Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/bmLCc31NeugxX4nPPqHbiv6Afmo.roa
File: bmLCc31NeugxX4nPPqHbiv6Afmo.roa (raw, json)
Hash identifier: S5UvXbU9tpKr2xKn8O3qg31AuJ595v6OcOHxKn5GE0c=
Subject key identifier: 6E:62:C2:73:7D:4D:7A:E8:31:5F:89:CF:3E:A1:DB:8A:FE:80:7E:6A
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 018E0EAF6B2978C9D8F1C9D087D0FDB03AF0
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/bmLCc31NeugxX4nPPqHbiv6Afmo.roa
Signing time: Tue 05 Mar 2024 12:56:01 +0000
ROA not before: Tue 05 Mar 2024 12:56:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3257
IP address blocks: 84.247.105.0/24 maxlen: 24
89.149.23.0/24 maxlen: 24
89.149.24.0/24 maxlen: 24
89.149.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0e:af:6b:29:78:c9:d8:f1:c9:d0:87:d0:fd:b0:3a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Mar 5 12:56:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e62c2737d4d7ae8315f89cf3ea1db8afe807e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5b:13:47:a4:3d:cc:98:aa:d8:45:51:8e:89:
d3:1b:06:14:e9:6c:38:18:a9:a2:84:96:05:39:b6:
0f:ea:2d:d1:bd:03:98:e5:da:40:79:60:2c:e3:a5:
19:cf:0c:d3:29:7d:6a:db:8a:66:63:71:6a:ff:2a:
ca:96:48:01:79:10:b8:a5:7c:9b:1c:32:44:29:ce:
cb:1e:2f:a2:da:1f:fa:67:86:9b:23:18:0c:58:08:
f8:9e:a8:e0:90:fd:ec:1b:52:37:f8:10:aa:b9:5e:
82:21:be:a0:a6:1b:57:0b:51:2b:a5:24:ba:04:b9:
8f:63:3c:ff:12:78:0f:b5:ec:27:8e:d5:54:e8:07:
a3:6e:ca:f2:41:86:24:09:92:42:50:8e:2c:56:32:
1a:d9:a1:9d:ff:d4:e9:0d:a5:19:8c:82:57:10:bc:
6c:64:fd:ee:d0:f9:9a:5b:96:f8:66:71:f8:7c:92:
cb:e7:9e:5d:da:0f:e4:69:6f:c0:70:e3:7d:1a:3b:
f2:6f:76:bf:69:26:bc:ac:9d:70:25:b7:57:c5:61:
dc:5e:44:cd:aa:e4:82:32:f4:b8:9d:0c:66:1a:60:
68:d4:6f:86:9c:90:4b:c9:af:56:a1:e4:93:ee:d7:
09:8c:55:56:54:f9:eb:67:67:9b:43:aa:ff:07:a2:
b9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:62:C2:73:7D:4D:7A:E8:31:5F:89:CF:3E:A1:DB:8A:FE:80:7E:6A
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/bmLCc31NeugxX4nPPqHbiv6Afmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.105.0/24
89.149.23.0-89.149.24.255
89.149.52.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:62:92:81:e2:1a:65:ca:a4:a7:06:b0:ef:be:47:3e:99:c1:
4d:cb:f1:5d:9c:3e:09:12:c6:2a:fc:ea:22:39:b9:29:6b:0a:
98:36:59:df:fb:24:ae:52:38:6b:99:5f:6c:ad:82:74:cd:50:
59:57:8d:86:32:8f:df:cb:6b:5a:fe:a9:fa:83:a8:0b:d4:06:
c8:c8:06:19:4f:f8:10:56:73:55:d6:fb:e3:4f:09:7a:35:2c:
2e:f5:b8:bd:aa:99:8c:58:f1:63:b8:94:27:7d:ba:27:cb:1b:
7a:48:83:7b:d6:7e:ae:92:7f:f7:e5:33:a6:46:d6:7d:95:74:
be:ff:a7:30:b0:8b:cb:ab:71:6b:3d:c1:57:e5:8c:ed:56:dd:
29:64:6c:0d:86:91:36:e7:3c:8a:7c:d4:aa:f1:8b:7a:69:71:
e9:41:cc:3a:dd:7c:30:99:83:dd:5e:01:d2:06:1e:96:07:ee:
63:6f:c2:00:8f:37:00:4d:a8:3f:fd:14:a8:e5:c4:07:25:57:
1d:e5:ff:73:f1:00:a4:f9:a2:d1:79:64:9e:b8:06:21:7b:09:
14:9a:21:fc:4a:27:8f:7b:a1:b8:60:d9:da:28:b7:08:86:aa:
b7:fb:5f:a0:76:3a:f2:73:1c:be:45:25:50:91:9e:15:d4:aa:
e9:14:a0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:14:27 2024 by rpki-client on console-ams.rpki-client.org