Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/NLcfFwJr3A92HjLrSaAInfGD2nY.roa
File: NLcfFwJr3A92HjLrSaAInfGD2nY.roa (raw, json)
Hash identifier: 8gqwjnd5sMrdbBV66f1gxSmXusaW2IvLXzHfu/Ge27E=
Subject key identifier: 34:B7:1F:17:02:6B:DC:0F:76:1E:32:EB:49:A0:08:9D:F1:83:DA:76
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 0192951FA571E8923E93ECF1586F901D9A98
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/NLcfFwJr3A92HjLrSaAInfGD2nY.roa
Signing time: Wed 16 Oct 2024 11:38:51 +0000
ROA not before: Wed 16 Oct 2024 11:38:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214996
IP address blocks: 152.53.31.0/24 maxlen: 24
152.53.36.0/22 maxlen: 24
152.53.52.0/22 maxlen: 22
152.53.68.0/24 maxlen: 24
152.53.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:95:1f:a5:71:e8:92:3e:93:ec:f1:58:6f:90:1d:9a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Oct 16 11:38:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34b71f17026bdc0f761e32eb49a0089df183da76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1e:49:d8:27:f2:c4:a0:13:8e:af:f9:1e:ed:
f7:51:43:6b:53:12:fd:0f:3d:f6:db:b7:5a:16:ab:
57:45:b8:dd:bf:b4:11:9f:20:b4:32:79:5e:1e:6c:
df:98:f0:e0:7e:0b:e1:e1:ad:ac:f3:bf:a0:ad:3c:
15:d1:8c:0e:b8:ee:55:0d:06:cc:3c:15:23:2b:7e:
75:91:0d:aa:d0:56:ab:ea:dd:4a:4b:bc:cd:ce:c7:
d9:cf:b1:ca:97:d2:0b:39:c7:52:ea:97:e7:a8:65:
9e:d9:c8:22:5b:40:53:44:f2:f4:48:1e:7e:5e:3d:
c3:96:40:7e:45:bc:2f:b0:4a:29:0a:9d:16:48:87:
62:6b:45:db:7b:f7:98:b9:d0:f7:76:aa:ec:5c:14:
62:27:50:41:0c:68:4b:f2:b9:9a:d0:4e:a3:03:75:
6a:52:22:d0:54:41:a6:d4:59:d7:8a:45:5e:b2:d6:
01:b6:37:ef:40:e8:b6:17:dd:01:7b:ea:0f:cd:61:
0e:46:89:7e:e8:43:3a:14:23:33:2d:fc:4b:69:1c:
2b:ed:c0:2b:2e:5a:d3:c0:d5:39:b9:45:99:8e:dc:
06:ad:b9:e3:90:a8:ed:18:dd:23:28:16:8d:64:96:
2e:aa:96:7c:da:db:b3:9e:f6:97:f1:cf:c5:0e:20:
74:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B7:1F:17:02:6B:DC:0F:76:1E:32:EB:49:A0:08:9D:F1:83:DA:76
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/NLcfFwJr3A92HjLrSaAInfGD2nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.31.0/24
152.53.36.0/22
152.53.52.0/22
152.53.68.0/24
152.53.80.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:42:6a:58:da:96:48:3c:83:db:22:e0:fb:74:78:e9:37:f4:
6a:74:7c:ef:cd:90:50:0d:53:16:8a:1c:f4:03:bf:58:58:70:
f9:23:b9:16:05:b7:91:90:f0:8c:35:9f:25:76:fc:7e:ba:66:
92:e7:86:ba:e1:53:f4:eb:76:1a:2d:a7:9f:ae:02:83:f0:85:
ac:4c:bc:3d:e2:c1:f1:d4:be:45:9d:f3:c2:8f:f2:0d:98:31:
31:2d:0d:46:ec:fc:97:54:ca:d5:15:c5:ba:26:c5:05:da:c3:
45:00:6f:6a:6c:b0:1d:3e:6f:c4:09:cd:24:6f:f5:ef:91:6f:
d2:22:cc:d1:e6:ca:7c:57:1c:4d:25:fa:d2:7d:38:ee:1b:52:
0f:b2:0d:eb:d9:67:c3:f6:99:25:97:07:af:08:5e:c2:98:1b:
91:26:74:2c:ff:74:5c:75:4d:ac:3f:2e:f8:0b:29:d6:fa:88:
d1:e3:66:f0:90:c2:99:42:a6:4c:76:2e:01:d9:49:ad:1d:3a:
f9:28:bb:d0:0d:ab:c0:19:77:a9:7d:1c:6c:62:af:3b:3d:cd:
f9:1e:c4:78:8b:c3:c7:8a:6a:01:2e:7e:a0:57:b0:bb:24:51:
e0:99:ea:7f:2e:c3:72:a0:f5:5d:fc:0a:95:54:d9:f9:bb:ca:
38:59:72:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:56:26 2024 by rpki-client on console-fra.rpki-client.org