Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/NJdPkZ4T0geUO-b4CFYB-9-1XEU.roa
File: NJdPkZ4T0geUO-b4CFYB-9-1XEU.roa (raw, json)
Hash identifier: BYxM5FX+2kwZUGbkhHOIIAk9W9YxB7S9x8X6yOpsyEQ=
Subject key identifier: 34:97:4F:91:9E:13:D2:07:94:3B:E6:F8:08:56:01:FB:DF:B5:5C:45
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29FFE01C082BA7FB3EC5222EC31D9A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/NJdPkZ4T0geUO-b4CFYB-9-1XEU.roa
Signing time: Tue 02 Jan 2024 12:33:19 +0000
ROA not before: Tue 02 Jan 2024 12:33:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48511
IP address blocks: 146.120.223.0/24 maxlen: 24
95.46.196.0/24 maxlen: 24
2a02:128:22::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:ff:e0:1c:08:2b:a7:fb:3e:c5:22:2e:c3:1d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34974f919e13d207943be6f8085601fbdfb55c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:dc:af:d4:cd:7e:69:57:df:97:34:74:a6:0c:
48:2d:7c:6c:cb:be:99:39:55:bd:63:21:62:dc:3a:
8e:f4:98:a3:c1:eb:82:fd:18:7d:df:58:a7:ae:c9:
77:6e:d7:47:8a:20:ec:d5:a9:77:20:61:01:1d:7f:
93:9a:ab:09:fa:c4:6e:5a:14:b0:60:5c:60:d6:80:
8e:88:17:0f:93:a4:d3:47:8c:06:79:fd:b1:79:cc:
94:13:bb:83:f9:a4:bc:af:af:fe:ba:64:fd:90:e4:
5b:f5:54:a2:8d:85:f9:2d:f0:e9:99:c2:ab:9d:f5:
71:f0:6a:fb:e8:3e:f4:ed:92:07:bc:53:c5:f5:7d:
c6:ed:76:d4:61:b3:6d:a1:75:c4:c2:2e:1e:f2:e5:
04:5e:9d:07:85:bc:99:c4:12:97:18:6c:f6:33:b2:
da:cf:a5:3b:5e:76:8f:00:21:ec:bc:f9:71:42:cc:
f0:1a:23:b8:ca:dd:61:b1:56:ee:9e:56:3d:8b:1e:
9f:88:ce:7d:d1:c0:05:8f:9b:b6:da:60:cb:02:2d:
84:0c:9a:59:06:b1:38:fe:52:da:cc:fb:b2:bd:10:
b9:9a:f3:e1:07:82:de:f7:e5:13:b4:3a:3c:e8:63:
f1:73:29:2a:d8:2a:e7:55:6f:97:d3:17:fe:2e:31:
7e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:97:4F:91:9E:13:D2:07:94:3B:E6:F8:08:56:01:FB:DF:B5:5C:45
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/NJdPkZ4T0geUO-b4CFYB-9-1XEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.196.0/24
146.120.223.0/24
IPv6:
2a02:128:22::/48
Signature Algorithm: sha256WithRSAEncryption
67:f5:6b:8f:aa:0a:54:14:d2:a1:90:8d:7f:7f:52:17:d1:aa:
24:54:de:cb:f4:d9:ca:e0:2a:c4:d7:84:1e:22:cf:81:d9:8d:
99:11:c0:0f:22:9b:44:b5:c6:0c:ca:51:46:f9:56:ba:34:17:
7c:5c:5f:c3:27:c8:b5:48:01:32:4b:54:a1:54:64:0e:cd:3f:
70:cc:f9:0a:a6:9a:69:f2:b9:42:ce:14:18:bf:21:93:c4:59:
c8:0b:08:3c:50:91:c1:17:ad:af:aa:35:4a:72:d5:4e:ea:81:
8d:70:29:5a:1f:a0:f5:dd:06:ab:4d:09:ae:da:29:e0:77:81:
67:70:4c:3b:95:d9:fc:b6:1f:42:cb:e8:b0:61:97:82:69:5d:
07:94:07:d8:14:1c:f9:8d:5a:49:9c:97:8f:ce:05:96:c5:a8:
c7:db:98:58:a5:19:63:6a:2f:a4:ef:27:02:2f:95:ea:c4:6b:
64:e5:4d:f4:a4:9a:05:7b:12:d8:1c:a0:5c:43:05:90:3a:51:
2d:f9:37:b0:85:08:33:a2:10:36:fa:7d:e3:57:0a:00:d8:bc:
b3:48:ee:d5:6e:52:1f:f5:d1:d4:0c:61:aa:1f:be:ba:2f:f7:
dd:21:28:72:91:b7:6a:97:e2:cd:4a:ad:7b:cd:67:a5:17:eb:
bf:da:d3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:13:21 2024 by rpki-client on console-fra.rpki-client.org