Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/NjuyXpslggIUUQALsoCoDz6mrK0.roa
File: NjuyXpslggIUUQALsoCoDz6mrK0.roa (raw, json)
Hash identifier: LeTXQEQ8cejv4lPSI1nXsQbdfxjk3rtsk0rhh5QzWcU=
Subject key identifier: 36:3B:B2:5E:9B:25:82:02:14:51:00:0B:B2:80:A8:0F:3E:A6:AC:AD
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018CC3B73CC1DEE94AD3A69398575AF5C1A8
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/NjuyXpslggIUUQALsoCoDz6mrK0.roa
Signing time: Mon 01 Jan 2024 06:30:14 +0000
ROA not before: Mon 01 Jan 2024 06:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199233
IP address blocks: 194.2.131.0/24 maxlen: 24
194.2.130.0/23 maxlen: 24
90.85.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:3c:c1:de:e9:4a:d3:a6:93:98:57:5a:f5:c1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 06:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=363bb25e9b2582021451000bb280a80f3ea6acad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:72:ed:7c:23:4c:21:ae:cd:c1:8d:88:3e:f0:
ef:bb:aa:a1:4a:78:0c:57:03:45:be:e9:4b:76:9c:
d2:68:db:e0:c7:9a:1d:02:e5:9d:b7:6c:03:ac:57:
3c:3d:fd:67:34:b9:81:f7:0f:00:75:80:0b:4b:b3:
20:6f:01:19:d8:25:ba:32:1e:80:ab:51:88:f9:d4:
52:13:19:89:60:cc:89:9f:bc:b1:71:c3:d2:b5:33:
74:bc:fd:62:ac:82:65:a4:13:8f:88:22:ec:7c:80:
ef:23:46:29:72:b4:2f:1c:30:32:e2:3f:98:43:d7:
62:2b:8c:12:d4:bc:1a:48:6f:f3:b7:aa:f3:c1:e5:
73:6f:4f:e8:6e:bb:b1:9a:f0:56:60:9d:da:9f:e1:
dd:09:e2:a7:31:d9:d7:c2:a1:b1:a3:4c:29:95:f1:
94:ab:3e:07:ee:af:a6:bf:21:31:af:b8:7f:94:95:
87:2e:eb:3c:5c:4f:06:ed:54:22:fd:89:df:58:eb:
d8:44:69:db:19:03:47:3a:f0:3d:b6:44:7f:ee:fb:
eb:6f:77:86:c3:0c:53:21:f3:41:a5:51:d6:15:08:
21:2f:71:4b:a8:4b:7f:d7:90:2b:90:73:7b:c6:ac:
68:dc:5f:51:07:62:73:b5:a6:62:90:b3:a6:a1:b3:
ca:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3B:B2:5E:9B:25:82:02:14:51:00:0B:B2:80:A8:0F:3E:A6:AC:AD
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/NjuyXpslggIUUQALsoCoDz6mrK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.85.39.0/24
194.2.130.0/23
Signature Algorithm: sha256WithRSAEncryption
07:7d:4b:ae:32:4a:63:83:1f:a1:c1:12:e2:64:8f:02:bf:9c:
55:85:21:4e:5b:ed:38:82:04:81:b8:cf:2e:73:85:a3:9d:9e:
4c:3d:0a:13:6c:59:eb:5c:11:9f:a0:3c:7d:74:71:c8:f0:72:
e3:75:ca:1b:4c:1b:1a:0c:90:ed:1b:74:b6:7d:85:18:26:b3:
3c:94:28:24:03:30:25:23:30:cc:1b:01:d8:dc:e4:d0:8b:a5:
71:38:23:70:86:8d:1c:11:d2:6b:70:48:a7:64:9c:a3:d5:92:
78:86:eb:d8:79:08:4a:67:f7:c9:9b:9b:9a:74:dd:f3:2d:f1:
05:45:2a:6c:bf:ad:6a:07:69:be:d1:07:9f:2d:eb:65:1d:2a:
04:14:65:2b:6b:c1:5f:8f:2a:fa:28:86:70:38:c4:f7:5a:1a:
b2:dc:f6:7b:68:a7:ba:ff:c4:64:ee:00:36:ab:a1:5c:c6:7a:
82:63:f7:70:90:01:e2:d0:49:e9:43:20:56:50:95:c9:b9:47:
0a:70:e8:bc:5f:a2:b6:78:2b:7a:dd:ca:67:78:ae:07:78:8f:
6e:72:19:82:aa:e1:9c:de:0a:97:32:22:03:b4:80:7e:58:ec:
6e:0e:51:8a:87:94:dc:69:60:0a:a4:bc:67:8f:e8:61:db:28:
03:5a:d3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:32:58 2024 by rpki-client on console-ams.rpki-client.org