Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/nwrpl19zqI4Jl_H34Bp8lB-Yf2k.roa
File: nwrpl19zqI4Jl_H34Bp8lB-Yf2k.roa (raw, json)
Hash identifier: 18vMQ762KTl0WIy3l0yuE4xW/YdkaLHwwAhfcUT1aok=
Subject key identifier: 9F:0A:E9:97:5F:73:A8:8E:09:97:F1:F7:E0:1A:7C:94:1F:98:7F:69
Certificate issuer: /CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf
Certificate serial: 018CC3B6710CE5A1A70245B396BEFD8FD53B
Authority key identifier: 5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/nwrpl19zqI4Jl_H34Bp8lB-Yf2k.roa
Signing time: Mon 01 Jan 2024 06:29:22 +0000
ROA not before: Mon 01 Jan 2024 06:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16027
IP address blocks: 193.168.160.0/22 maxlen: 22
217.71.64.0/20 maxlen: 20
217.71.69.0/24 maxlen: 24
217.71.67.0/24 maxlen: 24
217.71.68.0/24 maxlen: 24
217.71.73.0/24 maxlen: 24
217.71.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:71:0c:e5:a1:a7:02:45:b3:96:be:fd:8f:d5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf
Validity
Not Before: Jan 1 06:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f0ae9975f73a88e0997f1f7e01a7c941f987f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e2:b2:2a:33:d0:62:2b:31:cd:65:05:fb:26:
d8:61:3e:e9:c9:f7:73:ca:8d:9a:c5:27:ec:5c:a9:
48:73:ff:48:77:e5:0f:9e:47:fe:5e:a7:84:3a:ec:
10:ea:40:8f:7c:9e:89:02:31:43:19:71:66:8e:b2:
1a:1d:1f:a5:a0:4e:73:b5:b1:2e:8c:1b:67:3d:10:
3f:0b:58:bc:56:64:6f:83:bc:a6:2b:4a:7b:37:37:
f8:94:bd:7c:60:83:02:c7:18:b2:81:98:ff:47:ac:
44:29:fa:b1:5d:13:52:dd:fd:21:c4:59:af:6e:00:
07:dd:bc:cd:e7:33:38:ac:2b:fc:9c:da:15:d6:d3:
b4:be:c0:1d:ac:1c:e1:69:d1:77:7e:ce:cd:79:85:
0e:2b:3a:33:44:38:0f:a9:6c:e7:20:f5:95:6d:5c:
3d:42:55:a5:f3:c6:46:23:54:46:bd:86:ce:9f:7b:
03:36:da:90:29:87:28:5b:ae:a9:fc:d7:be:3f:28:
c9:21:e5:78:6a:2c:2b:a8:45:a6:43:8b:fb:e6:36:
4b:86:d2:74:a6:8d:52:f7:b8:41:56:77:26:8e:92:
d9:f4:f7:71:a1:4c:44:39:3f:27:47:c3:ab:b6:3b:
42:f1:be:b1:ae:9c:ad:d9:af:4f:d3:ed:b7:8d:b0:
cf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0A:E9:97:5F:73:A8:8E:09:97:F1:F7:E0:1A:7C:94:1F:98:7F:69
X509v3 Authority Key Identifier:
keyid:5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/nwrpl19zqI4Jl_H34Bp8lB-Yf2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.160.0/22
217.71.64.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:ad:5e:19:0f:71:01:8f:e1:fc:76:5f:61:62:a0:92:e4:b4:
7c:7b:76:c0:a7:93:2d:91:58:13:85:82:4a:64:37:c2:c4:c7:
5b:e8:1c:e3:9e:9e:5b:f1:a2:59:86:cc:33:73:c8:94:a5:4b:
18:2b:a1:aa:36:a6:9b:6d:1e:94:63:6d:aa:22:01:11:d9:37:
24:16:b4:66:0c:05:46:a4:f4:4a:31:93:50:26:9a:58:59:29:
22:f8:6f:44:d6:8f:d0:c4:19:8c:ca:83:73:c3:dc:07:7b:c4:
e8:5f:7c:c3:d8:9f:04:27:b1:71:2b:4f:b8:06:cf:87:84:36:
10:c0:30:b6:fa:3a:44:1c:96:72:3b:a6:28:5d:a0:e3:57:01:
e8:27:99:3a:42:e7:15:37:12:b4:97:b8:c4:7e:cc:8c:c6:97:
19:26:38:3f:f0:42:02:08:be:03:c9:68:b2:79:53:65:05:cd:
3f:21:92:c9:64:e0:73:e7:6c:e0:03:63:4a:43:57:a3:6c:a9:
ec:96:c9:d3:91:4b:b1:0e:08:23:37:bd:07:ca:36:70:81:5b:
78:7f:50:39:17:ab:6d:03:6c:84:d5:41:f1:ef:e8:03:de:c5:
ab:48:65:34:58:4d:87:2f:ce:30:d4:bd:a3:9a:27:b3:77:ae:
a5:74:eb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:48:50 2024 by rpki-client on console-fra.rpki-client.org