Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/N-0SDNVCK11doXDpFiP2JnxdIQ0.roa
File: N-0SDNVCK11doXDpFiP2JnxdIQ0.roa (raw, json)
Hash identifier: gyuNRgJdY4TUvynqERP6xsMQ1qdH4yJxNFw58n4DWUQ=
Subject key identifier: 37:ED:12:0C:D5:42:2B:5D:5D:A1:70:E9:16:23:F6:26:7C:5D:21:0D
Certificate issuer: /CN=c6165ef13707cf5a7c3bca9de6da5f13ff015f1a
Certificate serial: 019062FCE21B304505868958EA1B7696DD56
Authority key identifier: C6:16:5E:F1:37:07:CF:5A:7C:3B:CA:9D:E6:DA:5F:13:FF:01:5F:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhZe8TcHz1p8O8qd5tpfE_8BXxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/N-0SDNVCK11doXDpFiP2JnxdIQ0.roa
Signing time: Sat 29 Jun 2024 07:54:18 +0000
ROA not before: Sat 29 Jun 2024 07:54:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209279
IP address blocks: 185.188.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhZe8TcHz1p8O8qd5tpfE_8BXxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:62:fc:e2:1b:30:45:05:86:89:58:ea:1b:76:96:dd:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6165ef13707cf5a7c3bca9de6da5f13ff015f1a
Validity
Not Before: Jun 29 07:54:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37ed120cd5422b5d5da170e91623f6267c5d210d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:53:55:9a:bd:96:bd:59:c7:a9:69:5a:db:4c:
74:c0:22:82:3b:f2:fd:7a:ae:45:f8:aa:09:ea:33:
c5:0f:06:41:73:a5:2f:0f:05:5a:9c:e8:f2:4e:5a:
00:9a:34:63:1f:2f:54:19:e7:66:e0:fd:75:7f:41:
56:f2:09:c4:b2:c6:b7:74:6f:2d:10:3b:47:64:44:
89:d7:67:48:c6:80:ec:e0:00:60:d7:ae:cb:db:46:
71:1c:ff:ce:3e:58:05:b0:45:1f:27:6a:7b:a2:63:
04:40:35:e9:51:9c:32:a5:d4:3e:6f:32:cc:02:af:
12:77:0c:00:ad:1e:51:64:1a:0b:79:57:a5:e3:2f:
d2:f4:35:4e:e2:ea:c1:87:c8:f2:5a:aa:c0:af:2e:
58:07:0d:9b:73:a1:4f:bf:11:8e:7c:cb:87:52:a9:
d7:5d:cb:e6:99:3e:67:3b:21:e5:9c:c6:ef:6f:22:
fb:d1:bb:e6:e3:d5:aa:ae:94:18:4e:8d:ff:3d:6a:
ca:d1:e4:d5:aa:5a:eb:41:79:77:f3:5a:52:ab:8c:
b5:ab:ba:31:ad:29:2d:cf:cd:85:41:5d:6c:a0:6a:
34:cd:d7:65:d7:e0:b0:d3:bb:fd:a5:57:b4:c1:43:
b4:3b:84:09:db:56:ee:f1:ed:52:04:ee:98:57:b4:
92:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:ED:12:0C:D5:42:2B:5D:5D:A1:70:E9:16:23:F6:26:7C:5D:21:0D
X509v3 Authority Key Identifier:
keyid:C6:16:5E:F1:37:07:CF:5A:7C:3B:CA:9D:E6:DA:5F:13:FF:01:5F:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhZe8TcHz1p8O8qd5tpfE_8BXxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/N-0SDNVCK11doXDpFiP2JnxdIQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.31.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ce:61:c7:89:cf:f5:c4:6a:6d:44:f9:c3:f6:6e:67:22:73:
96:55:ac:a4:f0:23:25:5b:70:21:32:89:e4:bd:f7:d8:03:18:
01:b5:9c:8b:d0:da:91:94:47:7c:cc:57:93:aa:ac:d7:b9:8a:
a4:53:12:fa:b5:b5:32:31:cc:97:bc:af:6b:33:f1:2d:b0:69:
31:2f:1c:b5:55:ef:2a:25:c2:ba:a0:07:58:50:d6:a3:6d:d3:
75:12:6b:ce:0a:cb:0b:77:fd:56:fb:3e:b9:a7:57:c6:a6:dd:
ed:d9:9e:32:9b:c9:3a:a5:35:77:df:cd:e4:9b:9d:9e:c8:a3:
9b:99:a9:7d:fe:6b:ce:08:42:08:09:3d:2c:4f:ce:97:ea:c7:
09:35:b2:a5:40:65:b0:2b:89:f5:a2:b0:dd:51:d9:79:a6:89:
b4:36:25:2f:5e:d3:37:7f:a8:62:37:68:3d:f3:02:3e:b7:f2:
6d:33:5c:02:67:84:23:06:af:eb:6c:c4:db:48:14:bc:58:6f:
bc:43:6e:e7:f4:7c:dd:eb:00:fa:d3:0b:07:9c:15:4f:e8:5a:
12:d8:4e:43:46:39:5d:4a:6b:e3:34:a7:e7:8d:a3:88:e8:dc:
15:ce:a5:67:d6:0a:ac:49:b8:15:ea:5e:1d:1c:45:b1:a6:8b:
21:8a:f0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:22:46 2024 by rpki-client on console-fra.rpki-client.org