Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/NwVWnLCrsEPj6q-SHyz9ViMZI3o.roa
File: NwVWnLCrsEPj6q-SHyz9ViMZI3o.roa (raw, json)
Hash identifier: 22oHO8UiEcGJ+mul9bfeYrA5duvyBQ+UDWDV2AE7+rk=
Subject key identifier: 37:05:56:9C:B0:AB:B0:43:E3:EA:AF:92:1F:2C:FD:56:23:19:23:7A
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 018CC9BBD2C591E37EF89FFEC67B3CD5DE13
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/NwVWnLCrsEPj6q-SHyz9ViMZI3o.roa
Signing time: Tue 02 Jan 2024 10:32:58 +0000
ROA not before: Tue 02 Jan 2024 10:32:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59448
IP address blocks: 217.20.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:d2:c5:91:e3:7e:f8:9f:fe:c6:7b:3c:d5:de:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 10:32:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3705569cb0abb043e3eaaf921f2cfd562319237a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5e:53:ca:19:1e:2b:4a:8d:d2:96:6a:58:12:
d2:c3:d0:a9:09:c7:d1:11:08:33:99:0b:68:18:d8:
d3:2d:e3:95:9d:0f:6b:2c:7a:5a:6c:51:42:e0:c9:
58:f9:63:27:d4:32:f9:fb:a7:23:80:60:1a:d2:bf:
9b:1d:f7:bb:29:0e:b6:ee:8f:cb:00:96:82:c9:cd:
83:14:be:ca:44:77:8b:d2:d5:af:91:5e:0f:66:ca:
a4:26:e7:8d:9f:ca:8b:c9:36:5c:e9:51:12:87:f6:
b8:38:87:5c:f3:ba:96:6c:d9:82:1e:d3:19:40:bc:
e5:03:dc:87:6e:7b:6b:1d:c8:9a:45:51:f6:66:36:
47:af:db:dd:39:29:9b:b5:7d:c5:17:1c:66:1d:5c:
50:55:44:19:44:93:37:7f:bd:f9:e2:90:03:d2:65:
d5:8c:0c:06:1f:c1:8a:00:ff:39:51:c7:f2:19:d5:
be:7f:2a:1a:d5:18:f2:3d:07:41:6c:be:eb:70:7d:
26:3c:64:33:43:a7:12:2f:aa:51:c8:11:d9:6c:e9:
4d:cf:46:69:3f:19:e4:63:ec:46:75:46:1c:b2:0c:
d3:68:bc:5c:64:f0:80:58:41:3d:46:3a:b0:cb:fd:
f5:48:ae:4f:03:4a:99:b8:b6:97:27:f2:35:1f:d1:
74:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:05:56:9C:B0:AB:B0:43:E3:EA:AF:92:1F:2C:FD:56:23:19:23:7A
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/NwVWnLCrsEPj6q-SHyz9ViMZI3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.20.128.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:cf:8f:09:2a:d6:a3:2e:a2:5c:6a:1a:6c:5c:ea:92:78:5f:
df:e3:20:d3:bc:d7:e0:86:7b:17:37:23:4f:7f:42:9b:73:a8:
28:10:92:67:bd:db:86:de:a6:68:1d:7a:b3:eb:03:5e:21:ef:
d0:b6:a7:90:62:ec:21:e0:41:29:aa:8f:ea:c9:55:d8:7c:b8:
89:3d:ec:02:33:72:9f:e9:98:ce:3b:65:de:9f:70:ff:d0:34:
ab:64:01:8f:1d:63:37:6d:41:b2:8d:99:22:91:6b:7f:a1:e9:
4c:6f:72:3a:55:7b:c4:00:22:c0:17:4d:1f:4e:b1:c8:a4:e3:
11:c9:6b:4b:21:f0:bf:78:62:7a:c2:da:41:f3:d2:6e:4f:57:
03:70:aa:ca:16:b0:a5:e4:8c:f0:b5:fb:e1:6a:56:f0:ff:eb:
5f:a8:81:c4:82:ef:a7:0e:40:ba:59:ea:7f:8c:1b:05:72:dd:
c7:c4:eb:ed:65:14:e0:f3:1b:eb:7e:4e:a3:bc:6a:36:23:98:
97:4f:d1:ed:a9:44:52:32:6b:5c:cb:fe:6a:8c:e7:3c:5d:b4:
3b:de:6d:13:30:a8:dc:e3:5b:84:c6:66:30:92:9f:47:73:4f:
72:80:87:b8:04:22:31:59:92:83:0f:ca:4c:3e:6f:ec:70:fb:
a6:2a:b5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:43:46 2024 by rpki-client on console-fra.rpki-client.org