:d3:0b:97:44:8d:7a:c7:0f:9e:71:d3:6c:f1:79:
9c:b8:28:64:cc:c5:40:b6:9d:3c:4b:36:08:3d:aa:f2:7e:8e:
8c:dc:4b:f5:af:01:b7:36:db:34:c9:5b:b0:56:db:dc:f1:1f:
9f:c1:22:e5:7d:ee:3f:04:7c:22:0c:7b:fe:c8:94:99:5a:6e:
8c:7e:20:6c:64:c4:ab:18:99:ee:bd:47:a1:f3:33:ce:31:a2:
d5:24:ef:6e:c2:5e:0a:40:79:ba:42:4e:78:47:ac:72:74:c5:
9d:ea:0e:2e:c2:97:9c:30:f7:98:bf:e8:ea:b9:13:6a:1c:e2:
51:05:86:e0:14:c1:32:d8:68:6f:95:66:38:f7:17:eb:44:37:
68:1e:41:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 15:52:19 2024 by rpki-client on console-fra.rpki-client.org