Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/NWogvXMqmUpdO-N6GhHHrmDBo7Y.roa
File: NWogvXMqmUpdO-N6GhHHrmDBo7Y.roa (raw, json)
Hash identifier: dnX67nxi7tAlj5KbkvYwvBERO2tUEEZ8csoi3t17MkQ=
Subject key identifier: 35:6A:20:BD:73:2A:99:4A:5D:3B:E3:7A:1A:11:C7:AE:60:C1:A3:B6
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 0191E4E6FE61016269DBE35F5A8C9A873200
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/NWogvXMqmUpdO-N6GhHHrmDBo7Y.roa
Signing time: Thu 12 Sep 2024 06:23:49 +0000
ROA not before: Thu 12 Sep 2024 06:23:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206119
IP address blocks: 107.150.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e4:e6:fe:61:01:62:69:db:e3:5f:5a:8c:9a:87:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Sep 12 06:23:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=356a20bd732a994a5d3be37a1a11c7ae60c1a3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b8:5d:1b:b9:78:2b:59:cf:f9:1a:a2:d3:15:
20:35:66:65:93:46:fd:3d:c6:f3:e8:86:a0:01:c6:
39:b5:7f:4b:40:09:6f:74:99:e1:19:83:92:4d:82:
b9:86:53:85:d5:2d:19:bd:1b:d6:e0:8e:bd:74:a8:
14:04:43:da:0c:d1:e3:d6:64:68:ce:f6:3d:17:32:
6f:de:93:cf:71:c5:69:91:56:46:03:c5:b1:5b:78:
10:f0:c2:7a:ed:e0:37:01:27:45:37:19:c9:78:4d:
73:c9:71:59:72:00:94:8a:1a:bc:f6:58:6c:97:53:
68:98:47:f0:6f:a4:6b:eb:a6:13:5b:b9:21:f2:32:
52:68:3a:d0:cd:4b:73:39:89:62:1e:ea:f6:e5:a2:
7f:f5:db:34:99:ad:59:b3:b2:06:28:63:8f:96:8e:
1a:6b:93:dc:09:8e:ec:65:2a:63:fb:43:a8:f6:51:
8a:21:43:b3:44:e2:69:2f:4c:bf:4e:cc:ba:fd:47:
ed:82:42:2c:0c:a5:36:a1:56:27:d9:dd:44:c8:3b:
e8:40:77:16:28:77:0f:ba:82:0a:3c:f6:4b:89:59:
05:df:b8:03:6d:ba:ae:09:c6:24:ea:39:33:87:45:
23:4b:c5:c3:3c:e9:56:b0:96:ec:da:f3:1f:d9:ff:
a1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6A:20:BD:73:2A:99:4A:5D:3B:E3:7A:1A:11:C7:AE:60:C1:A3:B6
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/NWogvXMqmUpdO-N6GhHHrmDBo7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.150.164.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:ce:18:cf:df:3a:bf:ab:a0:bb:47:3f:9e:ec:0f:95:83:d6:
cc:70:1c:04:69:81:83:76:e3:e4:45:d3:39:92:b2:56:4d:5a:
b6:87:b6:25:fe:05:77:94:40:bd:c0:46:01:56:08:34:bc:e2:
16:67:10:53:6b:05:df:a8:fa:79:7f:4e:c2:7d:23:ab:61:04:
e2:53:03:4c:cb:c6:6a:ef:c7:f8:dc:5c:2a:61:dc:34:91:6b:
ce:14:a1:ac:a5:70:16:94:39:c4:32:fa:1f:5b:dc:bf:aa:40:
42:63:89:55:71:76:80:69:5c:66:4d:0e:43:91:11:c7:f1:76:
60:63:dc:38:2a:44:66:c8:8a:2d:a4:99:61:db:4c:cf:6d:db:
5d:ee:03:75:c9:55:15:35:f0:4a:e6:ab:0c:a5:65:9e:69:2b:
49:dc:60:07:e6:a7:ee:6b:4b:04:d6:43:0d:f0:80:3b:ad:60:
61:80:08:b9:24:f2:24:04:bf:12:cb:8e:13:c7:a9:d5:e6:b5:
79:b3:7b:d8:f2:f8:36:ea:68:33:75:c9:6a:db:8a:ab:1f:fd:
41:8e:63:a2:69:a3:42:87:1e:ea:41:a2:e7:b5:c0:cc:32:2e:
6b:26:6a:a9:cf:6a:ad:ff:d8:32:2d:da:5d:20:d4:e8:90:d0:
c7:2e:b0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:50:23 2024 by rpki-client on console-fra.rpki-client.org