Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/nlF_47oeifIBwNaZyBMP1Q-VZic.roa
File: nlF_47oeifIBwNaZyBMP1Q-VZic.roa (raw, json)
Hash identifier: u6h9AECEzaDjAmT9HZbfJOdXB4IK82og5BEfOmuMBIs=
Subject key identifier: 9E:51:7F:E3:BA:1E:89:F2:01:C0:D6:99:C8:13:0F:D5:0F:95:66:27
Certificate issuer: /CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7
Certificate serial: 018CC56E260550D42A770AE58402DFD9638D
Authority key identifier: 78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/nlF_47oeifIBwNaZyBMP1Q-VZic.roa
Signing time: Mon 01 Jan 2024 14:29:39 +0000
ROA not before: Mon 01 Jan 2024 14:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15580
IP address blocks: 193.29.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:26:05:50:d4:2a:77:0a:e5:84:02:df:d9:63:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7
Validity
Not Before: Jan 1 14:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e517fe3ba1e89f201c0d699c8130fd50f956627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a6:da:f0:fe:20:32:86:1e:53:03:f6:63:b5:
ce:33:39:2e:a2:8b:d8:bf:90:8d:4a:54:4b:99:25:
38:0c:e2:77:e4:57:00:a7:97:d8:f9:dd:05:fd:09:
9d:88:a7:db:62:43:29:60:d8:02:3f:55:41:7f:14:
c4:6b:85:1d:71:cf:e5:fe:2a:81:29:6c:d8:bf:f7:
97:11:2e:f4:0d:c8:15:5e:76:2d:a5:5d:7f:ed:b3:
e3:56:a3:d6:59:d0:19:35:37:8b:72:6c:fc:6a:82:
88:47:ed:42:8d:27:1e:b2:41:24:96:c6:eb:1b:a7:
0f:73:4f:5a:e6:af:08:76:eb:93:9b:a2:85:9c:23:
fe:2e:47:5b:60:73:f0:13:9e:89:98:c9:e6:0c:48:
40:84:25:56:64:8f:5c:6c:97:9e:01:65:3e:9b:d3:
24:06:21:76:e4:b5:67:cb:1b:9c:d1:a9:f6:a6:31:
28:89:d8:a9:5c:31:f9:ab:29:45:75:8c:82:08:8b:
46:1b:69:56:2f:b3:f5:70:36:d0:5e:bd:9a:4e:34:
b1:39:62:63:d7:41:34:8e:39:9b:2d:d1:72:1e:53:
29:20:d1:fb:33:5a:7e:44:56:75:ab:9a:46:32:82:
35:81:3b:dc:a5:00:08:db:d9:43:25:17:b2:4f:d7:
ed:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:51:7F:E3:BA:1E:89:F2:01:C0:D6:99:C8:13:0F:D5:0F:95:66:27
X509v3 Authority Key Identifier:
keyid:78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/nlF_47oeifIBwNaZyBMP1Q-VZic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.52.0/24
Signature Algorithm: sha256WithRSAEncryption
15:01:5b:b8:ab:04:a0:11:bc:f2:c0:ad:a2:b1:5d:a3:a7:85:
4c:da:25:03:3c:db:de:dc:43:c9:a4:0e:62:ae:a4:ad:d3:92:
3d:8e:b2:ac:29:1c:c3:e1:b6:05:37:8a:b7:e9:65:55:e0:ae:
2c:89:d8:2a:8b:39:64:00:a1:ca:39:5d:56:7a:de:6c:4f:f1:
04:48:90:b6:3b:9d:f0:29:da:24:b9:a2:6c:0a:25:c4:ea:02:
a6:69:7e:43:0f:1c:f0:65:d3:ff:54:d9:b1:a3:71:b3:ae:f2:
da:9c:b3:65:bd:c7:9e:98:50:84:cb:9e:fb:13:d3:6e:dc:c1:
42:d3:1e:ff:16:1b:92:58:50:2f:af:38:8f:a6:ec:d9:f3:bb:
5d:6a:a8:ab:38:4d:01:e6:4f:9c:bc:ce:d0:a2:9b:36:d3:a3:
c8:7b:fd:23:1c:95:cf:c4:89:0b:a4:a3:21:00:cf:4a:f3:74:
a0:78:df:70:60:33:35:62:ab:70:f3:e1:51:5b:e8:ee:ef:02:
25:29:81:4c:36:96:46:59:d2:38:67:a1:18:9e:7e:01:10:91:
b5:eb:80:30:16:30:3d:8d:b6:6d:5e:da:2a:81:34:19:0f:f1:
82:80:dc:ac:55:5c:8e:6b:12:92:25:19:6d:12:89:ed:cb:1f:
de:b4:b8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:01:33 2024 by rpki-client on console-ams.rpki-client.org