Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ngdwZJIczK1L3xkI7-oWs2UDLJw.roa
File: ngdwZJIczK1L3xkI7-oWs2UDLJw.roa (raw, json)
Hash identifier: E5GWtuffHG8wKc+xWdxJrFVpB5h7xm0VliGFYZwLhQo=
Subject key identifier: 9E:07:70:64:92:1C:CC:AD:4B:DF:19:08:EF:EA:16:B3:65:03:2C:9C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A4682FD8DA1836675B86B0551918C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ngdwZJIczK1L3xkI7-oWs2UDLJw.roa
Signing time: Tue 02 Jan 2024 12:33:37 +0000
ROA not before: Tue 02 Jan 2024 12:33:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207228
IP address blocks: 31.148.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:46:82:fd:8d:a1:83:66:75:b8:6b:05:51:91:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e077064921cccad4bdf1908efea16b365032c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:68:e4:74:a9:1c:db:56:b7:39:21:61:a6:c9:
91:9a:51:d3:93:a8:b2:4d:e6:4c:32:96:d1:54:6c:
19:92:6d:b8:a7:85:4d:9b:bf:fa:ee:5f:71:6c:f4:
ad:c5:c2:24:d7:ea:d7:10:07:b8:01:d4:7c:72:24:
4e:8c:12:f7:99:d8:bc:80:c8:0f:09:9c:84:79:4a:
48:b5:74:8b:50:8a:c6:5d:8e:a2:98:69:7c:c1:0a:
44:e5:18:82:45:63:94:2d:94:18:d3:ac:68:d9:09:
a4:a7:44:a4:3e:87:1a:91:e4:a5:41:59:84:c5:d3:
5e:9c:00:dc:6a:c4:9b:80:3c:c0:11:37:6c:64:db:
d3:f4:9d:9a:5f:9a:e9:32:be:5b:5c:f3:47:76:0a:
32:3f:3c:82:20:b0:0d:88:4f:3b:28:70:3a:6d:f5:
49:23:b0:29:4d:5b:b7:27:e2:25:21:cd:c6:49:c4:
d7:e9:92:d0:56:c7:f8:f9:ff:30:1b:78:69:e8:c3:
bf:a0:76:34:ea:90:ea:df:1b:39:c5:38:4c:c9:f6:
9b:3d:2d:c2:83:26:0a:8b:26:9c:b6:32:dd:5c:a6:
26:b1:1f:88:07:f8:e3:11:7b:a4:66:f8:ad:9d:b2:
28:e3:be:ab:83:22:ba:9e:13:68:e7:61:48:4c:51:
a8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:07:70:64:92:1C:CC:AD:4B:DF:19:08:EF:EA:16:B3:65:03:2C:9C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ngdwZJIczK1L3xkI7-oWs2UDLJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.48.0/23
Signature Algorithm: sha256WithRSAEncryption
88:ab:3c:4f:4f:8a:a9:4b:9e:e4:f4:2c:45:05:90:b1:20:7a:
4c:ee:89:1c:8a:70:62:87:89:72:f2:5a:fb:05:c1:eb:ba:d0:
31:06:45:3a:a8:f6:d7:99:36:75:44:14:ad:d1:7d:39:cf:f9:
85:32:96:ad:cf:1e:be:c4:22:8a:d8:a6:c7:94:ad:e4:cb:eb:
50:06:c1:d1:ef:47:e2:82:7e:5e:ab:ac:65:9e:0d:df:60:a5:
a9:17:9b:65:2e:d1:2b:1f:60:5b:d5:65:d0:4f:2b:05:fe:9c:
db:73:e0:8d:ed:5f:96:8b:85:0b:74:78:06:3f:15:fd:44:51:
d8:d6:c1:b6:89:d7:f3:67:11:06:9f:77:c3:1c:56:c0:d5:be:
59:d4:29:c2:55:66:bb:6a:2b:f1:f7:94:31:5a:59:4a:a3:d7:
a0:35:8f:58:13:ab:a6:f6:0e:70:f4:3d:a0:47:fb:30:61:0a:
89:5c:69:b3:82:3f:22:8f:da:43:bb:ea:94:de:8a:2c:6d:4f:
a8:ad:f6:88:97:bc:dd:54:9d:62:da:50:2e:59:14:54:05:fd:
1e:9a:45:5d:52:73:9f:6c:1f:64:bd:9d:5b:71:31:b2:0a:77:
14:8c:ac:a7:b9:2c:d5:f8:b3:e4:c7:18:44:c0:c8:41:7e:07:
1e:10:59:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:46:12 2024 by rpki-client on console-fra.rpki-client.org