Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/njrPzHkkLBmMlt60_Kr5OZb6Z2M.roa
File: njrPzHkkLBmMlt60_Kr5OZb6Z2M.roa (raw, json)
Hash identifier: d1lIhG6Tocs/fsQdlXpziTOmmKEWwmZ0mqeWTx3mCEg=
Subject key identifier: 9E:3A:CF:CC:79:24:2C:19:8C:96:DE:B4:FC:AA:F9:39:96:FA:67:63
Certificate issuer: /CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Certificate serial: 018F048EF522A9D0E6BE6CD2FBA8EBFF91D7
Authority key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/njrPzHkkLBmMlt60_Kr5OZb6Z2M.roa
Signing time: Mon 22 Apr 2024 06:47:08 +0000
ROA not before: Mon 22 Apr 2024 06:47:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29657
IP address blocks: 194.5.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:04:8e:f5:22:a9:d0:e6:be:6c:d2:fb:a8:eb:ff:91:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Validity
Not Before: Apr 22 06:47:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e3acfcc79242c198c96deb4fcaaf93996fa6763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ab:cc:08:48:28:c4:8b:7f:ed:00:32:c9:e0:
50:d4:d9:e5:87:ae:90:0b:11:f2:ce:03:b5:46:c7:
ee:80:40:d2:c6:7b:2d:bc:09:2a:fd:d6:b4:13:a0:
e8:f5:d1:4e:0a:27:24:3c:c8:a3:06:ed:66:b5:f7:
4d:c3:41:27:d1:87:11:fd:48:b6:ab:39:e8:a7:d6:
bf:49:0d:15:0b:82:76:4c:2b:f8:99:c6:4b:04:57:
81:f9:20:d9:5b:56:20:7e:be:c9:a4:b2:5f:5f:8f:
10:da:32:13:04:d2:b5:bf:bd:34:7e:78:0b:6a:5b:
31:e5:6c:ef:1d:cd:8d:20:a7:f8:a5:66:86:71:b7:
0f:88:6f:6d:f5:95:a7:e4:22:61:f4:33:2f:3a:19:
5b:bc:56:a1:91:d6:71:e4:53:bc:79:88:0b:db:20:
e6:aa:7f:b3:d8:92:1f:37:f3:46:38:21:60:8e:87:
a2:50:49:8d:ed:d0:fb:89:c0:a3:2f:fa:3c:3b:65:
90:7f:82:95:d5:9a:32:5b:56:0a:c3:48:d7:5f:ee:
10:6f:e9:35:d9:52:4e:0e:f4:7e:43:0e:81:77:e0:
4e:32:0b:46:93:1e:30:36:8e:7a:f2:f0:ce:9d:c9:
0b:89:6b:78:c7:1c:96:0b:b3:40:77:6f:f4:1c:10:
b1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3A:CF:CC:79:24:2C:19:8C:96:DE:B4:FC:AA:F9:39:96:FA:67:63
X509v3 Authority Key Identifier:
keyid:AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/njrPzHkkLBmMlt60_Kr5OZb6Z2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.90.0/24
Signature Algorithm: sha256WithRSAEncryption
04:68:de:ed:36:51:5c:f9:19:7f:e3:f2:40:ed:36:87:71:01:
cf:a6:66:78:d8:ad:7c:5d:d0:c6:0a:d0:7f:ef:7b:0f:7e:b7:
a2:9b:0a:51:d2:3b:17:f3:d3:32:e3:4d:27:51:be:bb:d4:7b:
20:16:b8:04:e6:a0:79:39:9d:92:e6:89:ee:8d:8a:35:69:a4:
7e:cf:13:4b:f4:05:a4:32:1b:50:2b:0a:d7:f1:85:50:a8:5c:
2b:6c:5b:62:98:90:5a:3c:bb:ee:38:84:0b:24:ef:20:0e:e3:
4d:c4:51:a6:04:41:c3:8e:44:71:1e:b9:4d:d7:55:7b:01:58:
0b:f8:6f:e9:97:95:a4:15:37:43:fe:97:f5:c5:bb:3f:87:d7:
16:23:2b:b5:e5:6e:1e:8b:5f:c2:8b:0f:c6:09:4a:aa:3a:02:
77:17:68:f8:85:a6:35:46:f4:6b:64:c3:bc:ad:db:34:75:88:
60:10:27:50:5d:d6:13:c0:8a:10:72:03:0c:a7:fb:44:09:93:
c8:91:09:5f:44:2d:01:b0:a2:83:fa:b6:ce:fc:b6:38:99:28:
ac:ac:21:fd:3c:b5:39:dd:fe:d4:98:35:97:de:cd:04:d0:35:
46:67:db:19:97:0b:1e:27:e3:57:df:b1:0f:c3:55:99:c9:e9:
98:44:07:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 21:02:17 2024 by rpki-client on console-fra.rpki-client.org