Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/nM6N3OlnMY9XPfbyaZtUwjBBmlM.roa
File: nM6N3OlnMY9XPfbyaZtUwjBBmlM.roa (raw, json)
Hash identifier: n5WfGp0ufil8UKXdVcFPHt1uLFi6QfSYdeCeq7AQjHo=
Subject key identifier: 9C:CE:8D:DC:E9:67:31:8F:57:3D:F6:F2:69:9B:54:C2:30:41:9A:53
Certificate issuer: /CN=c13b90faac5efcf93195619da16f3a47effe99fe
Certificate serial: 018CC424502B1EC42091641141F39824D40A
Authority key identifier: C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/nM6N3OlnMY9XPfbyaZtUwjBBmlM.roa
Signing time: Mon 01 Jan 2024 08:29:23 +0000
ROA not before: Mon 01 Jan 2024 08:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64089
IP address blocks: 67.158.62.0/24 maxlen: 24
148.59.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:50:2b:1e:c4:20:91:64:11:41:f3:98:24:d4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c13b90faac5efcf93195619da16f3a47effe99fe
Validity
Not Before: Jan 1 08:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9cce8ddce967318f573df6f2699b54c230419a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:57:7b:27:d1:26:18:7b:c2:a0:be:0f:9a:
61:e0:97:0f:96:c6:1a:4e:68:c1:f5:ec:4c:dc:3f:
c4:9f:6c:5a:eb:63:82:2e:3e:e0:69:58:7f:6a:96:
50:db:ec:85:70:60:82:a5:50:1d:9e:55:45:bd:8b:
eb:83:ab:5b:c4:46:53:a2:ff:61:92:eb:4b:40:c9:
fc:e5:1f:e9:22:1c:0d:29:60:89:e5:89:c0:20:34:
de:59:55:de:18:9b:66:6b:a0:19:72:2b:bd:f9:61:
00:14:df:cf:56:55:5b:7e:53:a5:5c:74:b3:e3:d4:
0b:56:9e:d6:0e:4b:88:9c:86:a9:78:2a:e4:6b:08:
ee:f0:58:6c:8b:2b:b3:6d:4c:8d:c5:ea:44:11:07:
8c:ea:28:5f:9b:68:bb:c0:bb:03:c8:f2:96:7f:df:
86:5f:08:d5:f8:02:9a:cf:24:02:0e:a1:31:30:15:
6b:38:b0:46:82:a9:81:91:1f:95:5c:82:85:c9:85:
ed:51:e1:aa:dc:b3:d0:d4:d3:dc:52:fc:a6:4e:36:
51:65:f9:ea:64:db:1a:fd:e2:68:f3:fd:dc:a9:71:
d1:1a:2b:1d:ae:6b:24:4c:1f:f6:52:82:13:12:28:
83:74:bc:b8:68:79:5d:39:1d:03:47:da:16:b1:1b:
66:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CE:8D:DC:E9:67:31:8F:57:3D:F6:F2:69:9B:54:C2:30:41:9A:53
X509v3 Authority Key Identifier:
keyid:C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/nM6N3OlnMY9XPfbyaZtUwjBBmlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.158.62.0/24
148.59.115.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:4f:f9:70:dc:f4:78:8e:59:3a:2b:00:0b:41:60:e3:02:7c:
87:46:59:b6:90:ee:92:7f:e7:ad:db:7a:c8:23:29:5a:ce:51:
18:59:96:14:48:c6:68:c7:04:38:00:98:ff:a3:ac:08:26:12:
4a:9c:17:f9:e4:b5:08:47:57:98:99:bd:4b:01:1d:1b:ca:f2:
7e:17:c8:7f:35:aa:97:c0:44:09:5c:53:8e:3e:5d:ef:a1:6f:
c5:dd:3a:60:6e:79:43:f6:7f:8c:cd:2e:05:44:ec:00:e7:09:
0f:49:fc:df:c5:d9:50:00:e1:2f:fa:27:90:19:94:32:af:17:
a2:50:2a:20:6f:7c:f4:d5:37:26:af:4b:f2:c6:ee:09:51:1a:
33:21:9c:35:5e:a1:bc:71:de:18:29:7c:b9:56:a9:47:79:9f:
fe:6a:db:c0:c9:00:4b:46:9a:cc:19:64:a3:3f:b4:ee:0e:0e:
fc:23:f4:17:b8:8a:1e:58:e8:d5:63:1d:14:a9:c4:22:7b:7b:
18:17:d4:6e:83:ba:5d:78:35:b3:3d:92:e5:3b:39:a8:25:2c:
05:a8:2c:a4:62:f0:94:16:8e:21:84:de:4b:4d:4a:69:f6:69:
7f:98:79:37:e3:ff:a9:1b:8c:02:a8:1c:09:1a:c8:c6:1e:9c:
aa:11:9b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:50:51 2024 by rpki-client on console-fra.rpki-client.org