Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Nhlqyvzr775Oopf_JecyVox5dr0.roa
File: Nhlqyvzr775Oopf_JecyVox5dr0.roa (raw, json)
Hash identifier: olFs1XePQfdSjT+8LrXLHpTDYJsa6Kx1j7DZ1I/Va04=
Subject key identifier: 36:19:6A:CA:FC:EB:EF:BE:4E:A2:97:FF:25:E7:32:56:8C:79:76:BD
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 018CCA29D452A5EBEA4E7C31B7E2ABAE4D85
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Nhlqyvzr775Oopf_JecyVox5dr0.roa
Signing time: Tue 02 Jan 2024 12:33:08 +0000
ROA not before: Tue 02 Jan 2024 12:33:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199785
IP address blocks: 185.78.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:d4:52:a5:eb:ea:4e:7c:31:b7:e2:ab:ae:4d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jan 2 12:33:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36196acafcebefbe4ea297ff25e732568c7976bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:24:1b:11:dd:35:60:b8:e5:c6:d7:54:28:
11:ae:ef:06:61:89:4d:90:21:c8:61:6f:44:bd:f8:
ba:fa:23:93:ea:3a:cb:1f:81:84:ab:a8:49:2e:af:
42:4d:fa:39:b0:f9:17:18:d5:55:ab:78:94:ce:32:
16:7a:ad:af:9b:f6:0a:4c:e1:ba:96:5e:4d:12:c7:
2e:c8:87:b4:c9:f0:7c:af:3f:af:3a:ef:f3:49:ca:
8e:f5:7d:33:8b:fc:14:1b:1a:8f:14:57:bf:7a:eb:
99:41:14:51:5c:c9:fa:8c:45:df:13:b7:3d:63:64:
d9:a7:24:30:ab:ed:1e:d9:3f:f8:6d:79:d5:a5:66:
c3:2d:2a:0b:c7:4c:18:64:61:53:63:fc:0c:c2:3d:
6c:36:ba:e1:78:6f:b0:93:86:c1:83:f7:e4:9d:cc:
32:2b:41:dd:e8:bb:bd:49:e9:27:d3:19:06:16:2c:
97:37:d7:a1:3f:40:83:1f:8d:10:db:99:c5:19:5c:
6e:3e:ed:5a:75:94:22:44:c3:02:2d:69:d2:4e:b0:
36:fb:d1:9d:10:96:96:5c:75:73:6e:12:92:4a:93:
da:1a:f2:e5:3a:af:19:8f:37:dc:05:73:82:32:43:
03:e5:99:3d:f6:19:5f:00:1c:92:1a:5e:b5:8b:d5:
db:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:19:6A:CA:FC:EB:EF:BE:4E:A2:97:FF:25:E7:32:56:8C:79:76:BD
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Nhlqyvzr775Oopf_JecyVox5dr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.76.0/24
Signature Algorithm: sha256WithRSAEncryption
58:b2:01:66:f2:66:a4:27:31:70:d7:76:9a:cd:af:a9:d6:73:
c5:42:a8:d0:5d:31:b5:17:be:f3:7a:80:14:e5:80:e5:47:6c:
d9:d8:80:fe:61:e9:e8:3f:03:47:16:d5:7e:7b:44:5b:00:82:
1c:fb:66:5b:e6:55:9a:9d:ea:e3:ee:3f:a3:11:48:f8:3e:8f:
cc:fe:a7:3a:d3:c9:e6:3a:63:13:8e:ac:65:cf:64:33:db:39:
55:02:38:06:cc:aa:06:f2:0d:4c:ba:d5:fe:1b:6f:46:53:71:
d8:f5:cc:eb:b1:54:e5:f2:67:4f:c1:40:20:6d:4d:0f:4c:a6:
90:6a:53:97:9b:d2:49:df:e5:48:ee:3c:bb:70:6f:cd:4a:cd:
17:fe:7a:71:12:54:93:38:92:a7:5d:fe:34:f7:f9:31:8c:e9:
47:87:3c:ef:86:17:4a:77:01:77:46:40:8b:c8:a7:6a:72:d6:
11:48:a8:a3:60:69:5a:7d:27:76:e1:87:65:1d:d2:5a:3e:35:
57:ee:ad:17:85:70:32:06:d7:1d:0e:07:25:c9:b9:04:74:0a:
1e:25:64:80:83:7f:3c:e7:6a:eb:57:94:90:6d:df:1d:9d:9e:
97:43:59:8b:f6:8c:6e:cb:89:a6:4a:36:06:fa:67:95:b9:02:
34:3c:d8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:41:02 2024 by rpki-client on console-fra.rpki-client.org