Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/Nz39_VDdabob-i3nzmDcDUf-Ub4.roa
File: Nz39_VDdabob-i3nzmDcDUf-Ub4.roa (raw, json)
Hash identifier: BnDAzZGHgt5fmh1NToGAvhnEeXSxvMc9ajnUyNrJm+U=
Subject key identifier: 37:3D:FD:FD:50:DD:69:BA:1B:FA:2D:E7:CE:60:DC:0D:47:FE:51:BE
Certificate issuer: /CN=4a54821a91b1dbdc73bdda34bced7107067964ad
Certificate serial: 018CC2DB5C4876B3B71AA3A3F4A312585A7D
Authority key identifier: 4A:54:82:1A:91:B1:DB:DC:73:BD:DA:34:BC:ED:71:07:06:79:64:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/Nz39_VDdabob-i3nzmDcDUf-Ub4.roa
Signing time: Mon 01 Jan 2024 02:30:05 +0000
ROA not before: Mon 01 Jan 2024 02:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43183
IP address blocks: 193.246.170.0/23 maxlen: 32
91.194.146.0/23 maxlen: 24
2001:67c:8ac::/48 maxlen: 128
2001:678:fbc::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 20:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:5c:48:76:b3:b7:1a:a3:a3:f4:a3:12:58:5a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a54821a91b1dbdc73bdda34bced7107067964ad
Validity
Not Before: Jan 1 02:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=373dfdfd50dd69ba1bfa2de7ce60dc0d47fe51be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c9:59:66:ff:06:57:cb:96:a1:1d:2c:be:eb:
55:35:bf:24:34:7f:cf:fa:d4:c0:48:81:5a:d9:ae:
45:a2:78:bb:7e:1b:67:bd:29:b4:3d:6d:3c:ac:0f:
22:ea:8d:c8:af:94:05:d3:9d:d7:dd:df:1d:41:7b:
dc:70:b3:1d:cd:fb:88:6c:7a:af:f0:46:b9:57:a9:
c9:78:72:33:91:2d:ff:93:8c:42:c9:60:e8:f7:06:
9e:6f:06:d8:67:1d:66:fa:0b:8b:e5:c2:28:dd:94:
2a:9a:2c:20:f4:37:44:09:91:fe:21:38:3f:0b:5b:
b5:b7:71:47:1b:96:cc:91:6b:33:87:d0:6f:71:20:
de:f3:bd:f8:45:e9:f3:97:46:76:e8:cb:e9:45:77:
c0:4c:e1:51:52:ac:29:b8:d0:e9:8a:02:d0:0a:25:
80:e2:12:88:69:49:77:0e:0a:25:1a:cc:56:c5:56:
62:ba:19:9a:5e:42:e2:dc:bd:93:04:74:b1:89:c2:
c8:29:f3:2a:92:c8:50:4b:ab:9d:16:4b:98:92:17:
49:62:79:ac:f8:52:49:4b:dc:29:0e:31:c1:ba:97:
ba:85:9c:e7:0d:6f:f6:12:d0:c7:d8:c1:c1:35:c6:
25:8f:b7:07:66:56:16:47:70:7c:0a:51:a2:a0:82:
43:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3D:FD:FD:50:DD:69:BA:1B:FA:2D:E7:CE:60:DC:0D:47:FE:51:BE
X509v3 Authority Key Identifier:
keyid:4A:54:82:1A:91:B1:DB:DC:73:BD:DA:34:BC:ED:71:07:06:79:64:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/Nz39_VDdabob-i3nzmDcDUf-Ub4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.146.0/23
193.246.170.0/23
IPv6:
2001:678:fbc::/48
2001:67c:8ac::/48
Signature Algorithm: sha256WithRSAEncryption
25:66:bd:e3:1b:1e:99:b4:d6:11:f3:54:8f:a3:55:a2:f4:80:
0f:e9:6c:9f:f6:02:20:0c:93:46:fb:d2:a1:7a:c2:d0:70:71:
db:15:be:f1:9c:3a:c8:5f:b8:9e:3f:d8:7c:d5:9c:49:19:db:
51:e7:38:01:2d:40:e5:b5:ae:56:4f:8e:6a:06:6b:fd:94:70:
fa:a2:59:e4:d4:77:ae:ec:da:2a:e7:bb:ea:b0:6b:c7:c7:6a:
e9:25:ef:ae:8c:29:21:26:51:43:e1:1d:2d:1a:d5:4a:1f:88:
a3:58:4d:1c:7e:a5:6b:57:d7:d9:32:fd:86:b0:e2:c8:b2:19:
e4:f9:37:31:44:b6:99:00:1e:bd:72:a6:9c:ad:05:8d:db:f0:
e2:69:2e:65:a4:77:bf:46:5e:2e:9c:71:50:a9:af:be:76:c2:
df:f0:27:aa:c1:01:ed:38:96:fb:08:fb:0f:28:f9:ad:24:33:
4f:bd:35:ea:3f:ec:2d:4e:e4:24:fa:ea:23:0e:fa:26:85:69:
8b:29:bc:22:b5:b4:bf:a7:ed:1a:46:3b:f3:91:5a:60:05:50:
b3:94:af:9a:20:13:1f:8e:68:ad:67:f5:f3:d8:ce:9d:92:7a:
f5:59:64:76:1d:73:ae:62:9e:f2:57:42:86:3e:c0:99:c0:90:
a3:60:fb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:52:53 2024 by rpki-client on console-ams.rpki-client.org