Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/Nw9eU_0Apu4zcQOjcsWwDHRxzhE.roa
File: Nw9eU_0Apu4zcQOjcsWwDHRxzhE.roa (raw, json)
Hash identifier: i3YUnke0oW7VO6bxrFGyUtEFG2IHJHLvrdoMuv8PxIs=
Subject key identifier: 37:0F:5E:53:FD:00:A6:EE:33:71:03:A3:72:C5:B0:0C:74:71:CE:11
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 018CC9BC7435EF8384BC6EDA26F48386EE51
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/Nw9eU_0Apu4zcQOjcsWwDHRxzhE.roa
Signing time: Tue 02 Jan 2024 10:33:40 +0000
ROA not before: Tue 02 Jan 2024 10:33:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212419
IP address blocks: 45.12.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:74:35:ef:83:84:bc:6e:da:26:f4:83:86:ee:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 2 10:33:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=370f5e53fd00a6ee337103a372c5b00c7471ce11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:dd:a0:9c:c3:86:41:c7:71:75:16:00:e8:
1e:b3:95:fa:56:27:af:c6:cb:11:d0:ca:1b:3e:6b:
76:0c:90:96:06:89:a5:07:59:cf:31:3e:01:98:12:
81:8d:b2:70:ae:18:6c:f0:28:e1:ae:5f:df:59:d1:
59:31:36:23:1f:70:80:27:4a:19:3c:36:5e:be:29:
c3:78:cf:2e:45:81:df:c2:0e:ed:fe:ff:90:9d:e3:
de:94:ff:6f:1e:15:36:a4:22:2f:d4:e9:e5:85:5f:
48:73:25:b1:34:87:76:31:b8:bc:94:9c:b1:a4:bd:
28:34:9e:5d:7b:73:70:68:97:60:77:9e:01:a3:42:
83:23:40:58:6e:b2:11:fb:6b:57:33:47:c3:e1:9f:
3c:f0:f8:c3:0c:d5:1d:2c:ae:7d:f0:6b:10:6a:0d:
3e:fd:f5:f0:5c:7f:28:ac:e8:7e:15:63:7d:05:b3:
4a:79:aa:8f:1a:50:52:bb:f7:af:ac:54:f0:89:26:
dc:96:71:1c:d8:bf:96:ab:ef:2f:00:24:7b:be:e2:
97:3f:98:93:ba:e0:d9:37:9d:80:c8:6b:f8:a1:88:
1c:c0:78:ff:84:e7:69:1c:28:38:e5:71:ae:27:7e:
8f:dd:08:21:76:35:a3:43:45:6d:63:a9:21:1c:ab:
8c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0F:5E:53:FD:00:A6:EE:33:71:03:A3:72:C5:B0:0C:74:71:CE:11
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/Nw9eU_0Apu4zcQOjcsWwDHRxzhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.29.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:06:4d:00:e0:d5:4c:dc:31:a1:fd:cf:bf:fe:e8:e6:72:2d:
6e:04:ab:a4:15:26:0b:2a:ab:d7:95:9b:a6:5b:bd:7f:14:44:
ee:9c:b3:d7:e2:73:29:e5:a4:5c:ca:49:47:17:96:e4:6b:56:
c7:4e:12:50:59:ed:40:f6:27:43:c1:aa:dd:f2:c3:24:9c:42:
a8:b2:ae:c6:78:5e:f1:65:84:23:dd:1a:fb:a5:6c:e6:fe:c1:
d6:c5:b4:f8:75:e3:75:30:d1:96:9e:3d:0e:37:91:79:f7:ae:
47:bd:80:66:45:56:51:4c:16:d0:a3:92:39:be:be:12:a3:ef:
ae:d2:72:77:6e:5c:91:6d:ce:d6:d3:47:42:b3:d9:4c:c5:9e:
36:27:d5:b2:f8:6e:f0:28:88:77:68:6d:da:42:94:fe:3a:bf:
69:01:01:02:f8:e5:24:7a:d2:06:c6:17:11:63:e8:fc:ae:b8:
e6:cb:3b:83:b1:e6:17:aa:87:e2:15:09:56:7d:42:cf:9d:bc:
91:58:5e:8f:b7:69:9c:6d:6a:2f:fd:45:a0:69:ec:3d:2f:14:
cc:b0:14:12:fa:b6:30:df:3f:94:36:19:3a:d4:84:5c:cb:c7:
14:91:ad:16:2e:58:c0:f1:44:30:af:12:b2:03:f4:9a:f5:72:
7b:14:39:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:35:41 2024 by rpki-client on console-ams.rpki-client.org