Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/NfkBhan7s1XzpkjZPt7UgEundiM.roa
File: NfkBhan7s1XzpkjZPt7UgEundiM.roa (raw, json)
Hash identifier: FrPNLR9IcAd/Pak2b+PgXvqtOS6mdLVTq6sUz+lwpTo=
Subject key identifier: 35:F9:01:85:A9:FB:B3:55:F3:A6:48:D9:3E:DE:D4:80:4B:A7:76:23
Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial: 018CC56E3C4E27739B2253AF3085055DF15F
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/NfkBhan7s1XzpkjZPt7UgEundiM.roa
Signing time: Mon 01 Jan 2024 14:29:45 +0000
ROA not before: Mon 01 Jan 2024 14:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50929
IP address blocks: 178.172.222.0/24 maxlen: 24
178.172.223.0/24 maxlen: 24
93.125.29.0/24 maxlen: 24
178.172.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:3c:4e:27:73:9b:22:53:af:30:85:05:5d:f1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
Validity
Not Before: Jan 1 14:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35f90185a9fbb355f3a648d93eded4804ba77623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:45:a8:ca:f4:67:fa:55:ab:37:f0:5f:5a:
e2:87:42:f8:4b:46:93:14:ab:e6:a2:ab:8a:da:ce:
95:26:44:38:94:11:23:02:32:d5:fe:2a:43:d5:5b:
1f:f8:86:3a:f0:80:8e:06:35:8c:54:4e:75:0a:28:
83:77:02:34:46:42:07:14:64:89:57:e7:ce:db:8e:
80:0c:72:91:1a:5c:b7:47:5e:2d:11:7e:64:e4:d4:
3b:e5:9a:7f:83:f4:85:a9:b0:e0:b2:a2:ee:8a:da:
62:d7:ad:6e:d3:67:a0:79:47:b7:92:f7:a5:44:25:
b8:d4:c9:7d:7c:e6:87:cd:0e:30:6c:e2:c8:92:79:
fa:b9:28:0e:4b:be:f5:e3:2a:fd:24:cd:4c:fa:13:
44:4c:64:37:4c:39:51:46:f0:eb:99:a1:66:53:23:
21:57:ff:18:a7:52:7f:87:a5:00:36:bc:fd:1a:19:
8a:63:19:61:59:e1:2f:4b:ea:d2:db:e5:9a:cf:22:
6e:85:5c:f7:f5:03:b3:a9:ba:f2:ce:63:e8:63:c6:
25:32:d2:8a:f6:f6:e4:36:f9:bd:fc:b2:43:93:fc:
f4:e2:c8:d2:5d:17:48:63:4f:26:00:57:f2:bf:83:
cb:ba:f5:2c:f0:c0:45:4d:08:5f:38:98:59:69:0f:
51:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F9:01:85:A9:FB:B3:55:F3:A6:48:D9:3E:DE:D4:80:4B:A7:76:23
X509v3 Authority Key Identifier:
keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/NfkBhan7s1XzpkjZPt7UgEundiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.125.29.0/24
178.172.191.0/24
178.172.222.0/23
Signature Algorithm: sha256WithRSAEncryption
58:20:5e:17:3f:54:bf:12:9c:e9:88:92:15:6f:ed:cd:e2:1a:
7a:37:b5:9a:63:9d:39:d1:74:75:ad:c8:7c:26:5f:bc:f8:43:
e0:ad:f4:da:9d:7a:4d:02:3d:d7:ec:98:41:34:ff:24:35:5b:
3d:88:0f:27:3e:65:f9:77:c2:23:b3:9d:c7:94:b7:f7:98:6b:
06:e3:3b:07:18:86:ea:87:ca:2e:6a:7d:64:45:dc:c0:a4:83:
b9:1a:4b:d1:e6:85:b6:b5:88:e5:9a:c6:7a:b2:0a:59:dc:dd:
dd:f2:78:7d:a5:4e:ff:16:58:e9:44:a6:c9:00:6e:02:56:4a:
11:9f:01:c1:30:10:fb:9a:55:6b:f8:8e:92:41:21:e2:35:e6:
49:86:98:a0:e2:6a:bb:7f:ed:88:b7:b7:65:1f:14:f0:42:bd:
a8:7e:3f:b6:fc:2b:0e:cb:40:8d:f5:6c:f0:27:fc:0b:99:7c:
4c:3e:ce:7b:4b:dc:37:5a:74:45:fc:70:c3:f9:dc:7a:e0:7e:
d4:3a:49:98:96:42:3c:a0:da:d3:a2:b0:87:c2:e8:ab:f1:58:
08:f9:21:c4:c8:e9:5a:bf:fb:bb:54:32:78:5b:57:7e:f5:4c:
c3:32:dd:5f:a2:e8:2a:54:42:5f:cd:c3:58:f7:3c:bc:6c:d6:
23:c2:e5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:28:45 2024 by rpki-client on console-ams.rpki-client.org