Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/N9K3ll1cNYN6skmHp1uOBrFXWeA.roa
File: N9K3ll1cNYN6skmHp1uOBrFXWeA.roa (raw, json)
Hash identifier: N2TBwIR17BC95qFs7hLGQESmu3Kk0H9CToTU7fIqffs=
Subject key identifier: 37:D2:B7:96:5D:5C:35:83:7A:B2:49:87:A7:5B:8E:06:B1:57:59:E0
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 018CC5DCFA2CD78D57E9AEED9342F5B7D892
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/N9K3ll1cNYN6skmHp1uOBrFXWeA.roa
Signing time: Mon 01 Jan 2024 16:30:42 +0000
ROA not before: Mon 01 Jan 2024 16:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204166
IP address blocks: 93.115.196.0/22 maxlen: 22
185.107.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:fa:2c:d7:8d:57:e9:ae:ed:93:42:f5:b7:d8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Jan 1 16:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37d2b7965d5c35837ab24987a75b8e06b15759e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:eb:ef:9d:8f:3a:e9:6f:e0:42:9d:39:b0:9d:
f2:42:bb:dc:30:11:38:18:44:1b:25:22:3d:e8:1a:
10:73:72:df:c8:02:ac:57:e4:b8:1d:0f:b7:b4:9a:
08:d4:9e:c9:0a:d2:f6:b9:06:7b:1a:60:d2:63:70:
92:a8:0c:b9:5f:0c:cc:64:77:89:6e:52:1a:25:d7:
6b:e2:59:69:fc:29:88:6d:1f:d6:95:62:05:0a:8c:
ea:77:be:57:57:e5:b0:93:fe:51:ce:8a:95:28:a9:
77:fd:c8:4d:1f:f4:bb:3e:bd:24:32:9b:3d:47:f8:
2f:4c:8c:5c:d2:59:99:62:b0:10:57:5b:38:d5:c3:
98:fe:d7:a2:80:64:dd:90:b0:69:b2:7a:43:10:1d:
e8:e0:26:16:ea:e2:32:5c:36:6d:68:fc:be:7c:58:
6b:37:bc:40:88:99:cc:82:fb:cd:0d:f4:df:1d:ca:
18:a0:21:c8:5b:50:59:b4:ff:4f:73:1f:92:25:c7:
a3:ec:77:75:be:a6:91:b8:5d:48:15:90:87:c0:1a:
55:8d:5b:c3:ce:49:a9:c8:24:24:c5:0e:4f:3b:c5:
5d:67:88:63:f6:e9:16:9a:c3:c1:aa:94:ea:01:36:
8c:68:04:bf:f5:e0:5d:d4:5d:3c:30:9a:7f:50:5b:
ea:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D2:B7:96:5D:5C:35:83:7A:B2:49:87:A7:5B:8E:06:B1:57:59:E0
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/N9K3ll1cNYN6skmHp1uOBrFXWeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.196.0/22
185.107.0.0/22
Signature Algorithm: sha256WithRSAEncryption
73:73:4d:3a:0f:22:f7:bc:9f:65:e1:d7:b0:3f:2a:85:9f:25:
f4:62:fb:92:40:92:c3:e9:4f:39:1b:44:4f:06:3e:71:26:6e:
bd:cb:cf:12:51:57:5c:79:e8:40:3a:ed:eb:58:1a:eb:e1:35:
0c:34:c4:ee:fc:2f:9f:f4:ab:39:99:9c:c4:bd:4d:f8:1c:69:
68:1e:8b:42:0d:e5:53:60:20:9d:f6:bb:46:69:1b:b1:92:d8:
9f:7f:11:e1:03:68:07:e2:b2:e1:ad:65:3e:1f:48:52:bf:77:
f5:ea:16:5f:95:5a:1f:31:77:52:47:cc:8f:6a:89:11:6d:a0:
89:46:e0:34:0a:c2:2c:0c:a0:d3:11:19:5d:9d:53:d6:c4:26:
b6:f6:2b:c4:22:88:7b:d2:00:c0:15:25:e6:46:38:6c:9c:ee:
08:73:4c:80:0c:04:b4:bf:59:bd:46:a3:b1:c8:17:8a:77:ce:
ab:77:74:9b:d1:1a:a3:03:9d:04:64:f2:eb:33:9b:e8:54:63:
74:41:38:9e:56:41:50:10:6a:9f:40:d4:ca:2f:d0:b4:b9:93:
e2:53:83:3c:40:31:3f:53:6a:eb:46:b3:0e:ae:2c:3d:50:3a:
45:7e:f9:7e:e3:44:95:ec:c9:f0:57:c9:d5:5a:a7:f1:e7:d4:
07:b1:19:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:56:31 2024 by rpki-client on console-ams.rpki-client.org