Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/nAX-QUlp-DfK2eV4on3kQTa1fIQ.roa
File: nAX-QUlp-DfK2eV4on3kQTa1fIQ.roa (raw, json)
Hash identifier: dDUiOyI06rdwpg680tJmTgjMkJR1mX/rBT3S+MmJ+VA=
Subject key identifier: 9C:05:FE:41:49:69:F8:37:CA:D9:E5:78:A2:7D:E4:41:36:B5:7C:84
Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial: 018CC42557D9AEFDFB5120724458C9B529DC
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/nAX-QUlp-DfK2eV4on3kQTa1fIQ.roa
Signing time: Mon 01 Jan 2024 08:30:30 +0000
ROA not before: Mon 01 Jan 2024 08:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12902
IP address blocks: 185.240.112.0/22 maxlen: 24
217.77.128.0/19 maxlen: 19
217.77.144.0/24 maxlen: 24
79.98.168.0/21 maxlen: 21
79.98.170.0/24 maxlen: 24
2001:9c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:57:d9:ae:fd:fb:51:20:72:44:58:c9:b5:29:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
Validity
Not Before: Jan 1 08:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c05fe414969f837cad9e578a27de44136b57c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:9d:d5:2f:e9:4b:85:8d:d8:1a:4c:04:f1:
98:d6:f0:75:97:cf:d1:1f:54:d1:7a:29:27:42:db:
c4:6e:1a:9c:27:ac:b3:b2:9c:71:06:38:19:a8:b6:
a4:ec:f3:70:b5:54:75:dc:15:e4:69:db:09:a3:fc:
0f:9b:a2:ec:83:81:2f:41:be:bc:7a:1c:0d:2d:01:
cb:d6:c5:68:ff:a9:31:a7:32:f4:28:1e:ad:5a:02:
a9:a6:9f:d7:c4:b6:8c:7c:10:92:2c:b0:ec:87:be:
52:6c:35:14:86:00:de:5e:48:05:12:f8:ab:d9:fe:
5e:49:5d:a2:ee:de:74:ae:e2:9c:98:b9:7f:37:41:
f9:1c:c0:0f:9a:16:3b:8c:5c:86:0e:78:e7:4e:49:
8b:10:30:c5:24:81:96:61:45:6f:35:4f:85:69:dd:
11:c2:cf:36:ec:71:7e:25:d7:13:b6:72:f8:43:dd:
15:3f:f6:79:5c:08:bb:fa:50:d5:cf:aa:ff:34:b4:
bb:dc:94:7b:0f:c4:a6:48:ba:aa:c2:68:a7:ee:8c:
b2:a0:88:1b:ca:60:3e:c3:c0:45:73:e4:c0:b7:66:
ef:6b:8e:d2:08:1b:12:71:a6:67:5a:12:c5:41:71:
75:46:0a:fe:16:55:47:a0:c7:ef:27:58:54:c6:d5:
6d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:05:FE:41:49:69:F8:37:CA:D9:E5:78:A2:7D:E4:41:36:B5:7C:84
X509v3 Authority Key Identifier:
keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/nAX-QUlp-DfK2eV4on3kQTa1fIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.168.0/21
185.240.112.0/22
217.77.128.0/19
IPv6:
2001:9c0::/32
Signature Algorithm: sha256WithRSAEncryption
2a:e1:1f:3a:64:57:60:94:46:cb:77:da:74:82:76:5c:19:15:
b0:f6:be:f1:0f:99:cd:24:88:97:54:30:38:30:2d:9a:35:43:
9d:7a:13:80:64:94:81:bc:98:27:69:d8:5e:b2:30:34:88:49:
d3:7a:57:fc:17:75:2b:97:4c:cd:f9:8b:e9:01:33:53:d4:cd:
2f:0b:94:dc:41:6d:a7:37:db:46:b2:00:80:77:56:72:0f:25:
bb:fa:60:18:0c:4f:e9:fd:69:2c:cd:4f:5b:48:00:a0:79:b9:
5b:a5:08:6c:84:2d:e1:45:60:70:4d:1c:a7:7f:54:c6:74:68:
a7:68:bf:22:06:00:56:ab:49:61:17:8f:ff:dc:d7:b2:09:54:
e9:88:0b:0f:3e:98:5f:ff:99:fb:06:62:08:d0:33:50:96:ec:
2f:e2:b3:a0:2d:0c:b4:25:e2:c8:68:e3:6f:05:0b:d3:9d:74:
e9:33:14:db:84:95:a7:66:8b:bc:66:38:90:cd:72:6f:de:97:
81:f7:3d:ba:a6:83:12:5c:06:91:4d:cd:06:99:01:78:34:e5:
cc:94:f9:bb:be:15:aa:72:ce:31:17:cf:83:c5:f7:29:cb:7f:
9e:d5:43:ea:c7:48:87:c7:37:77:dd:35:30:c4:2f:72:7e:ab:
c0:0f:c5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:00:27 2024 by rpki-client on console-fra.rpki-client.org