Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/NOLdhjjuiW-5IBGq0Y5QSE6m1D8.roa
File: NOLdhjjuiW-5IBGq0Y5QSE6m1D8.roa (raw, json)
Hash identifier: NTJ6B6p95qd5eNfPI1yrQkItpJGvtV7O/4R76pz0PAg=
Subject key identifier: 34:E2:DD:86:38:EE:89:6F:B9:20:11:AA:D1:8E:50:48:4E:A6:D4:3F
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 018CC94E3762C7402159885D5D529D288129
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/NOLdhjjuiW-5IBGq0Y5QSE6m1D8.roa
Signing time: Tue 02 Jan 2024 08:33:15 +0000
ROA not before: Tue 02 Jan 2024 08:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140403
IP address blocks: 81.199.98.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:37:62:c7:40:21:59:88:5d:5d:52:9d:28:81:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Jan 2 08:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34e2dd8638ee896fb92011aad18e50484ea6d43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:e6:96:63:6f:5f:64:d2:35:83:86:6b:61:
97:80:d4:ce:e8:86:6d:e9:96:5d:60:d9:d4:31:4c:
22:a8:42:2b:73:4d:4a:41:04:59:31:55:2b:2f:bc:
73:e6:ae:65:bd:b3:fc:ac:39:0d:4c:91:64:fc:ba:
00:f4:7a:5b:c0:13:2f:e9:64:3f:b4:b9:6e:76:2e:
36:f6:03:cf:97:77:8c:b2:c2:fe:66:72:a9:cb:78:
3e:f2:5f:21:a1:38:35:04:48:58:44:07:54:7a:bc:
0f:4f:da:0b:c6:11:8b:15:e7:60:47:02:4e:bc:67:
f1:73:ef:29:35:49:9c:77:f9:1e:9b:ec:8a:95:dc:
bd:8a:b3:d0:8e:82:fd:6c:47:a8:5a:f1:af:f7:0b:
a1:4a:4e:27:5f:d3:dd:5a:58:a5:d4:44:df:57:86:
17:eb:1d:38:6c:84:77:cd:f9:11:0b:e4:c1:cc:dd:
e8:ac:6b:2a:b2:b1:42:9f:ab:b9:7e:a0:71:ed:a9:
5a:5b:d7:f3:2a:93:6a:f6:ab:20:11:f3:2a:36:09:
7f:d2:72:e7:e5:d0:b7:a6:41:03:5c:05:f4:93:4a:
59:f7:08:cf:95:a5:76:06:78:24:6d:6c:8a:a3:d9:
5a:43:98:28:9e:07:88:88:dc:18:8d:78:e6:79:93:
a2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E2:DD:86:38:EE:89:6F:B9:20:11:AA:D1:8E:50:48:4E:A6:D4:3F
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/NOLdhjjuiW-5IBGq0Y5QSE6m1D8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.98.0/23
Signature Algorithm: sha256WithRSAEncryption
29:50:e6:2d:86:b1:b3:08:69:d6:c8:47:55:51:7d:c1:a7:fd:
b0:1e:5d:90:d9:bd:c5:6f:56:c8:d8:aa:e8:22:c0:f9:93:9e:
2a:7e:0a:92:cb:a0:86:68:b4:a9:4d:3c:4b:40:8e:30:8a:6b:
e7:f2:0f:3a:86:84:be:37:f3:28:0b:99:35:d6:7b:db:bf:7b:
d3:e7:1e:29:03:0a:f3:b1:ba:76:9a:71:06:c7:c9:8c:a6:d6:
fd:90:00:a2:e0:a4:81:4d:a2:bf:3e:3f:b4:4f:7f:64:78:0c:
f3:9c:e3:5d:9d:4a:b2:00:85:42:d9:27:f5:a1:37:e3:3b:34:
6e:63:37:d5:b5:2f:58:e6:a0:76:ec:dc:42:49:d6:20:5f:ed:
49:c2:d5:23:15:fc:e3:db:69:7b:5b:33:78:36:23:b0:e1:e0:
e7:b6:d4:a9:6e:37:11:9c:2d:dc:61:d6:5a:9f:57:e6:3e:8c:
7c:36:ab:bd:3e:be:2f:8a:f6:4a:54:be:07:55:c9:45:96:e7:
49:59:e4:a7:5b:f6:28:e8:36:54:24:0d:b9:57:b4:c1:56:c1:
30:35:5d:c8:9e:c5:6c:bf:15:4d:5d:b1:d1:e9:a1:78:d2:47:
36:82:d5:be:43:32:5e:2e:17:96:e7:67:4a:bc:e5:65:28:90:
c6:d9:43:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:21:14 2024 by rpki-client on console-ams.rpki-client.org