Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/ncJAxD3k3CLPH_2LbOxGom0ch_A.roa
File: ncJAxD3k3CLPH_2LbOxGom0ch_A.roa (raw, json)
Hash identifier: xY3mZf3JE/AEJ2g1ZKoLMuaJrtsafOgMkpjRAhGfPPU=
Subject key identifier: 9D:C2:40:C4:3D:E4:DC:22:CF:1F:FD:8B:6C:EC:46:A2:6D:1C:87:F0
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 01934B4BF8551DD1CA857242BF4A12E47413
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/ncJAxD3k3CLPH_2LbOxGom0ch_A.roa
Signing time: Wed 20 Nov 2024 20:38:10 +0000
ROA not before: Wed 20 Nov 2024 20:38:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212939
IP address blocks: 195.238.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4b:4b:f8:55:1d:d1:ca:85:72:42:bf:4a:12:e4:74:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Nov 20 20:38:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9dc240c43de4dc22cf1ffd8b6cec46a26d1c87f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:f4:f8:60:2f:a1:c7:7f:2f:9c:de:9c:1d:
86:0e:e1:4c:78:d9:e6:6b:9f:eb:ff:ba:06:21:7e:
6e:34:74:2c:70:d8:36:8b:4b:c3:74:5b:6d:35:e4:
e6:04:3d:79:d2:c2:20:13:74:73:54:86:dd:53:67:
80:e5:24:87:7b:f2:aa:01:09:2a:bd:f2:11:54:fa:
ae:00:40:40:6d:ca:ec:06:0d:02:97:76:8c:6c:68:
61:e4:a8:8d:80:a1:ac:61:0d:db:bd:3d:0b:c3:d1:
e7:a1:40:ab:71:92:1c:0d:48:f9:28:dd:37:74:71:
3e:be:e1:4c:8f:d1:ee:1d:cd:3a:f0:38:b5:75:dd:
b0:51:f1:4b:31:d9:1c:bc:ef:17:7d:8f:ee:d0:3c:
af:2d:3a:15:7d:f9:68:db:a5:00:dc:95:b5:b5:c4:
4e:e9:b2:33:d5:8f:f2:ec:34:99:e8:1f:b9:56:8e:
9a:0b:5b:a3:06:80:81:70:6b:98:1e:9d:3e:25:d4:
3e:97:97:f4:b7:a2:53:4f:58:01:67:69:0f:42:58:
94:31:b9:ce:a3:96:ea:ef:c0:6b:de:6f:12:16:0a:
ac:7a:bc:0a:0d:cd:9b:33:19:a0:74:fa:1a:71:1a:
3e:35:4e:6f:f3:a7:0d:02:b0:79:12:fe:17:e5:47:
9a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C2:40:C4:3D:E4:DC:22:CF:1F:FD:8B:6C:EC:46:A2:6D:1C:87:F0
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/ncJAxD3k3CLPH_2LbOxGom0ch_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.247.0/24
Signature Algorithm: sha256WithRSAEncryption
95:37:c9:9e:a3:d9:72:0a:03:fb:fa:e2:a5:17:8a:b8:30:80:
d8:ca:d5:e3:95:37:71:0e:bd:7d:cf:94:c1:44:3b:0b:c6:4b:
c8:e5:95:00:4b:bd:16:64:dd:5f:34:c1:96:1d:71:67:cb:d0:
74:6e:d5:ef:d6:c1:1c:1d:f0:3b:65:66:0b:bc:a4:2d:1b:e3:
5e:68:6e:25:f5:da:85:69:2d:30:e4:5e:d8:60:6b:45:5b:67:
ce:00:8e:25:da:6e:32:b7:ad:07:91:8b:d6:7c:4d:88:4d:0b:
bf:3f:b2:03:db:0a:3f:bc:0d:e4:fb:15:b8:70:d2:06:7c:46:
3f:c6:ca:2c:30:c2:c0:86:a1:3d:9a:a0:17:1e:46:da:3c:24:
fd:e7:51:43:4a:7a:a2:be:e2:eb:63:04:19:32:0c:a9:0e:bc:
c6:ee:2b:1b:9b:a5:26:3c:84:7b:5d:7d:98:20:4a:27:b6:05:
8f:91:99:2c:f1:09:ae:f9:d2:9d:75:be:3a:ef:38:68:2a:f9:
44:b4:61:ba:70:6e:1b:62:0a:a7:95:ca:dd:f3:95:16:1a:3f:
d6:6c:28:1f:57:2d:f5:54:90:c6:5f:89:a2:4e:ec:f4:da:5d:
c7:9e:72:44:ec:87:e0:07:56:1c:cd:0d:cd:dc:59:17:b1:87:
ab:42:7d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:44:44 2024 by rpki-client on console-ams.rpki-client.org