Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/NoFQDR2nLppKoAxhWmuLpmvuCuo.roa
File: NoFQDR2nLppKoAxhWmuLpmvuCuo.roa (raw, json)
Hash identifier: 4HBAlmM7O5wDcZNGhSYLzuyrLV+cApmhEbyOO1g0mUo=
Subject key identifier: 36:81:50:0D:1D:A7:2E:9A:4A:A0:0C:61:5A:6B:8B:A6:6B:EE:0A:EA
Certificate issuer: /CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
Certificate serial: 018CC3B69CD966CA085D97EC1B6D7C719451
Authority key identifier: 9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/NoFQDR2nLppKoAxhWmuLpmvuCuo.roa
Signing time: Mon 01 Jan 2024 06:29:33 +0000
ROA not before: Mon 01 Jan 2024 06:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44858
IP address blocks: 195.138.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:9c:d9:66:ca:08:5d:97:ec:1b:6d:7c:71:94:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
Validity
Not Before: Jan 1 06:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3681500d1da72e9a4aa00c615a6b8ba66bee0aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:40:58:dc:69:9a:2f:16:3a:8e:23:3c:2e:66:
b4:07:c7:90:a8:89:78:55:56:9b:35:1b:7b:e4:4f:
a0:8b:3f:13:ee:f3:d9:3e:9c:94:55:a0:ef:00:68:
06:47:73:21:7a:88:84:4a:95:a0:82:a9:ce:c2:8a:
02:5f:2c:fd:35:19:5a:2c:4d:b7:e1:c4:05:7b:b8:
05:03:a6:55:75:ad:69:54:a6:b4:8d:c7:81:c2:df:
49:58:63:9d:56:db:46:63:4d:b2:e2:63:ee:8c:b4:
d1:5c:b1:72:9e:65:cf:89:45:9b:ab:83:a8:20:ea:
ea:92:8c:b9:98:90:52:49:aa:33:49:68:76:fb:f5:
d4:c2:19:88:75:9f:ce:9c:c9:db:8b:96:f7:a3:3b:
4b:52:76:25:9e:0a:22:b4:de:e3:02:ff:1d:44:f0:
2c:16:b8:ea:e7:ac:26:f0:46:db:6b:59:c5:79:f4:
e8:b6:0f:76:18:ab:ea:7a:24:e8:56:59:0f:15:ea:
f5:a9:16:a9:ea:be:89:02:08:b9:88:5f:4c:c1:bf:
10:bc:f1:83:0f:c6:79:97:ef:da:3a:66:71:16:30:
17:b5:e3:e4:c2:4a:b8:84:c5:eb:cb:2f:61:44:73:
95:2a:0b:15:10:0f:97:c2:81:71:b0:29:3b:4e:ff:
c3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:81:50:0D:1D:A7:2E:9A:4A:A0:0C:61:5A:6B:8B:A6:6B:EE:0A:EA
X509v3 Authority Key Identifier:
keyid:9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/NoFQDR2nLppKoAxhWmuLpmvuCuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.212.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:d0:20:4f:52:66:66:78:24:7e:c9:b0:e2:4a:11:e8:8f:80:
a0:7b:6e:b4:2a:3a:7b:2d:b6:a9:c7:aa:f8:08:3f:8d:7b:d8:
b7:30:a8:61:c6:f0:4f:fb:ae:5a:aa:c8:79:88:16:08:4e:e6:
af:f2:1f:07:1d:3e:66:93:39:48:67:52:a6:65:cc:51:ab:4c:
68:01:8b:01:89:9e:0a:f2:9c:57:72:93:b6:0b:34:e9:7a:1b:
dc:d6:f6:bf:67:72:b8:00:d0:1f:e9:27:4d:0c:83:0f:ab:11:
3d:df:6f:f0:37:93:cc:06:15:9f:1d:5e:a5:69:24:10:bf:04:
81:4b:c7:82:b9:09:9c:29:8e:1b:14:8a:c9:cc:5a:db:33:b0:
1c:12:a8:60:f4:45:91:dd:45:9c:56:8f:15:dd:48:d4:3a:42:
3c:d6:7f:e6:2f:21:7a:a9:b3:16:49:fb:6f:9d:f2:e2:e5:42:
48:7f:2a:bf:d2:70:eb:d4:75:ae:6d:ff:ca:8f:bc:a1:ae:f6:
67:13:91:9a:82:a2:44:07:db:f8:f5:6a:81:1f:f5:12:a6:64:
69:be:65:0d:65:ef:57:38:71:5a:69:77:6e:97:0e:91:ec:a4:
b5:a5:02:a4:4c:85:6c:06:a4:dd:cd:17:fe:27:a2:94:aa:81:
0a:9e:13:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:57 2024 by rpki-client on console-ams.rpki-client.org