Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/NNxE_RB4Aux1ggglU-6x4tKxcqI.roa
File: NNxE_RB4Aux1ggglU-6x4tKxcqI.roa (raw, json)
Hash identifier: acPfvXZuY+QBpHKDWkcG4JZpEO6IR4J32RF+aGtdQdo=
Subject key identifier: 34:DC:44:FD:10:78:02:EC:75:82:08:25:53:EE:B1:E2:D2:B1:72:A2
Certificate issuer: /CN=39b8b4f04973f37cc69fb7c23468f953f149420e
Certificate serial: 018CC500EEAD76FCC1D61003A22CED266857
Authority key identifier: 39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/NNxE_RB4Aux1ggglU-6x4tKxcqI.roa
Signing time: Mon 01 Jan 2024 12:30:21 +0000
ROA not before: Mon 01 Jan 2024 12:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25377
IP address blocks: 193.177.16.0/20 maxlen: 20
193.177.32.0/19 maxlen: 19
193.177.64.0/18 maxlen: 18
193.177.4.0/22 maxlen: 22
193.177.2.0/23 maxlen: 23
193.177.1.0/24 maxlen: 24
193.177.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:ee:ad:76:fc:c1:d6:10:03:a2:2c:ed:26:68:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b8b4f04973f37cc69fb7c23468f953f149420e
Validity
Not Before: Jan 1 12:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34dc44fd107802ec7582082553eeb1e2d2b172a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cf:04:99:2c:1e:a1:f3:9e:cf:20:0b:00:b0:
42:2e:c5:1c:6a:66:2a:64:49:18:ee:07:94:2d:90:
32:a1:da:b8:ba:a8:02:41:f2:0a:aa:f1:49:d3:28:
84:6e:7e:f6:4e:31:5a:65:cd:b7:3b:d2:72:1b:e5:
03:7b:46:be:3b:c2:6e:79:c4:91:09:bb:9a:60:e5:
22:dc:23:c0:4d:8c:8b:68:0c:37:d3:6f:97:68:3b:
6e:66:b6:3e:db:b0:75:fd:7f:c2:83:91:61:4b:6e:
19:87:e4:6d:34:a6:30:62:d3:6a:97:26:f8:de:46:
1a:cb:96:9a:93:ac:91:7f:c0:b0:4f:87:8f:59:d7:
5f:1b:80:0e:7a:0f:30:9e:c5:13:f7:7c:ec:ed:dc:
eb:44:57:da:56:d4:c5:d0:bd:09:40:f3:21:14:e7:
e1:a8:9a:c5:8a:d2:49:a2:e3:0b:86:6f:cd:59:d4:
0f:7e:74:66:ca:15:fb:1a:68:53:a2:f7:a5:ac:f9:
0f:04:f7:74:0e:3e:cd:43:76:ef:22:8c:cb:19:4c:
63:4d:87:7d:ae:a3:e7:8f:22:4b:bf:4e:1c:ec:02:
cb:83:c9:c1:66:b7:34:00:39:3d:27:7e:0c:ec:e2:
ee:ce:2e:06:f0:13:55:42:87:79:06:bb:76:68:26:
36:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DC:44:FD:10:78:02:EC:75:82:08:25:53:EE:B1:E2:D2:B1:72:A2
X509v3 Authority Key Identifier:
keyid:39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/NNxE_RB4Aux1ggglU-6x4tKxcqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.177.1.0-193.177.127.255
Signature Algorithm: sha256WithRSAEncryption
47:e3:ae:8c:e5:1d:29:96:79:75:5e:a1:69:b3:8f:fa:6b:e9:
25:e2:3a:5e:c2:25:35:81:86:f8:0b:5c:4e:a5:70:60:49:cf:
95:64:c3:66:19:29:e6:ff:c9:dd:d7:94:b8:d0:a5:24:7f:e7:
84:45:ab:43:c4:61:6c:cc:bc:13:b4:d8:ef:fc:20:b9:39:be:
cc:fa:57:6e:66:f0:1d:d4:92:73:32:86:f3:58:c7:cf:3b:7a:
88:de:ba:bd:1e:1c:21:94:5e:24:c2:8f:d0:74:52:e3:56:17:
0a:4b:8d:7d:6b:d2:d3:f8:f3:1f:b3:f8:98:9b:31:e3:a4:e3:
15:27:b7:76:c7:4b:98:f5:3d:f2:f1:25:d5:b6:06:af:42:9d:
cb:6d:da:21:39:39:80:83:f1:8e:7d:76:ab:48:db:bd:4c:b5:
3d:cc:54:f7:e8:3a:23:8a:4d:e2:3a:03:3c:76:47:71:ed:c7:
c1:12:08:ea:38:84:df:81:09:35:7f:69:6f:a5:8f:87:8b:de:
73:6c:fc:96:35:8a:ab:4b:37:01:01:9d:f8:f7:b4:9c:79:b5:
cd:02:a6:2b:a4:7e:8d:e8:a5:56:77:41:23:c0:37:13:77:ab:
b0:eb:43:34:9d:c0:90:64:71:05:d1:83:3c:24:96:80:22:d5:
79:b2:b8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:15:28 2024 by rpki-client on console-fra.rpki-client.org