Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/nyCt7Dv6p3aoGmc8K9Sq8j-m_Go.roa
File: nyCt7Dv6p3aoGmc8K9Sq8j-m_Go.roa (raw, json)
Hash identifier: /V8TbNABdwlM2xWgeT2vdNhyCyJ1Msc0CJUvlDPI5d4=
Subject key identifier: 9F:20:AD:EC:3B:FA:A7:76:A8:1A:67:3C:2B:D4:AA:F2:3F:A6:FC:6A
Certificate issuer: /CN=d04265fb11c2a220bc350718673e0704d1edadde
Certificate serial: 018CC6B934765C21CFA5CE6444AB6EE2F879
Authority key identifier: D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/nyCt7Dv6p3aoGmc8K9Sq8j-m_Go.roa
Signing time: Mon 01 Jan 2024 20:31:15 +0000
ROA not before: Mon 01 Jan 2024 20:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 62.106.94.0/24 maxlen: 24
149.3.171.0/24 maxlen: 24
45.11.98.0/24 maxlen: 24
45.11.97.0/24 maxlen: 24
45.11.96.0/24 maxlen: 24
45.11.99.0/24 maxlen: 24
134.255.199.0/24 maxlen: 24
2a0c:6d40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:34:76:5c:21:cf:a5:ce:64:44:ab:6e:e2:f8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04265fb11c2a220bc350718673e0704d1edadde
Validity
Not Before: Jan 1 20:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f20adec3bfaa776a81a673c2bd4aaf23fa6fc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9f:e7:4b:21:9f:2e:00:7d:77:54:2c:e4:6d:
d2:55:b6:d9:fa:cd:97:ab:d0:5b:10:c9:12:7d:1e:
cf:32:78:4d:ce:77:4b:4d:b1:00:aa:12:06:d8:e4:
47:64:88:2d:55:c1:f6:88:27:a2:fb:e6:e9:51:c4:
b3:a3:0e:3a:22:b0:4b:3f:f8:eb:22:9b:2a:73:e2:
b3:a2:5c:bc:0a:f1:c3:10:eb:90:fa:18:0b:b3:2f:
8c:8c:4b:17:92:fb:a7:d8:9d:f8:a1:71:8e:4c:7b:
43:a3:b8:b9:63:ad:17:53:7e:0e:73:fe:b4:8e:17:
36:ce:6b:15:09:e3:90:71:10:18:c9:18:ed:c3:66:
cf:e8:b3:04:fe:db:5d:55:65:f1:d0:b5:4f:64:22:
2e:aa:8e:2b:28:86:87:a3:03:08:10:7a:52:33:90:
97:a9:99:fe:ce:cf:bc:86:3c:2a:ac:2e:8f:8d:26:
1f:5e:9b:c3:e0:41:bf:4d:4c:65:02:46:da:4c:f2:
1c:cf:cd:dd:53:e2:82:81:ae:52:17:76:6d:1d:28:
14:e8:6c:8a:01:3c:37:38:48:60:4f:15:f3:98:02:
61:c0:00:c4:5e:0e:59:52:46:3a:35:95:db:7b:44:
9e:bf:86:e8:4b:ed:a8:80:2b:e6:93:15:c4:eb:c1:
03:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:20:AD:EC:3B:FA:A7:76:A8:1A:67:3C:2B:D4:AA:F2:3F:A6:FC:6A
X509v3 Authority Key Identifier:
keyid:D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/nyCt7Dv6p3aoGmc8K9Sq8j-m_Go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.96.0/22
62.106.94.0/24
134.255.199.0/24
149.3.171.0/24
IPv6:
2a0c:6d40::/29
Signature Algorithm: sha256WithRSAEncryption
42:00:df:5d:b7:38:91:3f:10:9a:10:01:2d:5a:5e:0e:9c:13:
a9:58:57:37:be:13:c3:55:4c:64:8a:44:4c:dd:93:42:98:5f:
a7:1f:22:2f:7f:97:7c:dd:5f:b2:46:a3:87:60:4d:71:b0:6d:
7f:62:d5:40:25:b4:57:c0:d6:00:b0:6c:4f:a7:89:4f:0d:72:
eb:43:48:f5:ac:77:d8:80:cf:68:df:ef:1b:a7:46:7a:a3:f0:
51:70:2c:6a:ef:7c:2b:ed:10:71:9c:03:83:86:d6:bc:d0:a9:
64:5e:e2:fd:2b:90:be:57:0d:3f:be:27:8e:23:34:e0:3b:07:
1d:79:6e:41:cf:6c:ce:cb:09:66:37:32:48:63:1f:65:46:a3:
60:8d:d4:d5:44:2d:9d:ea:51:4c:f6:34:43:1b:de:6f:46:93:
79:68:af:81:30:11:95:86:9c:db:61:28:2b:71:7f:3f:7f:17:
b6:39:26:81:f1:f2:1f:be:d3:4d:9a:c6:9f:db:8d:7b:8f:3e:
bc:9e:83:fc:c9:36:fd:42:f4:e6:18:25:8c:79:fa:23:dd:3a:
59:74:ad:28:e0:0e:32:34:cd:f4:47:f3:55:d6:b3:8a:bd:31:
a2:a4:87:8b:ee:95:45:2d:a7:15:6c:e7:19:1d:72:44:65:0d:
d7:ca:3f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 12:38:30 2024 by rpki-client on console-ams.rpki-client.org