Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/nbtlFmVz8ck6IaseaLKx4hSFELk.roa
File: nbtlFmVz8ck6IaseaLKx4hSFELk.roa (raw, json)
Hash identifier: JN9FepzBXbTvAQlT6m849/appCf+1DShX5CyOz4oBZw=
Subject key identifier: 9D:BB:65:16:65:73:F1:C9:3A:21:AB:1E:68:B2:B1:E2:14:85:10:B9
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018CC794D11205E840F9D817516E236A5699
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/nbtlFmVz8ck6IaseaLKx4hSFELk.roa
Signing time: Tue 02 Jan 2024 00:31:07 +0000
ROA not before: Tue 02 Jan 2024 00:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202044
IP address blocks: 104.167.10.0/24 maxlen: 24
104.222.184.0/22 maxlen: 22
104.239.40.0/22 maxlen: 22
64.137.96.0/22 maxlen: 22
64.137.92.0/23 maxlen: 23
104.233.16.0/22 maxlen: 22
216.173.72.0/22 maxlen: 22
104.143.224.0/22 maxlen: 22
104.143.244.0/23 maxlen: 23
64.137.56.0/23 maxlen: 23
104.143.246.0/24 maxlen: 24
104.238.8.0/23 maxlen: 23
138.128.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:d1:12:05:e8:40:f9:d8:17:51:6e:23:6a:56:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 00:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9dbb65166573f1c93a21ab1e68b2b1e2148510b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:2b:92:f5:24:8a:e4:06:34:0e:9b:b7:aa:
37:ea:94:20:a6:3a:3d:5e:3e:7b:e4:b5:07:e0:d7:
e3:05:e9:34:b9:57:ea:ef:5f:25:8b:d2:80:6b:16:
f1:b2:29:c4:42:46:5d:7c:45:6a:5e:e7:34:79:3c:
86:11:80:ac:a6:de:c5:30:52:ba:7e:ec:28:69:0e:
a8:2e:44:ff:bd:4e:ac:56:eb:c0:e5:d9:3c:e3:bb:
18:4d:7f:66:55:bd:06:77:6f:a2:0a:03:76:b4:28:
76:f4:fd:5d:68:b2:b8:7f:48:d5:39:30:c7:bc:61:
00:37:2f:34:23:40:b8:27:b7:6a:ef:72:27:a8:f4:
e2:e3:a7:87:9b:eb:13:96:a2:65:35:a5:12:9e:83:
cf:d2:00:2c:1a:66:2f:b2:bd:71:76:39:68:0a:95:
8a:6f:5b:a1:fd:73:e7:ad:22:96:ed:ac:d8:e5:19:
64:27:11:2f:25:7c:30:8e:38:fb:9a:a9:e9:35:38:
cd:af:f0:45:75:c1:e1:ba:94:8c:e8:67:99:0d:58:
63:5c:cd:f1:c7:6f:73:97:0d:e2:29:84:06:50:c5:
6b:46:48:88:db:9d:5a:5c:03:aa:86:87:8c:fc:95:
63:23:27:85:68:e1:7e:25:89:14:1f:a8:ef:9f:f8:
10:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BB:65:16:65:73:F1:C9:3A:21:AB:1E:68:B2:B1:E2:14:85:10:B9
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/nbtlFmVz8ck6IaseaLKx4hSFELk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.56.0/23
64.137.92.0/23
64.137.96.0/22
104.143.224.0/22
104.143.244.0-104.143.246.255
104.167.10.0/24
104.222.184.0/22
104.233.16.0/22
104.238.8.0/23
104.239.40.0/22
138.128.148.0/24
216.173.72.0/22
Signature Algorithm: sha256WithRSAEncryption
69:98:af:12:f9:36:40:55:25:db:4e:65:9e:48:46:b7:af:4d:
a3:21:d9:7b:17:1e:63:70:f8:4f:36:0b:89:b2:9c:34:c3:63:
82:9a:ed:5a:e5:17:e4:c1:8e:74:b8:33:ed:db:96:a2:d8:61:
b9:7d:d6:50:10:77:6e:6a:3a:5e:9a:b5:a7:64:f8:b7:07:1e:
eb:24:70:e6:92:f6:c6:77:a3:18:1f:9b:e0:55:f8:5b:9d:8d:
af:67:16:97:79:5f:5a:4c:ce:6c:41:e3:2e:b6:95:c1:1b:6f:
5f:ce:59:ee:54:0e:37:e0:74:ad:61:51:0a:5c:99:b4:f1:60:
2c:1b:89:1e:da:d7:04:b6:61:a6:63:fd:d5:d8:0a:10:6a:61:
4e:83:0d:cf:98:57:ed:10:c1:ea:9b:28:8b:40:f2:52:8e:85:
dd:11:53:6e:65:4e:e6:32:17:70:20:ed:d5:4c:bd:04:be:47:
12:3b:47:89:0a:2c:23:de:32:80:bf:bf:32:0a:01:00:2e:ab:
90:cf:44:8b:45:dd:a9:99:b7:98:31:9b:f9:20:76:28:16:bd:
85:9a:47:ad:a6:d3:d3:7e:68:19:02:72:69:e9:9d:7e:cf:9f:
95:b6:04:89:3f:04:19:92:f0:b1:93:ff:37:e5:4c:88:19:cc:
87:ad:b8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:45:14 2024 by rpki-client on console-ams.rpki-client.org