Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/NnfbtIuAQMuu1aQpsy7SHXU4Ngg.roa
File: NnfbtIuAQMuu1aQpsy7SHXU4Ngg.roa (raw, json)
Hash identifier: 353KXK6ggDIea2c11hjnt/d7khEuUI6GupVkQjHV0yw=
Subject key identifier: 36:77:DB:B4:8B:80:40:CB:AE:D5:A4:29:B3:2E:D2:1D:75:38:36:08
Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2
Certificate serial: 01917E775AB3E3D9F658AFBE3C86C6E313BD
Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/NnfbtIuAQMuu1aQpsy7SHXU4Ngg.roa
Signing time: Fri 23 Aug 2024 09:00:36 +0000
ROA not before: Fri 23 Aug 2024 09:00:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62212
IP address blocks: 87.236.146.0/24 maxlen: 24
91.184.248.0/22 maxlen: 24
91.199.137.0/24 maxlen: 24
91.199.147.0/24 maxlen: 24
91.199.154.0/24 maxlen: 24
91.199.160.0/24 maxlen: 24
188.127.246.0/23 maxlen: 24
2a11:3b80::/29 maxlen: 48
2a11:3b80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7e:77:5a:b3:e3:d9:f6:58:af:be:3c:86:c6:e3:13:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2
Validity
Not Before: Aug 23 09:00:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3677dbb48b8040cbaed5a429b32ed21d75383608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:90:1e:f4:2c:fe:b9:67:0b:57:3f:56:d4:1c:
9a:63:fe:63:20:32:af:16:95:a5:5d:d6:fb:c6:8e:
8c:29:ff:b8:87:f0:13:58:e2:ae:3f:8f:8b:15:fd:
de:0a:6e:fb:74:36:b3:ec:b5:bc:af:99:4d:05:d3:
eb:3c:06:94:59:a3:58:4e:57:70:79:52:af:e2:7e:
71:9d:43:d5:17:8d:ea:c0:fc:dd:bd:50:0f:c0:d5:
0a:28:03:df:8c:fd:e1:a0:cd:1e:99:75:76:07:a8:
52:a5:6a:3d:97:57:6f:82:4a:7c:23:44:f6:e3:00:
3c:ae:66:af:de:c8:ef:c9:7c:8e:6a:f0:0a:1b:70:
a9:f3:fd:80:06:55:b6:52:4f:bf:11:88:fa:39:7b:
c1:88:52:cd:d6:b7:27:2b:15:21:c4:b6:62:ad:50:
e5:40:66:5f:c0:84:dd:ab:f7:84:57:60:7d:cf:1e:
03:57:11:ee:1e:ef:db:32:db:61:d6:b6:04:4e:d7:
24:c5:89:18:ef:c6:9e:29:04:23:9d:b8:6a:1e:d6:
5c:a6:21:44:10:7c:a5:a7:e3:0c:b4:62:4d:c7:08:
d8:0d:22:88:00:71:f6:b6:bc:9f:8e:69:9e:c8:e7:
72:36:0f:4e:17:0a:37:55:19:29:04:71:a0:0b:a8:
ba:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:77:DB:B4:8B:80:40:CB:AE:D5:A4:29:B3:2E:D2:1D:75:38:36:08
X509v3 Authority Key Identifier:
keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/NnfbtIuAQMuu1aQpsy7SHXU4Ngg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.146.0/24
91.184.248.0/22
91.199.137.0/24
91.199.147.0/24
91.199.154.0/24
91.199.160.0/24
188.127.246.0/23
IPv6:
2a11:3b80::/29
Signature Algorithm: sha256WithRSAEncryption
b0:2b:7b:2d:d8:69:9a:a6:7e:c1:25:69:eb:66:c2:67:40:0a:
2c:94:d0:4c:9e:9b:e5:ab:61:d3:82:f0:57:f5:cf:9c:d2:5d:
ae:74:f4:9d:87:5e:c9:5c:6d:b6:4e:18:1f:3d:56:27:23:91:
c4:cc:61:31:19:13:23:28:23:38:0e:f8:11:98:54:2f:e2:a0:
58:db:e4:43:3f:8d:36:96:8f:7f:64:66:b1:fc:a1:53:14:73:
f6:23:97:03:bd:10:c2:a9:23:a5:51:be:3d:29:dc:71:db:b4:
11:90:a0:87:6b:a5:28:b0:a9:20:65:ff:34:9b:a5:0b:f7:9d:
49:c3:1c:6f:61:6b:41:21:01:72:ad:71:39:38:f5:07:f2:0c:
c9:96:74:da:30:20:56:44:21:4f:98:1c:79:14:32:fe:e4:48:
ba:be:43:38:7f:aa:37:2b:56:1c:9f:98:af:58:87:1f:12:fb:
fd:58:4d:4b:e6:4c:32:d4:24:34:7c:48:ab:0a:37:7c:a5:64:
d4:29:f1:bb:53:4c:bb:ca:4e:f1:06:05:28:43:ca:39:97:de:
46:7a:44:da:6a:11:cf:b1:4b:83:8b:90:13:2f:ff:83:6d:5d:
d6:f0:6d:b7:54:9e:eb:64:8d:a6:85:5f:07:ef:ca:ce:1f:22:
4a:d9:47:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:49:01 2024 by rpki-client on console-ams.rpki-client.org