Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/NDbYPOpUJCl8mW2QMtd1UqFSNrs.roa
File: NDbYPOpUJCl8mW2QMtd1UqFSNrs.roa (raw, json)
Hash identifier: NAEHHhrUrRJOowMKAO5ZZXJRQ49sRLRO9wyfmRpEsEA=
Subject key identifier: 34:36:D8:3C:EA:54:24:29:7C:99:6D:90:32:D7:75:52:A1:52:36:BB
Certificate issuer: /CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151
Certificate serial: 018CC9BC8956194623030D0662F167875C3E
Authority key identifier: E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/NDbYPOpUJCl8mW2QMtd1UqFSNrs.roa
Signing time: Tue 02 Jan 2024 10:33:45 +0000
ROA not before: Tue 02 Jan 2024 10:33:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49879
IP address blocks: 185.141.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:89:56:19:46:23:03:0d:06:62:f1:67:87:5c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151
Validity
Not Before: Jan 2 10:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3436d83cea5424297c996d9032d77552a15236bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:97:13:42:27:a5:85:28:cd:e2:1d:14:3d:7c:
c2:5d:5c:bc:1e:9d:19:30:c5:29:59:c5:66:11:9d:
8e:cb:88:2c:bb:f9:f7:bd:ae:ca:62:d9:17:04:43:
94:e2:53:a9:54:c6:f3:14:83:76:0e:c0:35:2e:de:
f2:db:0c:17:a3:58:3e:de:d8:a9:f4:1c:70:f0:c3:
a1:64:b9:8d:fc:93:94:e4:ba:5c:af:43:53:0d:b9:
00:dc:56:a8:2a:d9:10:9c:96:27:ba:b8:77:ad:9e:
a3:4b:9d:8b:3c:d9:b6:1e:63:e3:41:ef:76:4f:59:
78:2c:10:60:4a:ef:d0:90:72:61:bd:3a:d7:7a:41:
45:c3:72:51:aa:d0:3e:07:92:65:b3:9e:4e:fe:c6:
65:00:85:fb:16:77:85:d1:7e:19:96:36:85:21:d1:
7b:dd:ec:b0:d4:5d:85:0d:ed:69:19:76:05:44:df:
cb:a4:6e:eb:6a:e7:70:b2:c1:07:e4:9b:fb:24:a6:
0e:7c:83:3d:d0:82:22:49:a5:e4:fd:05:66:6b:52:
8a:43:98:30:32:d5:7d:63:2b:54:cb:cd:62:1c:0d:
4d:9d:bc:af:fb:6c:2b:4c:63:24:58:55:aa:6b:91:
d5:fa:29:bd:67:76:71:a8:bf:02:df:b3:e6:f3:8a:
9f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:36:D8:3C:EA:54:24:29:7C:99:6D:90:32:D7:75:52:A1:52:36:BB
X509v3 Authority Key Identifier:
keyid:E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/NDbYPOpUJCl8mW2QMtd1UqFSNrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.109.0/24
Signature Algorithm: sha256WithRSAEncryption
83:9a:aa:33:fc:58:86:63:c8:51:31:b2:0b:58:cb:5b:b7:b2:
11:5b:61:4c:64:43:dc:9c:50:8d:8c:b4:db:9f:68:61:2b:68:
26:b6:30:7d:6a:16:60:53:51:d8:43:52:2e:ea:79:e8:18:65:
c3:f4:d0:30:47:91:03:5d:b8:02:32:3e:23:4b:22:f4:68:35:
4a:d7:d1:c2:25:87:aa:71:02:9b:21:a2:e7:a3:10:48:3a:f5:
81:f9:3a:13:0e:a1:43:d7:34:87:0c:8b:7e:87:f0:2b:14:c6:
6c:fa:08:0a:20:c8:6f:94:31:4c:b7:39:cc:53:e3:35:ef:a2:
33:32:81:20:45:59:43:8e:bc:9a:a6:9d:e4:b5:32:de:09:27:
2b:4b:48:c7:0d:9b:cd:e8:b4:69:99:8d:e9:33:fd:83:67:a4:
0b:ed:e4:70:05:72:eb:7d:15:cf:f7:24:3b:87:13:73:ad:84:
52:c9:d9:2f:73:96:68:ee:c4:22:a8:ef:9c:f4:42:74:4e:11:
7d:87:f6:e2:d3:b7:d2:d9:e6:12:df:e1:62:14:62:2b:f0:d0:
ca:1f:47:75:15:d3:18:0b:4a:db:a6:0b:59:60:58:e5:7a:8a:
f0:3a:83:32:df:87:1a:2a:cd:41:32:7d:d1:20:c7:dc:47:70:
b8:95:34:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:20:44 2024 by rpki-client on console-ams.rpki-client.org