Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/nICPXae558fLd9CqBhx_X7L_in0.roa
File: nICPXae558fLd9CqBhx_X7L_in0.roa (raw, json)
Hash identifier: jZ/BNXD24H0HP0ae9vtlkNRd4BqmCuJeXjZ4pDY7aNw=
Subject key identifier: 9C:80:8F:5D:A7:B9:E7:C7:CB:77:D0:AA:06:1C:7F:5F:B2:FF:8A:7D
Certificate issuer: /CN=321ec194107843848cd36330232b5f6a43791db4
Certificate serial: 018CC425143CEDB9158223CB5FE4F9C3DB63
Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/nICPXae558fLd9CqBhx_X7L_in0.roa
Signing time: Mon 01 Jan 2024 08:30:13 +0000
ROA not before: Mon 01 Jan 2024 08:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 155.231.110.0/24 maxlen: 24
155.231.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:14:3c:ed:b9:15:82:23:cb:5f:e4:f9:c3:db:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec194107843848cd36330232b5f6a43791db4
Validity
Not Before: Jan 1 08:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c808f5da7b9e7c7cb77d0aa061c7f5fb2ff8a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:3e:c5:4a:72:5a:d8:c1:ec:76:85:23:13:
9e:ca:d1:b1:70:92:4c:54:44:49:70:5e:b8:2c:c7:
60:01:e4:9b:41:72:3f:79:e1:76:94:d2:43:82:d3:
4b:f9:19:d3:e4:31:75:47:09:24:b7:ca:a4:45:80:
0e:4a:62:1e:41:b2:55:f3:db:14:0c:8d:9d:5a:db:
d0:1a:ef:85:8f:e3:59:f4:f5:5e:ed:4b:a1:2f:af:
37:29:39:2a:c9:c1:52:81:7c:14:21:48:47:6b:a4:
6b:8a:a8:e5:8d:05:a0:4f:6e:66:b0:21:42:98:c9:
93:95:11:cf:8a:7d:79:76:4c:25:e9:c2:92:43:82:
80:1f:f1:c3:19:f4:87:70:1e:60:f2:cf:1c:6a:ba:
b4:7d:54:50:70:a5:3f:dc:68:30:7c:9c:ae:3a:37:
c5:98:7a:dd:03:14:ba:c5:39:49:c8:4c:06:38:52:
e5:4e:12:79:d4:c8:61:a4:cb:00:3e:b9:c7:ef:57:
15:db:a8:5d:9b:7d:40:6f:c8:3e:eb:89:f2:9d:49:
d4:73:e9:db:33:34:2b:e9:ec:af:dd:81:a1:47:94:
bc:dc:b5:5d:2e:23:c1:81:2f:57:f1:90:64:13:9a:
bc:70:bc:9b:50:4b:92:4f:af:27:8d:67:ea:b3:2a:
4f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:80:8F:5D:A7:B9:E7:C7:CB:77:D0:AA:06:1C:7F:5F:B2:FF:8A:7D
X509v3 Authority Key Identifier:
keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/nICPXae558fLd9CqBhx_X7L_in0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.231.110.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:d5:95:37:7d:6c:39:be:3d:9f:ee:04:2a:d2:2c:64:ff:5c:
23:6b:80:a5:2f:65:6e:c5:ee:b7:03:aa:30:28:03:79:f1:f6:
e0:97:f7:33:b5:67:db:a4:1d:db:5f:b4:c1:41:c6:6c:3e:d0:
88:8c:54:b2:a7:37:fe:a6:cf:e4:17:fd:03:da:a0:8d:5c:a2:
91:6e:7e:f2:46:df:6b:20:cb:c6:5e:29:8f:a9:cb:09:e2:d4:
d8:00:e8:cc:27:71:2d:25:bc:78:0d:c5:f1:d3:8c:b9:5b:7a:
e8:94:8c:04:c6:5f:9f:55:4e:d7:e6:ef:48:bc:a7:0b:6a:d4:
27:c4:7c:b9:e2:91:21:08:8b:f1:f3:58:fd:a5:e4:c2:1e:fd:
7d:76:8d:48:48:a5:bf:28:a6:81:7c:08:26:df:f4:f6:49:1b:
dd:75:60:2c:2f:8a:63:34:ad:b9:a9:00:78:a1:50:c7:5a:b5:
cd:ea:40:c2:a4:6e:f9:41:ef:99:ca:58:b6:d1:70:7c:15:73:
0e:48:6a:e9:2d:34:1f:88:c8:9d:5e:65:f6:9f:b8:cd:de:3a:
3b:8d:14:3c:51:8a:16:1b:51:c6:8e:54:73:7e:a5:4a:24:84:
cb:12:aa:1d:e9:f9:bc:d3:1b:d3:13:28:4f:c6:61:a2:43:51:
6c:91:ef:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:31:27 2024 by rpki-client on console-ams.rpki-client.org