Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/noOFGAvQjgCp9EdhWzUnNOHOKiE.roa
File: noOFGAvQjgCp9EdhWzUnNOHOKiE.roa (raw, json)
Hash identifier: V2qDfHN4Eknc67zPWHDK//lcJi8ziSuM9sXcupGs1AU=
Subject key identifier: 9E:83:85:18:0B:D0:8E:00:A9:F4:47:61:5B:35:27:34:E1:CE:2A:21
Certificate issuer: /CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
Certificate serial: 018CCA9770EF650011876CA60CCA61D8100C
Authority key identifier: 9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/noOFGAvQjgCp9EdhWzUnNOHOKiE.roa
Signing time: Tue 02 Jan 2024 14:32:51 +0000
ROA not before: Tue 02 Jan 2024 14:32:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20795
IP address blocks: 193.109.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:97:70:ef:65:00:11:87:6c:a6:0c:ca:61:d8:10:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
Validity
Not Before: Jan 2 14:32:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e8385180bd08e00a9f447615b352734e1ce2a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ff:23:61:53:9e:41:d5:fd:c1:f3:06:5b:68:
03:5c:28:1e:26:5b:a3:8f:0c:19:85:cf:31:b6:88:
e7:fe:be:56:79:d1:91:a2:34:c5:91:bc:24:40:70:
01:ed:35:cc:79:40:d6:65:ac:f6:88:b7:7c:3c:32:
cb:ca:c1:fc:f8:95:ba:55:2f:f0:fb:8d:86:8c:68:
b7:8e:a9:c2:40:13:48:07:c0:b7:cd:73:7a:f9:21:
59:a3:8f:a8:fb:f5:78:11:f2:5c:d1:28:74:fa:06:
27:98:65:fc:65:f5:61:cb:c2:d9:ec:4b:ad:b0:29:
86:d9:ea:79:b1:94:e0:81:8a:53:d3:33:69:fc:3f:
8e:41:15:88:40:2b:7c:be:53:98:15:fb:df:dd:11:
22:17:cd:da:70:d9:13:92:ab:91:39:f3:c2:72:bf:
18:75:6a:95:70:44:a3:b1:79:69:0e:03:b0:85:d9:
97:a3:86:40:25:c4:4f:93:df:2a:9d:f9:15:c9:a2:
59:ad:c3:60:4f:9e:4c:df:49:8e:59:de:ac:47:69:
24:85:2d:47:ef:c5:df:bf:7b:ef:79:01:4a:86:d5:
47:0f:9e:30:c5:48:ba:11:b0:e4:28:3d:18:33:ac:
d8:6f:d2:4d:40:05:57:39:1f:f0:50:37:14:8a:8b:
a9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:83:85:18:0B:D0:8E:00:A9:F4:47:61:5B:35:27:34:E1:CE:2A:21
X509v3 Authority Key Identifier:
keyid:9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/noOFGAvQjgCp9EdhWzUnNOHOKiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.96.0/22
Signature Algorithm: sha256WithRSAEncryption
54:2d:bd:e8:b9:8b:11:ca:ea:e0:84:83:a1:a4:5d:22:89:03:
84:12:07:2e:d0:d1:c3:9b:e4:58:65:c6:ef:e5:d1:a3:7e:f8:
32:e8:59:32:f1:b1:39:16:63:5e:58:49:00:fa:f8:7e:9b:15:
23:73:c8:a3:7c:f8:b1:b9:d0:41:53:02:99:9a:22:d2:53:6c:
dd:6b:20:28:84:d0:3d:80:e6:80:be:7a:c0:8f:a3:67:84:5f:
99:fc:b9:a8:12:b5:16:66:e4:71:17:85:85:f6:01:0a:43:b9:
15:c2:a5:8c:f4:51:2d:07:59:8f:7b:1d:91:b5:fe:1b:30:21:
d6:44:ff:9b:a6:01:2b:5b:b7:b5:ff:95:c7:c8:f6:ed:d3:35:
23:e2:6b:33:b2:09:d2:76:84:27:62:19:bc:0e:8c:47:3e:32:
31:cb:66:01:cf:18:ce:f8:b5:dc:ff:7d:ed:b4:ca:47:3e:1b:
a1:4c:1c:79:26:7a:58:2e:bd:0d:98:4c:47:82:f4:b7:b2:a7:
9a:91:d8:a8:bd:3a:09:06:8d:a9:08:d1:ea:25:3f:31:25:94:
b2:99:b2:ab:9b:1f:75:09:cd:c2:d9:6d:11:19:80:de:fe:d6:
c9:60:33:3a:45:7d:e3:71:7f:58:3e:d9:b4:68:53:19:27:86:
13:de:4e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:21:56 2024 by rpki-client on console-ams.rpki-client.org