Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/NSdFGd9ySgErQ37389WrInAws5c.roa
File: NSdFGd9ySgErQ37389WrInAws5c.roa (raw, json)
Hash identifier: 5GSngycIwTrBkMpCBmTTBFoc7FzLS7VNq66AU+5oGAE=
Subject key identifier: 35:27:45:19:DF:72:4A:01:2B:43:7E:F7:F3:D5:AB:22:70:30:B3:97
Certificate issuer: /CN=51f866f32b47c69d478ad95354e257e51a236a57
Certificate serial: 018CC94E0CECD2426F27EF341A6EC4B257F8
Authority key identifier: 51:F8:66:F3:2B:47:C6:9D:47:8A:D9:53:54:E2:57:E5:1A:23:6A:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ufhm8ytHxp1HitlTVOJX5Rojalc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/NSdFGd9ySgErQ37389WrInAws5c.roa
Signing time: Tue 02 Jan 2024 08:33:04 +0000
ROA not before: Tue 02 Jan 2024 08:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197530
IP address blocks: 158.255.92.0/23 maxlen: 24
193.138.118.0/24 maxlen: 24
46.21.208.0/20 maxlen: 20
94.232.152.0/21 maxlen: 21
158.255.88.0/21 maxlen: 24
2a02:2928::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/Ufhm8ytHxp1HitlTVOJX5Rojalc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/Ufhm8ytHxp1HitlTVOJX5Rojalc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ufhm8ytHxp1HitlTVOJX5Rojalc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:0c:ec:d2:42:6f:27:ef:34:1a:6e:c4:b2:57:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f866f32b47c69d478ad95354e257e51a236a57
Validity
Not Before: Jan 2 08:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35274519df724a012b437ef7f3d5ab227030b397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3c:25:2a:50:28:e3:2e:54:8c:ff:c3:c5:df:
5c:7e:59:c2:63:ad:c9:86:34:a8:41:46:91:80:c3:
56:09:40:b5:d6:4f:96:e1:08:8b:29:25:ee:23:af:
4e:0b:e0:14:0c:49:0a:66:e5:07:09:57:a1:d6:fb:
3c:16:f1:d1:a9:36:62:e0:68:21:1d:40:ca:e9:0e:
ac:85:9b:55:4e:b0:9a:be:51:e0:6e:98:4f:c1:e6:
22:59:cb:3b:50:e1:7f:98:84:57:18:99:db:66:9c:
2b:56:19:9f:db:d3:a4:32:4f:a2:55:f6:45:66:06:
e4:36:04:03:de:08:da:b8:de:f0:86:55:b0:32:37:
49:99:2f:06:6b:eb:3b:5d:89:43:f6:d5:8d:a9:7f:
a3:ea:5f:58:99:ac:98:74:f3:17:1f:ba:d6:0e:1d:
28:42:c7:5a:5a:70:3c:e7:81:5f:c8:b8:05:71:96:
e5:8d:16:88:e0:c2:b3:10:71:ff:40:3b:6b:2b:26:
07:58:a7:93:80:51:fc:d7:fb:7c:dd:8a:13:36:f8:
d3:05:5d:91:d4:94:ed:27:9e:dc:92:70:24:56:a2:
66:af:1b:75:32:a2:a5:eb:5d:22:e9:51:6a:c3:c3:
a2:4f:c1:a7:ce:b0:b0:7f:99:b0:29:8b:cb:24:f4:
8d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:27:45:19:DF:72:4A:01:2B:43:7E:F7:F3:D5:AB:22:70:30:B3:97
X509v3 Authority Key Identifier:
keyid:51:F8:66:F3:2B:47:C6:9D:47:8A:D9:53:54:E2:57:E5:1A:23:6A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ufhm8ytHxp1HitlTVOJX5Rojalc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/NSdFGd9ySgErQ37389WrInAws5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/Ufhm8ytHxp1HitlTVOJX5Rojalc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.208.0/20
94.232.152.0/21
158.255.88.0/21
193.138.118.0/24
IPv6:
2a02:2928::/32
Signature Algorithm: sha256WithRSAEncryption
ab:7f:c7:ea:e0:8c:de:80:5e:41:ce:2f:ef:68:f2:5a:b5:22:
5b:cc:7a:b8:27:63:d7:74:54:f0:ec:ec:93:69:93:92:57:07:
a4:9d:17:20:af:e4:e5:82:b8:6b:e1:bf:a7:71:d3:f0:18:0a:
a6:50:3c:2f:15:f5:6e:65:c7:07:f8:f3:0b:f6:43:a6:07:a3:
70:c4:5a:84:8a:a6:18:64:57:d4:d8:06:53:92:05:b1:d0:bd:
80:2f:66:d5:60:a3:65:68:17:60:0b:e3:d4:fd:6c:76:45:1c:
f3:04:b6:2f:98:e9:a8:c2:a1:a9:f4:e7:22:5f:13:17:5f:6c:
fb:2e:39:c3:de:5c:c1:a2:da:56:a1:39:e3:b1:03:db:5a:d2:
7c:9b:a4:cb:6b:18:7a:5f:99:7c:be:81:df:9d:0a:8e:58:bb:
8b:f0:e5:0d:70:a7:2d:25:61:68:6d:35:5f:fa:15:7b:97:7a:
6a:2d:8f:e0:ef:2e:06:83:b4:ff:04:62:fa:a7:5d:98:e4:46:
3d:04:27:c7:51:e2:e5:05:31:73:58:e2:7a:4c:c8:19:7b:c7:
00:9d:a2:3a:c1:5a:6e:31:12:f9:5f:9d:ca:ff:98:16:f8:ae:
8e:07:89:62:6f:1a:77:a9:f2:76:89:76:13:81:cb:92:be:10:
c0:c0:2d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:54:04 2024 by rpki-client on console-ams.rpki-client.org