Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/N5HRxhNjxufIlrAVaE3jHDepDdQ.roa
File: N5HRxhNjxufIlrAVaE3jHDepDdQ.roa (raw, json)
Hash identifier: 8EpuV9DlpvY28/zr7enqkFUyGB0Hj+SE5+1VOt8+nPA=
Subject key identifier: 37:91:D1:C6:13:63:C6:E7:C8:96:B0:15:68:4D:E3:1C:37:A9:0D:D4
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 01927A68F6E4093FEFCCD1300090AC03FCFD
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/N5HRxhNjxufIlrAVaE3jHDepDdQ.roa
Signing time: Fri 11 Oct 2024 07:09:12 +0000
ROA not before: Fri 11 Oct 2024 07:09:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24655
IP address blocks: 62.228.230.0/24 maxlen: 24
62.228.233.0/24 maxlen: 24
81.4.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7a:68:f6:e4:09:3f:ef:cc:d1:30:00:90:ac:03:fc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Oct 11 07:09:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3791d1c61363c6e7c896b015684de31c37a90dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:76:12:f1:12:33:2f:9b:7b:6e:13:a1:6f:b6:
6b:58:89:9b:9b:a0:94:d7:35:19:85:18:00:68:32:
32:aa:c0:03:a7:30:b1:aa:8f:0a:6c:f6:be:b7:a7:
1c:f7:61:16:c8:5b:1f:21:a1:c2:dd:8c:e2:f9:93:
1f:07:23:a0:77:ef:7a:c0:5e:94:b5:19:14:06:55:
e7:e4:dc:0f:0a:ae:2d:5f:c9:1a:9f:ef:2e:8d:78:
dc:51:44:31:c2:d2:b4:f1:66:af:05:1d:53:51:99:
fa:9a:09:98:99:1e:03:a7:51:12:46:53:75:03:e8:
75:13:13:62:77:14:ae:71:c6:b2:ee:55:74:35:c1:
7d:d5:b1:40:c3:bd:1e:ff:f4:bd:63:b6:c1:20:47:
b7:71:4d:53:a6:54:b9:57:a1:7c:d3:5d:93:2e:75:
46:b2:4e:62:a8:3f:93:9a:1a:81:ec:de:8a:8e:30:
d3:10:a8:11:f5:dd:f1:41:2a:17:ed:fe:44:2f:a7:
32:3a:29:22:ec:63:45:e1:fa:49:bd:03:80:08:a6:
c0:75:75:11:cc:68:17:29:9b:a9:76:b8:43:21:63:
ba:15:8f:41:2a:b9:16:fb:35:ef:86:50:4e:e1:f4:
1d:76:73:b0:a7:a1:2d:8e:b2:37:ab:e6:20:46:1a:
2d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:91:D1:C6:13:63:C6:E7:C8:96:B0:15:68:4D:E3:1C:37:A9:0D:D4
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/N5HRxhNjxufIlrAVaE3jHDepDdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.230.0/24
62.228.233.0/24
81.4.190.0/23
Signature Algorithm: sha256WithRSAEncryption
11:11:9f:9d:06:d3:09:4a:43:5b:05:ab:a7:61:f2:d2:e9:0e:
dd:bb:fe:d7:74:ff:c8:2b:d9:54:31:ac:8a:2b:a6:cd:13:a0:
4e:65:a0:c4:5d:b9:a5:88:6f:17:9f:a7:5c:4a:3f:e4:d5:aa:
a2:6b:33:a3:97:4a:65:7c:6f:0e:e1:70:a9:86:72:c8:a7:a1:
80:f4:04:e0:57:c5:b6:e7:9c:d4:9c:cd:dd:ac:e5:64:ad:92:
f3:85:7e:91:0c:c2:d4:37:f1:7f:ea:7c:14:16:37:4b:4f:02:
bc:c2:8b:19:d5:c1:b2:bd:97:e3:a3:47:99:c2:01:1d:ad:98:
d6:d2:19:87:8f:2e:6c:2d:25:88:17:8c:ec:8f:97:05:ce:3a:
bf:bd:29:6d:c7:e5:22:fd:67:2d:f0:49:60:c1:e6:d6:e4:38:
ff:3f:37:30:59:39:0e:86:ab:65:14:71:99:88:17:f4:8d:76:
09:83:7a:01:8b:0e:12:44:44:a4:f7:1a:10:3f:4b:79:07:c6:
80:ed:42:7d:f9:7b:d0:9d:30:04:63:91:74:a3:39:19:6f:5f:
8d:7b:e2:88:1d:97:5d:fd:3c:22:05:09:b9:b1:d9:81:98:5f:
e9:53:09:11:ed:dc:ea:62:ae:76:fe:7e:71:7d:04:73:e5:cf:
bc:ab:f8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:03:08 2024 by rpki-client on console-fra.rpki-client.org