Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/Nb2rRolZLL_hAAlisdTEJF-Ib48.roa
File: Nb2rRolZLL_hAAlisdTEJF-Ib48.roa (raw, json)
Hash identifier: +723z00/1lIv9e1TZxd1D+jOnerWM1hPBVyef6ZM0R0=
Subject key identifier: 35:BD:AB:46:89:59:2C:BF:E1:00:09:62:B1:D4:C4:24:5F:88:6F:8F
Certificate issuer: /CN=6f3c9c76e2afc73ccedbc9e0292ffb99f65e7352
Certificate serial: 018CC794FF8D44918C1FF169BBE09ADF0E83
Authority key identifier: 6F:3C:9C:76:E2:AF:C7:3C:CE:DB:C9:E0:29:2F:FB:99:F6:5E:73:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzycduKvxzzO28ngKS_7mfZec1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/Nb2rRolZLL_hAAlisdTEJF-Ib48.roa
Signing time: Tue 02 Jan 2024 00:31:19 +0000
ROA not before: Tue 02 Jan 2024 00:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203730
IP address blocks: 185.106.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzycduKvxzzO28ngKS_7mfZec1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:ff:8d:44:91:8c:1f:f1:69:bb:e0:9a:df:0e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3c9c76e2afc73ccedbc9e0292ffb99f65e7352
Validity
Not Before: Jan 2 00:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35bdab4689592cbfe1000962b1d4c4245f886f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1a:33:5b:5b:cc:06:6a:33:b2:2b:06:fb:de:
3c:2d:69:f4:e3:01:0d:f7:34:a0:a0:33:b0:08:46:
a1:61:0d:ff:f3:b6:b6:9f:39:ab:b4:5f:76:62:b9:
38:69:ac:c1:9c:fe:1a:ee:11:ee:88:fc:97:db:c7:
39:0f:64:df:4c:e5:bf:22:2b:69:92:d5:b0:31:8b:
57:fe:17:95:20:6c:c5:4b:65:c2:ca:f2:e8:f3:92:
0b:57:5f:e5:59:7b:d7:67:35:ed:04:5b:53:83:f0:
82:dc:73:05:5d:95:45:3c:f2:02:7e:3e:9d:46:6a:
63:dd:a8:e7:97:54:bc:5a:71:65:49:e9:33:24:f0:
ba:44:21:06:77:e8:d1:3f:c8:f6:3a:61:a2:20:3e:
b1:75:c7:fb:53:9a:21:7d:ff:6c:c1:34:1d:c6:fe:
ad:5c:04:ae:be:b2:f6:e3:82:a2:ca:49:61:a5:a8:
ad:16:f5:87:00:ba:d4:6e:5b:33:76:07:25:c5:b6:
44:a8:77:a0:cb:37:7b:5e:7f:9c:ed:fe:fa:a6:62:
4c:e0:39:7d:e7:b4:46:ec:da:bd:71:2b:93:04:1a:
e2:05:76:08:02:6a:d2:d7:11:f6:00:fb:09:19:73:
65:75:a6:3d:96:d7:27:5e:e1:c0:e7:40:e0:c7:e1:
33:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BD:AB:46:89:59:2C:BF:E1:00:09:62:B1:D4:C4:24:5F:88:6F:8F
X509v3 Authority Key Identifier:
keyid:6F:3C:9C:76:E2:AF:C7:3C:CE:DB:C9:E0:29:2F:FB:99:F6:5E:73:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzycduKvxzzO28ngKS_7mfZec1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/Nb2rRolZLL_hAAlisdTEJF-Ib48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.116.0/22
Signature Algorithm: sha256WithRSAEncryption
44:e6:6e:00:75:e4:c4:62:b0:25:75:28:d9:e6:a2:7f:9a:36:
46:6e:52:3f:53:3d:95:72:e6:79:64:3a:d9:e9:48:63:e0:c6:
46:8b:8d:06:c9:fd:da:82:36:fc:2b:f1:3d:a7:cb:f1:b3:ee:
a5:00:e9:2f:bb:15:86:66:80:db:b9:5a:ab:d6:89:50:b6:90:
88:39:ed:3d:40:b7:19:28:92:56:f2:02:49:27:f5:ed:9d:4f:
36:84:94:cf:6a:a0:44:77:ed:ad:4f:dc:ba:0d:ae:25:ef:24:
7c:eb:b9:79:c8:20:76:ed:d1:70:92:4f:d5:a2:35:a8:51:b7:
8a:fa:17:ad:9d:0a:e3:2e:cd:e3:f7:bd:85:d2:35:c9:93:71:
c5:be:f6:aa:b4:6a:42:9d:c4:8c:f7:f9:24:9a:ed:61:3c:d0:
9f:2d:85:2f:43:ce:cc:66:c9:56:ca:0b:b2:56:0b:19:1e:e5:
64:88:52:66:3a:a0:8d:87:a1:28:62:e7:bd:7a:e0:a3:64:73:
a7:4f:8a:70:b4:cf:a8:b0:c1:a5:b0:43:9f:2d:f5:40:ea:02:
b2:84:29:f2:05:e0:ce:e5:7a:83:37:27:90:69:6f:10:e3:dd:
c5:00:32:68:65:8d:0f:71:8b:06:ed:6d:8a:74:79:2a:45:54:
e4:b1:66:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:05:06 2024 by rpki-client on console-ams.rpki-client.org