Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Nvt3Okm51TLVbvrR7V7LH-oH_X4.roa
File: Nvt3Okm51TLVbvrR7V7LH-oH_X4.roa (raw, json)
Hash identifier: Z1rzb/MZtdgB0qaNHODQFd/Hn4VEC45Z0AnkXZuMb7s=
Subject key identifier: 36:FB:77:3A:49:B9:D5:32:D5:6E:FA:D1:ED:5E:CB:1F:EA:07:FD:7E
Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial: 018D1C0CB64AF075EB2D4B4933FF639B9BDE
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Nvt3Okm51TLVbvrR7V7LH-oH_X4.roa
Signing time: Thu 18 Jan 2024 10:10:11 +0000
ROA not before: Thu 18 Jan 2024 10:10:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 185.124.150.0/24 maxlen: 24
185.124.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1c:0c:b6:4a:f0:75:eb:2d:4b:49:33:ff:63:9b:9b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Validity
Not Before: Jan 18 10:10:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36fb773a49b9d532d56efad1ed5ecb1fea07fd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6f:40:43:33:0c:4f:aa:dc:9d:fb:29:00:20:
d0:12:fa:f1:0e:a1:55:e7:0d:b6:1d:1c:8e:87:67:
09:59:59:1f:4f:08:a9:19:ae:59:41:b0:87:85:7c:
5c:03:ec:25:9e:16:4d:d2:8a:29:23:42:7c:f1:da:
b3:25:e4:1a:63:ab:5b:90:46:75:72:80:fa:4d:d4:
8e:2b:95:1d:dc:61:6c:92:4e:1e:9d:7e:75:2a:3f:
dc:ac:ca:e2:86:91:4e:16:a4:59:50:35:c2:7e:bf:
e9:76:96:88:c5:0d:6f:49:55:b7:3b:81:1d:8d:fb:
63:35:e7:82:b8:79:a7:f0:fa:ce:46:80:00:47:37:
f3:55:b7:b8:aa:8a:5e:c4:b1:4c:14:4d:e4:5a:ad:
21:32:e3:ae:1c:e7:3f:c6:e0:88:9b:61:4a:f0:53:
f3:33:60:d4:ea:f5:fc:3e:1c:18:75:6e:55:a3:27:
fe:c1:fe:18:ba:26:13:c3:09:df:bc:52:9f:e2:bb:
88:87:b6:c9:80:47:03:46:8d:8c:a2:3a:72:0e:6a:
1c:5c:bd:4e:c9:d9:57:0b:4a:69:ae:d9:1c:fe:da:
bf:7b:2c:83:d8:28:0d:1e:43:23:2e:dd:d7:03:15:
5a:54:0d:15:37:66:dd:92:1e:b2:50:e7:3a:e3:82:
e8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FB:77:3A:49:B9:D5:32:D5:6E:FA:D1:ED:5E:CB:1F:EA:07:FD:7E
X509v3 Authority Key Identifier:
keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Nvt3Okm51TLVbvrR7V7LH-oH_X4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.150.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:0f:6e:3c:9c:78:fd:31:74:0d:02:49:d8:0b:31:3a:be:8a:
e8:7d:1a:a4:a3:51:d2:4b:2a:47:d5:b7:04:51:64:92:ea:4b:
8a:90:84:53:8d:29:0c:4d:da:5f:53:cf:4f:42:1b:e2:20:57:
3d:f4:49:35:76:b5:27:ed:41:e5:60:b3:85:f4:9f:32:f1:9c:
7c:36:7e:03:8f:91:10:79:4f:ef:95:1a:67:67:c2:6f:bb:d1:
2c:bc:3e:a8:29:e7:c7:3d:4b:da:49:5f:15:7b:27:df:a1:70:
d6:65:17:e4:ef:97:18:ad:c0:90:02:15:92:f9:8e:67:fe:6b:
b2:57:8b:b6:27:5d:07:2b:ab:52:54:7b:0d:ae:40:3f:dc:6a:
fc:d2:f8:55:02:34:e4:93:c5:98:3f:dd:b9:7c:ff:73:6c:2a:
e7:e5:a7:1a:4f:f3:e0:7e:9b:4e:b5:ff:a8:11:73:fb:18:ac:
04:e5:2c:a1:54:8f:39:e7:24:ef:af:20:c8:40:cb:f1:37:dd:
66:17:c8:e4:85:6c:70:f7:76:74:52:6e:9a:5f:5a:90:4a:46:
8b:77:9d:b2:05:2b:2e:a1:48:2d:22:32:5c:d6:45:2e:91:33:
18:ec:9e:52:3f:bf:4e:fd:80:0a:94:92:1b:a5:09:80:18:6b:
a7:c2:a9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:36:14 2024 by rpki-client on console-fra.rpki-client.org