Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/NGxC0UWzSBe10G2VFw7G25DXucU.roa
File: NGxC0UWzSBe10G2VFw7G25DXucU.roa (raw, json)
Hash identifier: +xqUvGh0zcVMeJIA1tM206Njy0FtyWTJttedxDHBLeI=
Subject key identifier: 34:6C:42:D1:45:B3:48:17:B5:D0:6D:95:17:0E:C6:DB:90:D7:B9:C5
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018FCD5F062D965E969B990034EC7C7AD23C
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/NGxC0UWzSBe10G2VFw7G25DXucU.roa
Signing time: Fri 31 May 2024 06:38:27 +0000
ROA not before: Fri 31 May 2024 06:38:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206804
IP address blocks: 45.86.201.0/24 maxlen: 24
45.139.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:cd:5f:06:2d:96:5e:96:9b:99:00:34:ec:7c:7a:d2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: May 31 06:38:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=346c42d145b34817b5d06d95170ec6db90d7b9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:95:97:7e:e0:57:c1:12:e1:b1:58:f7:9f:16:
6f:5c:f7:cb:30:32:18:3b:43:99:1b:46:21:e5:a1:
87:a4:9a:e4:f5:6f:e2:6e:4a:64:4d:29:40:1b:73:
ad:81:63:1f:78:60:8c:e7:6a:ac:44:8f:f3:f1:10:
2f:15:1d:9b:ac:f0:3b:b6:91:70:8f:03:1c:8c:13:
f4:73:78:95:dd:5c:4e:e3:d1:0b:d5:80:d0:2c:13:
7d:da:7a:c0:1f:33:e7:44:84:46:f9:21:ae:ae:55:
91:5a:46:49:e5:12:97:a5:58:70:7e:40:66:30:71:
70:20:3d:e4:b8:7d:8b:d5:c1:0e:76:25:b0:0c:7a:
e6:9d:a8:e3:7e:ac:f1:50:f9:5a:32:89:b5:80:33:
86:d3:a9:87:d0:08:92:df:8e:2c:1d:51:dd:20:3d:
1f:6a:b3:ad:76:56:0e:14:d3:f8:2f:46:61:f5:8e:
79:46:59:18:cd:21:2e:35:70:3a:85:77:48:19:be:
e8:43:dc:67:52:52:3d:c4:e2:1b:9d:41:fe:24:c8:
a0:f5:c7:95:76:54:d1:b1:73:30:d3:fd:3a:65:cc:
96:90:30:63:73:79:df:63:cc:01:c9:ae:82:7b:42:
d8:c8:78:0a:19:e1:37:7f:b8:57:7f:76:0d:8a:ce:
96:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6C:42:D1:45:B3:48:17:B5:D0:6D:95:17:0E:C6:DB:90:D7:B9:C5
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/NGxC0UWzSBe10G2VFw7G25DXucU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.201.0/24
45.139.48.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:3f:9b:00:e1:23:61:a4:af:a9:a1:43:ea:5c:ab:5b:6d:5d:
ca:3d:30:ce:44:39:58:cd:9f:7a:db:c4:1d:16:52:04:c6:2a:
39:09:ef:f8:66:69:17:fa:b7:0e:1a:c6:d4:59:27:a7:ca:57:
6a:95:87:00:ff:f4:2c:26:2b:12:e7:dc:dc:db:9d:44:eb:a0:
e8:83:87:50:15:cc:7c:b1:fc:36:2d:b6:ae:cc:47:9c:59:bc:
19:48:ed:08:6e:4e:c3:09:64:d7:5f:77:8b:63:11:f7:51:09:
19:3d:4d:1f:ce:79:68:42:dc:1a:ca:98:89:26:07:bb:00:07:
48:a7:42:3e:0f:83:e2:cb:bf:63:7c:aa:fe:47:74:9d:f3:41:
9b:76:8c:98:ae:32:a7:33:64:18:1f:1e:72:e5:6f:b8:86:ff:
20:a5:59:86:b6:86:9c:35:f9:a3:dd:78:b8:23:59:4f:19:a8:
d2:f6:16:24:25:d8:94:c9:8f:b9:c6:4f:10:a9:e4:aa:4c:4a:
24:d7:6f:93:e0:27:58:bd:26:80:f3:98:ac:8c:1f:a5:70:0e:
c4:4a:00:46:50:24:4b:c9:54:9e:b4:17:9b:ac:78:c2:75:73:
da:57:aa:e9:d8:25:70:5c:b4:59:8d:f8:00:96:31:ee:db:e2:
64:8f:d1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:38:47 2024 by rpki-client on console-ams.rpki-client.org