Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/r0_ENj30bzNLGV3CTYHyT2Wrcf4.roa
File: r0_ENj30bzNLGV3CTYHyT2Wrcf4.roa (raw, json)
Hash identifier: PXkDaQDRIYVSYOq6JxbXdoQv7zZphTUdu9clSZUyuqk=
Subject key identifier: AF:4F:C4:36:3D:F4:6F:33:4B:19:5D:C2:4D:81:F2:4F:65:AB:71:FE
Certificate issuer: /CN=34b419fa4a0a1605188318cdf4a2044992853b95
Certificate serial: 018CC3493CD31F676028C03F52F02DD6D91E
Authority key identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/r0_ENj30bzNLGV3CTYHyT2Wrcf4.roa
Signing time: Mon 01 Jan 2024 04:30:05 +0000
ROA not before: Mon 01 Jan 2024 04:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34309
IP address blocks: 195.8.199.0/24 maxlen: 24
195.8.198.0/24 maxlen: 24
37.153.85.0/24 maxlen: 24
37.153.80.0/24 maxlen: 24
37.153.82.0/24 maxlen: 24
37.153.81.0/24 maxlen: 24
37.153.84.0/24 maxlen: 24
37.153.83.0/24 maxlen: 24
37.153.87.0/24 maxlen: 24
37.153.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:3c:d3:1f:67:60:28:c0:3f:52:f0:2d:d6:d9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b419fa4a0a1605188318cdf4a2044992853b95
Validity
Not Before: Jan 1 04:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af4fc4363df46f334b195dc24d81f24f65ab71fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e9:b6:80:52:9a:74:fa:1e:af:0e:ab:2c:2a:
bd:1f:84:b1:7e:b7:92:c8:a3:cb:8e:1c:54:82:4a:
c4:bb:8f:5d:42:ed:62:e2:d1:fa:f8:75:73:f5:f3:
30:e8:64:0b:71:f2:fe:6f:a5:ae:cf:64:f7:bb:0a:
e6:ac:a2:62:e8:ef:3b:bd:e4:79:30:e1:74:d5:76:
0e:51:e6:a6:79:26:a0:29:50:a2:68:07:da:17:8a:
f1:49:26:f3:8e:a9:d8:f1:1d:68:35:27:e4:18:ff:
e5:e6:3c:6c:ad:08:aa:6e:a7:96:12:ac:35:32:b9:
5b:54:37:da:a7:b4:da:ff:f4:8b:7e:f3:f3:7a:0f:
28:01:db:af:00:78:dc:53:ec:7a:36:66:cc:df:cb:
20:dc:e5:a4:9f:15:c3:18:74:70:e4:72:d8:05:eb:
4c:ee:96:a7:1e:ef:eb:bb:8b:70:e3:b4:66:49:56:
6d:b7:5c:01:39:5d:e0:ef:b4:ed:25:27:ce:68:a5:
2e:1b:3a:0d:59:c9:54:61:a5:a3:02:4b:0c:6d:d7:
44:99:48:37:93:30:c5:c6:2f:de:e7:0a:d3:75:b6:
f8:8c:d2:ea:c2:3a:04:39:a2:09:8f:a2:f6:63:3c:
d7:76:15:0f:ca:8a:d9:fa:67:c5:5f:7f:b0:fb:8a:
54:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4F:C4:36:3D:F4:6F:33:4B:19:5D:C2:4D:81:F2:4F:65:AB:71:FE
X509v3 Authority Key Identifier:
keyid:34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/r0_ENj30bzNLGV3CTYHyT2Wrcf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.80.0/21
195.8.198.0/23
Signature Algorithm: sha256WithRSAEncryption
20:fe:d7:e0:a1:8e:21:7b:0d:96:41:2a:a5:20:0b:16:1d:32:
ff:3e:eb:10:9b:dd:64:4a:67:8a:6e:37:ee:14:1d:ab:de:4a:
3f:b0:c4:23:6e:b9:e2:40:cf:6f:a7:56:c8:54:e0:b4:a7:8f:
7f:14:c4:36:02:a1:fc:60:d5:b0:bf:09:35:d5:4d:4a:44:1f:
96:16:78:e7:0c:c0:c0:6f:2b:92:27:ac:6c:d7:28:cb:39:a5:
8b:2c:db:8c:93:07:42:ac:44:79:8e:28:0a:1f:85:1c:48:b5:
b2:57:9b:b2:60:e8:ee:cf:a3:cb:a0:ac:59:be:0f:45:cf:5b:
7d:14:b8:ce:05:bf:0f:86:b1:64:42:2d:60:f3:66:f6:d2:12:
f3:a1:f3:02:2d:c0:05:7e:9f:15:03:d5:e1:17:85:73:c4:a6:
2b:86:d6:e9:4f:3d:37:a7:24:61:71:41:b1:5c:1e:50:78:2b:
4f:2c:6d:9e:bc:44:67:ea:26:ed:53:68:af:ee:33:85:9f:ad:
2c:80:29:c7:66:f8:b5:5f:0e:a0:5b:12:21:99:1a:61:cb:db:
a7:f0:f0:b4:7d:a8:a1:f2:fe:83:77:ae:a8:77:ca:f6:75:ad:
86:a9:4e:c6:70:93:11:37:69:20:ef:d7:3d:0c:cb:61:1f:18:
22:ec:9a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:37:50 2024 by rpki-client on console-ams.rpki-client.org