Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/nZHSIhnx28DaDIpIndJ5JdFjlg8.roa
File: nZHSIhnx28DaDIpIndJ5JdFjlg8.roa (raw, json)
Hash identifier: nZRDyZ75NoY13TjFkJMiwcPm+ghCaoUaFFl2Io7Hh8c=
Subject key identifier: 9D:91:D2:22:19:F1:DB:C0:DA:0C:8A:48:9D:D2:79:25:D1:63:96:0F
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 018CC56E4FF23A5A216CB7983257446F185F
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/nZHSIhnx28DaDIpIndJ5JdFjlg8.roa
Signing time: Mon 01 Jan 2024 14:29:50 +0000
ROA not before: Mon 01 Jan 2024 14:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206150
IP address blocks: 217.114.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:4f:f2:3a:5a:21:6c:b7:98:32:57:44:6f:18:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Jan 1 14:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d91d22219f1dbc0da0c8a489dd27925d163960f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:31:8c:07:87:5e:8a:bb:99:82:b8:d7:79:
3e:e3:88:4f:5d:bf:a8:6e:c6:ae:e3:97:dc:2d:b2:
ea:6d:bc:af:a4:20:26:88:16:f2:d4:8c:0a:a4:83:
9a:7c:70:ba:81:90:5b:b0:67:60:9a:40:89:dc:6a:
d4:5d:63:c7:46:6e:87:b0:e8:ec:1f:2f:5f:8e:8d:
e7:8f:5c:3f:e6:31:b4:4b:85:16:02:c3:4b:63:e4:
27:0b:69:40:18:60:4e:9f:da:5e:00:7f:95:a8:36:
e4:6e:a5:cd:ae:cc:90:b6:07:23:df:e1:38:39:0e:
d4:63:ce:55:e5:78:00:1a:ca:05:94:c2:bf:4e:a3:
5d:da:f5:8f:02:ae:dc:bb:3f:9c:44:48:8e:04:71:
3e:fc:44:b0:2f:b9:ff:9a:c0:6d:e5:e3:30:97:02:
29:9b:1c:79:06:d3:e9:01:3e:71:ee:77:67:1b:90:
8b:3f:dd:2d:27:60:26:4d:c7:d2:e6:79:9d:e6:bc:
11:72:5d:40:0e:63:7c:f6:08:7d:8a:d8:37:74:5f:
d7:63:65:0f:b1:ad:de:39:98:8c:a3:3f:38:a2:99:
f6:05:4c:a7:d8:34:a3:27:1d:26:06:a2:86:7a:91:
67:52:2e:5d:7e:4c:24:8c:e7:e4:fb:b9:9a:74:90:
a6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:91:D2:22:19:F1:DB:C0:DA:0C:8A:48:9D:D2:79:25:D1:63:96:0F
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/nZHSIhnx28DaDIpIndJ5JdFjlg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.39.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:cd:c6:fc:d0:88:4a:ae:f1:91:c5:45:98:64:b1:f6:1d:24:
d6:3d:d9:e5:31:0e:0c:75:e0:aa:92:5c:29:a7:47:2c:6d:91:
d4:70:28:36:8c:12:9f:49:3b:17:0c:ce:97:7c:65:7e:38:1a:
4b:9d:b6:e6:1b:b2:0e:3a:63:44:e6:f1:2f:f9:3c:b8:80:28:
73:1b:e1:6f:b3:a8:1e:bd:aa:5e:57:c6:21:a4:37:78:e1:e6:
08:95:df:18:6e:13:e0:c4:c4:4b:58:f5:b7:60:86:d8:e9:f1:
9e:63:ca:29:33:30:82:69:4f:3a:97:ec:02:20:9e:95:35:f0:
56:a7:b8:9c:24:34:40:98:a9:57:53:dc:98:59:fa:2b:85:b3:
32:62:39:ee:18:df:0b:f3:99:9d:71:e9:da:ba:1d:f7:bf:84:
cd:e3:03:70:2f:69:39:1a:8c:2e:af:25:2f:a5:eb:d6:26:0e:
48:d3:ae:4e:2d:14:3c:02:1f:32:4d:e5:e4:ed:e9:07:7a:16:
8f:82:1d:23:2a:d8:a5:e8:e1:73:4c:68:76:19:6a:de:6b:8a:
81:7b:60:2b:99:71:99:2c:7c:2f:af:5e:82:31:00:a1:e1:02:
52:df:32:6b:b6:69:d3:08:a0:96:ad:ef:84:74:ac:75:dc:98:
3c:d1:8e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:56:12 2024 by rpki-client on console-ams.rpki-client.org