Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/ncBZez982G-LiSjP_Xm3wVRkClE.roa
File: ncBZez982G-LiSjP_Xm3wVRkClE.roa (raw, json)
Hash identifier: dItbW68tLai7YtRf+gnumttLU3SI4vg5J+DzDcWJIfU=
Subject key identifier: 9D:C0:59:7B:3F:7C:D8:6F:8B:89:28:CF:FD:79:B7:C1:54:64:0A:51
Certificate issuer: /CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Certificate serial: 018CCA2AB86E0F28C500CB92DF62909D3DD3
Authority key identifier: 45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/ncBZez982G-LiSjP_Xm3wVRkClE.roa
Signing time: Tue 02 Jan 2024 12:34:06 +0000
ROA not before: Tue 02 Jan 2024 12:34:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 185.68.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:b8:6e:0f:28:c5:00:cb:92:df:62:90:9d:3d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Validity
Not Before: Jan 2 12:34:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9dc0597b3f7cd86f8b8928cffd79b7c154640a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:b8:e4:f1:67:ed:9c:3e:e4:c4:2e:b4:68:
bd:4f:1e:0b:c8:ad:07:c3:6d:d8:2e:d5:2d:7d:ef:
6e:76:7c:09:47:27:48:df:38:86:8a:f6:a7:3a:cf:
3f:df:68:58:c4:ab:56:6e:c8:6c:06:3f:6d:ae:4f:
bc:3e:a9:59:d9:26:db:1d:bf:93:73:41:b5:d8:10:
ac:22:99:07:af:50:7c:b1:7f:d2:54:be:cd:21:40:
c6:ab:7b:73:24:0d:c4:fa:02:07:07:23:5c:d8:fe:
c2:78:27:97:04:cb:ee:20:60:dc:c6:fc:c4:dd:9b:
63:a1:cb:b2:48:05:78:79:34:25:cf:b0:f2:8a:98:
ed:aa:ab:11:f9:59:42:d9:92:ba:c2:8f:0a:99:d5:
d8:23:59:a4:05:90:c8:ac:e3:62:1a:a7:ba:28:4c:
35:a5:fa:7c:06:93:fb:b3:b4:63:21:d8:77:d4:90:
c7:d6:f5:c3:b5:35:3c:9e:97:2d:b8:c0:16:45:81:
9e:73:1c:a4:2a:fc:92:bf:61:67:70:31:47:52:53:
f4:65:a1:87:fd:83:27:6c:1f:68:e9:49:93:ea:2c:
a2:52:8a:57:94:34:f3:e1:eb:14:7e:66:10:a4:b7:
a3:e8:fe:25:90:ca:34:58:5e:63:76:80:ee:4f:e8:
96:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C0:59:7B:3F:7C:D8:6F:8B:89:28:CF:FD:79:B7:C1:54:64:0A:51
X509v3 Authority Key Identifier:
keyid:45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/ncBZez982G-LiSjP_Xm3wVRkClE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.80.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:33:79:32:ee:22:58:26:c4:4b:b9:40:ed:be:26:70:3b:eb:
ec:e6:7d:db:4b:9c:7c:22:3f:03:6f:e1:76:69:03:6e:7f:f6:
3c:62:0c:18:0a:0d:43:cf:7d:a8:e9:d7:1a:ce:30:3b:07:a6:
5f:fd:43:99:65:03:dc:a3:4a:2c:5f:b1:5a:36:e6:54:29:e5:
eb:d5:55:ac:72:e8:cc:39:7d:e1:08:2a:7b:69:4f:9e:db:82:
6c:4d:d6:ad:e0:3f:12:76:40:56:7f:21:7c:0b:68:53:8a:f0:
61:3d:d0:77:f3:73:6a:25:49:22:2a:6b:1e:2e:de:ed:ef:7e:
5c:f6:35:b9:15:86:27:94:d5:3a:85:7a:0c:86:c6:93:36:22:
4d:b2:01:61:cc:99:47:bc:b5:c4:a3:d3:12:1e:83:ca:ca:66:
2b:4b:2e:51:98:7c:b0:2e:97:5e:19:7d:ee:38:e9:ba:24:5f:
56:f5:0d:fc:5f:32:25:d2:c4:e5:81:a0:76:67:87:d5:cf:95:
b6:79:51:80:7c:1c:14:81:45:92:89:8f:a7:5a:e3:ee:06:9c:
91:07:0e:50:e4:ce:ba:e9:ca:92:2b:37:23:ec:47:02:0c:56:
25:2e:78:ab:e2:03:a4:a5:dd:19:c5:8e:c6:f9:cf:cb:96:f8:
d5:c0:dd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 00:03:00 2024 by rpki-client on console-fra.rpki-client.org