Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/nBYLzbcbJlpDu8VeDWvn2efGy70.roa
File: nBYLzbcbJlpDu8VeDWvn2efGy70.roa (raw, json)
Hash identifier: I1X/Qp0GGo4AReWhWfvQ34SIEsM0rxgyrvtSkrSphSE=
Subject key identifier: 9C:16:0B:CD:B7:1B:26:5A:43:BB:C5:5E:0D:6B:E7:D9:E7:C6:CB:BD
Certificate issuer: /CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Certificate serial: 018CC4255707C91A8358BFB8A73B411A4AA4
Authority key identifier: 24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/nBYLzbcbJlpDu8VeDWvn2efGy70.roa
Signing time: Mon 01 Jan 2024 08:30:30 +0000
ROA not before: Mon 01 Jan 2024 08:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206178
IP address blocks: 185.194.102.0/23 maxlen: 23
2a0a:49c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:57:07:c9:1a:83:58:bf:b8:a7:3b:41:1a:4a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Validity
Not Before: Jan 1 08:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c160bcdb71b265a43bbc55e0d6be7d9e7c6cbbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:93:6d:c7:5e:51:a6:1e:da:58:b6:d2:13:b9:
61:85:3f:f5:01:6f:13:5c:8a:fe:15:fa:16:d6:43:
2d:c7:80:37:f3:fa:65:4b:71:ab:df:80:c9:ce:46:
7c:1d:f1:19:19:e7:0e:1e:98:5c:de:60:a1:c0:a5:
96:72:26:8b:1c:bd:8a:ce:fd:75:59:51:d6:f6:40:
d7:5b:27:98:b4:84:29:30:01:78:8f:31:b9:99:33:
13:ab:ee:4f:e0:a9:ed:5e:92:11:13:69:47:78:2c:
56:2d:83:56:21:7f:c6:57:5d:a4:17:06:f5:25:e4:
31:83:a5:99:8e:ff:a5:39:a6:bd:92:ef:ef:95:21:
6b:be:d9:d2:54:a4:4e:f0:b5:21:01:96:20:fd:87:
a0:7e:0f:5d:f5:dc:3c:51:aa:2b:93:2c:11:46:9d:
ae:9a:41:bc:4d:b0:90:7c:ec:87:e9:f0:8a:31:af:
bf:63:0a:5d:20:d6:c4:3d:21:0b:47:b5:36:4f:02:
67:0b:ea:87:b0:e5:bd:84:cc:2e:b0:0e:a5:9a:50:
07:ae:5c:d1:d5:f0:8d:39:26:6b:6f:a6:fc:04:12:
53:59:67:6c:b7:04:45:98:4a:82:c8:b9:9d:78:e9:
0a:a0:49:ac:bb:d5:c4:f3:4c:e8:d0:5b:23:c4:b0:
9f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:16:0B:CD:B7:1B:26:5A:43:BB:C5:5E:0D:6B:E7:D9:E7:C6:CB:BD
X509v3 Authority Key Identifier:
keyid:24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/nBYLzbcbJlpDu8VeDWvn2efGy70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.102.0/23
IPv6:
2a0a:49c0::/29
Signature Algorithm: sha256WithRSAEncryption
ad:3a:f1:86:e3:af:ce:6d:60:1e:6d:e4:67:fa:24:ee:d2:0e:
9c:46:8c:64:46:37:0a:ff:ec:82:65:22:01:56:bb:5b:05:40:
6a:96:d2:13:af:e4:aa:1e:2d:9b:0e:98:78:23:be:4e:6b:8a:
4e:5d:ee:d5:a5:7a:ad:79:dd:cd:43:50:90:c9:79:8c:dc:e5:
88:3a:b3:6a:12:e0:4b:b0:9d:b1:08:00:78:29:26:b4:8d:37:
47:2e:ca:c3:84:c5:bd:bd:d3:72:27:0f:b7:07:da:73:af:08:
95:46:f9:66:66:b2:0c:c6:c0:75:b2:e3:88:83:7c:e8:0b:ac:
c2:3b:b2:2d:91:2e:a1:e8:56:c2:ac:e4:7f:0d:58:9c:e4:4f:
71:d2:d6:3e:8d:83:81:e8:04:9c:a0:05:19:28:3e:82:d8:43:
18:1e:d5:85:8b:69:5e:cf:93:c3:8f:33:ea:e1:15:ae:e9:ff:
ec:3e:fc:72:6d:1e:0b:e1:8a:1d:4d:7e:47:4d:90:65:aa:05:
98:bd:a9:b8:d9:6f:3b:57:b3:bf:91:e7:24:d8:aa:99:48:ff:
63:3b:b9:7b:24:57:70:5f:5f:d4:9e:c9:6b:47:f9:a5:a1:5e:
43:19:d6:21:b1:04:23:de:10:56:08:af:33:b4:ac:ba:14:3a:
c6:d1:3f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 11:08:15 2024 by rpki-client on console-fra.rpki-client.org