Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/nZnCuSo6i38qAagQxswOpN4NTGc.roa
File: nZnCuSo6i38qAagQxswOpN4NTGc.roa (raw, json)
Hash identifier: t/VCH0NyGOnOo0sZl9yciGQHBYW/J8uk4h01DEyYT1U=
Subject key identifier: 9D:99:C2:B9:2A:3A:8B:7F:2A:01:A8:10:C6:CC:0E:A4:DE:0D:4C:67
Certificate issuer: /CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Certificate serial: 0192D2E5EFD7351E11DE1E0CD669A473B8E7
Authority key identifier: F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/nZnCuSo6i38qAagQxswOpN4NTGc.roa
Signing time: Mon 28 Oct 2024 11:32:17 +0000
ROA not before: Mon 28 Oct 2024 11:32:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210256
IP address blocks: 185.254.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 17:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d2:e5:ef:d7:35:1e:11:de:1e:0c:d6:69:a4:73:b8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Validity
Not Before: Oct 28 11:32:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d99c2b92a3a8b7f2a01a810c6cc0ea4de0d4c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:62:15:75:68:76:45:0b:eb:f6:65:ec:04:
a4:a4:25:cd:71:5e:6d:38:21:20:b1:ec:70:6f:20:
bc:16:10:c3:da:5c:b4:c9:da:2c:79:5a:7f:56:a3:
9e:dd:e7:26:fd:12:c3:df:1f:68:82:70:55:dc:e0:
fd:62:ad:86:5b:db:fa:0c:19:1d:58:0c:ac:d1:6b:
26:7b:23:9d:e3:11:16:74:0a:36:da:f1:e3:3f:b0:
93:8c:d0:20:a4:0a:8a:56:15:09:e3:f1:f6:db:53:
13:f4:8b:8c:97:a6:33:00:1d:8f:74:bf:e7:63:c7:
9b:38:ce:04:27:63:91:92:3a:b3:b3:66:17:0b:74:
ee:4c:30:68:7d:7c:17:73:cc:5e:87:a8:9e:fa:6d:
31:d2:40:0a:f5:28:b1:6f:c3:1e:9d:13:17:45:ad:
78:be:1e:33:8b:94:18:0d:ab:fb:f0:6c:95:9b:d4:
ab:04:11:17:a9:ca:ca:1e:33:6f:cd:fb:7a:2f:09:
c2:bf:35:26:6b:88:62:52:ff:6a:ef:72:97:7a:1b:
7f:69:85:e9:fc:21:c0:52:39:bc:06:39:2c:05:0d:
fb:ae:d9:a8:4e:6b:f6:9f:18:11:94:51:2b:70:b0:
e7:d7:2f:87:f9:f2:4e:78:b2:9d:eb:07:3f:e5:34:
1a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:99:C2:B9:2A:3A:8B:7F:2A:01:A8:10:C6:CC:0E:A4:DE:0D:4C:67
X509v3 Authority Key Identifier:
keyid:F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/nZnCuSo6i38qAagQxswOpN4NTGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.7.0/24
Signature Algorithm: sha256WithRSAEncryption
76:c9:b6:07:14:e1:23:76:02:da:36:4c:ca:c4:5b:0d:2b:af:
2b:bb:a2:2d:ca:2e:8c:cd:d2:38:b2:b9:3d:3a:7c:d8:54:9a:
f2:e0:a6:da:97:25:de:2c:56:7a:c1:03:0a:3c:76:ea:c3:fd:
9b:30:fa:c4:fc:0a:c5:7d:44:ad:b3:cd:18:f3:2d:2e:ea:58:
db:7e:ce:5e:9b:55:53:53:f8:b1:2c:7f:41:5a:9f:d8:ba:97:
45:f4:03:69:d7:15:f1:d4:7d:a6:ec:b6:a3:c8:aa:a9:69:76:
88:34:e3:2b:61:8a:3c:64:88:ae:29:2a:73:6a:ea:32:9d:66:
e2:84:3e:e1:97:35:95:c4:6c:36:7c:7b:3d:29:27:be:de:5f:
05:34:a4:2f:d3:f9:33:f6:8f:1c:84:95:c0:e5:32:60:f6:f4:
e1:2a:63:8e:a2:41:43:85:f0:2e:c7:0a:96:34:16:3e:cf:ab:
39:73:36:2f:d9:68:3f:cd:14:05:f6:1a:37:04:9f:87:f1:51:
04:73:35:c3:24:56:1c:7a:a7:b0:9a:d7:69:61:df:3c:9d:35:
49:0b:39:63:63:d3:d2:3e:59:52:a0:50:3d:fc:d1:5e:f4:90:
11:8c:bf:0c:74:f8:6c:21:77:7f:10:68:7e:98:ec:85:80:1c:
56:38:d4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:44:31 2024 by rpki-client on console-fra.rpki-client.org