Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/NU2ucgoxUD9Ll5QUQnA-tVRGbp4.roa
File: NU2ucgoxUD9Ll5QUQnA-tVRGbp4.roa (raw, json)
Hash identifier: txCh70u8QbDPLIvr6bAFME89YMTmxKrstmr4Ls8D2OY=
Subject key identifier: 35:4D:AE:72:0A:31:50:3F:4B:97:94:14:42:70:3E:B5:54:46:6E:9E
Certificate issuer: /CN=c7221e402998abc1f035475e158b74e8c76920c0
Certificate serial: 018CC79420571C7E39B774B522F40EFEE8F8
Authority key identifier: C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/NU2ucgoxUD9Ll5QUQnA-tVRGbp4.roa
Signing time: Tue 02 Jan 2024 00:30:22 +0000
ROA not before: Tue 02 Jan 2024 00:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208972
IP address blocks: 185.201.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:20:57:1c:7e:39:b7:74:b5:22:f4:0e:fe:e8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7221e402998abc1f035475e158b74e8c76920c0
Validity
Not Before: Jan 2 00:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=354dae720a31503f4b97941442703eb554466e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:ca:b6:8c:c4:03:b2:58:6c:34:ea:38:54:
5f:63:ce:0d:c7:90:a7:e1:95:3e:71:3b:6a:08:a7:
93:82:75:46:b0:d9:b4:c7:75:74:e8:ba:ba:55:ae:
d7:5d:2f:d2:2d:34:95:6c:5b:b9:8d:17:eb:6e:5c:
c4:c3:c7:0a:ab:7c:20:c3:13:8f:15:cf:d8:14:2d:
c9:97:cb:35:7f:f0:a2:69:08:48:ac:81:d8:b9:25:
85:71:9f:04:4e:ef:9c:83:90:25:c8:57:d2:64:37:
39:ea:8f:1c:2c:3c:0a:21:cf:6a:ae:1e:32:d2:c7:
be:2d:cf:86:71:45:cf:33:22:5f:dc:48:bf:45:ff:
a2:12:a7:33:88:94:7e:67:d5:2c:96:06:29:44:0b:
a8:52:e8:ef:2c:1d:cd:92:d5:a8:c8:fe:01:39:31:
53:b7:61:df:94:7c:0b:11:07:0e:0e:7d:75:6c:11:
d2:ec:68:34:0f:d5:61:ac:9b:83:ed:5a:25:a4:b5:
f6:9c:7f:1a:38:44:80:1c:89:17:a3:52:c1:0a:ef:
22:75:f6:d5:82:6d:d2:b8:e3:3c:82:2f:63:19:7f:
c2:02:06:e1:c8:ea:3a:78:a7:7a:b1:65:6d:44:9a:
c2:fd:50:85:18:6d:c4:ea:bf:c8:eb:ea:64:55:c5:
11:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4D:AE:72:0A:31:50:3F:4B:97:94:14:42:70:3E:B5:54:46:6E:9E
X509v3 Authority Key Identifier:
keyid:C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/NU2ucgoxUD9Ll5QUQnA-tVRGbp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.133.0/24
Signature Algorithm: sha256WithRSAEncryption
76:66:4d:85:3d:73:08:86:e8:d5:ad:89:a9:7c:8f:c5:6a:6d:
74:b8:76:86:ce:6a:86:a7:69:9f:90:57:f7:d5:8d:9a:6e:10:
b3:f9:62:72:12:94:30:53:cc:51:8f:87:d2:13:68:5c:78:54:
f7:92:2d:62:01:ce:0b:d1:79:fc:39:8f:0e:4f:1f:8f:93:5e:
f5:e0:16:8d:6a:31:28:d4:20:9b:89:2a:59:99:19:a8:36:0d:
13:57:7d:4b:75:f2:aa:d9:e2:6e:f6:bc:60:3b:e0:60:8a:5b:
3b:80:e7:24:fa:95:5a:f9:99:a0:bf:1e:11:1c:a5:d2:e7:8e:
90:c9:a2:7e:a3:90:90:60:06:c9:f9:4a:ae:b4:b2:4b:4e:3a:
0d:96:49:31:fd:cb:9b:78:17:a0:75:b2:90:08:b1:e5:9f:6b:
76:e7:ce:4d:3e:a2:7f:7d:fd:b6:fa:f7:5e:73:a4:22:48:07:
55:a0:2a:f5:2f:78:79:45:34:35:b7:54:73:38:d0:a7:25:cd:
0a:d5:39:84:9d:a4:10:d3:fc:36:2d:88:bb:21:24:c6:d9:00:
d2:63:48:28:75:a7:95:3c:77:76:41:62:f6:13:0b:c2:04:b1:
b2:95:fa:7b:2a:29:f3:36:ec:47:09:0e:fc:00:68:a2:0d:f7:
86:df:9a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:35:47 2024 by rpki-client on console-fra.rpki-client.org