Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/nfBxZzjhR0teH86punjBxOO3eSw.roa
File: nfBxZzjhR0teH86punjBxOO3eSw.roa (raw, json)
Hash identifier: 3g3Aujecgqnx8q3IdVPVsuzp3b3y1+OMCH454RIpbhI=
Subject key identifier: 9D:F0:71:67:38:E1:47:4B:5E:1F:CE:A9:BA:78:C1:C4:E3:B7:79:2C
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 018CC801B1C7B0865478693EFF6EED291705
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/nfBxZzjhR0teH86punjBxOO3eSw.roa
Signing time: Tue 02 Jan 2024 02:30:03 +0000
ROA not before: Tue 02 Jan 2024 02:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209927
IP address blocks: 92.118.133.0/24 maxlen: 24
92.118.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 21:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:b1:c7:b0:86:54:78:69:3e:ff:6e:ed:29:17:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 2 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9df0716738e1474b5e1fcea9ba78c1c4e3b7792c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:25:36:f5:be:0e:c4:e2:d4:22:5a:bf:38:15:
41:d3:ad:35:4c:44:d0:84:93:fc:ba:eb:71:6b:f1:
b7:ff:e8:39:5e:b2:34:0a:d4:2a:55:92:4f:05:0e:
d1:27:d7:81:77:f7:20:b1:f2:6e:f8:02:bf:33:bf:
83:b2:4f:05:51:2f:86:9b:1b:77:20:c4:9b:10:18:
e2:05:68:0e:5a:03:b3:58:58:70:3c:33:14:a6:96:
1c:21:04:9d:66:a5:0c:a7:55:c6:94:c0:6c:e9:06:
ea:ea:26:f9:80:2d:e4:84:c6:a4:c9:06:1a:0c:d3:
2a:c7:07:9d:12:db:a8:d1:29:5a:ad:dd:7e:04:3b:
58:b3:84:fe:78:1b:96:eb:82:cb:8c:7a:d8:1c:44:
c6:c2:e8:45:23:df:b8:92:ea:72:f1:00:8e:f8:c9:
f4:99:4e:bc:d7:26:61:ab:8c:78:bb:fb:b9:3b:5a:
f9:5c:cf:49:56:66:cc:2c:00:82:1e:10:aa:31:17:
8e:78:de:4e:e8:9f:50:c5:8f:a9:c2:3b:fc:5d:8d:
04:b2:b0:b1:c2:cd:ae:ad:25:de:29:fd:3e:66:ba:
c0:76:c9:cc:1f:2b:40:3d:21:df:93:82:0b:28:c3:
37:8f:a4:83:e2:64:53:07:d2:47:62:14:2c:28:01:
6e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F0:71:67:38:E1:47:4B:5E:1F:CE:A9:BA:78:C1:C4:E3:B7:79:2C
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/nfBxZzjhR0teH86punjBxOO3eSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.132.0/23
Signature Algorithm: sha256WithRSAEncryption
61:72:69:d4:8e:20:5e:e1:99:3b:ab:75:ac:1a:db:9f:e8:06:
fb:80:de:09:78:1e:b3:3a:73:48:81:34:de:ff:e9:18:8e:d6:
ec:37:8e:e0:7a:f4:54:b4:72:a6:83:f9:67:f0:77:77:66:e2:
f5:21:c6:14:4a:00:84:a1:79:0e:77:81:7f:35:b0:32:a6:85:
ae:95:43:d4:9d:b5:4c:57:4d:ed:be:49:27:ed:4c:a1:bd:2a:
01:24:6e:6b:17:c4:c4:9a:71:6c:4c:2b:18:10:c7:5f:31:ac:
02:79:34:86:be:df:56:52:32:a2:e3:68:fb:80:ba:8c:f9:ff:
84:28:e8:7c:d4:60:65:59:e0:15:e1:7b:7c:91:67:55:cd:19:
d8:5d:e2:8c:86:d9:98:a5:34:dc:9e:64:e3:17:97:d2:54:61:
3f:ab:8d:ce:b0:86:ed:cd:b6:d1:3b:d0:0d:ff:95:3d:08:de:
73:77:a8:97:ac:3d:f3:d1:1d:93:2f:87:67:1e:8e:56:f3:11:
24:e3:0d:7d:1d:81:5b:a4:f5:68:fd:ea:62:a6:3d:29:b0:e6:
af:86:8b:09:47:6e:f8:ac:56:26:d8:ee:be:06:cd:e9:5a:3f:
16:1b:b9:36:54:2d:56:39:65:a2:63:fb:73:ff:a1:58:71:ad:
d0:7b:03:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 05:43:38 2024 by rpki-client on console-fra.rpki-client.org