Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/NbSFDcOllohrMed4Ihdzk29z_wM.roa
File: NbSFDcOllohrMed4Ihdzk29z_wM.roa (raw, json)
Hash identifier: pa6LnH7GySgonVWG9JZW4YXAkqAcW0/PuvgDcBRiQoM=
Subject key identifier: 35:B4:85:0D:C3:A5:96:88:6B:31:E7:78:22:17:73:93:6F:73:FF:03
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 018CC64A75A3CE67F5BB8CE0B89D0E49F596
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/NbSFDcOllohrMed4Ihdzk29z_wM.roa
Signing time: Mon 01 Jan 2024 18:30:17 +0000
ROA not before: Mon 01 Jan 2024 18:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28852
IP address blocks: 217.214.194.0/24 maxlen: 24
217.214.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:75:a3:ce:67:f5:bb:8c:e0:b8:9d:0e:49:f5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jan 1 18:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35b4850dc3a596886b31e778221773936f73ff03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c2:8c:21:26:cb:82:81:3c:8c:bf:40:48:bf:
dd:3e:9a:ae:43:c9:27:ac:86:eb:44:cf:e9:74:7f:
1a:b2:19:60:c5:60:fb:e2:8e:e8:12:0b:3d:11:ad:
4d:ec:73:11:77:b7:ba:8c:e4:34:a8:38:6a:93:45:
20:16:ae:ff:74:15:c5:43:6f:15:7a:eb:fc:cd:fc:
a1:cd:1d:9a:38:c4:f4:cf:39:00:a0:04:5b:4b:67:
69:58:8e:e4:6a:55:56:d7:4c:ed:35:12:90:7c:43:
9e:61:6d:7f:94:3d:5b:7c:96:a1:bc:50:2a:00:cd:
dd:2b:a5:2e:21:4b:2f:0a:fe:78:56:87:08:24:c4:
39:de:31:b6:ce:2c:bf:95:72:ed:47:c3:7f:0f:18:
7d:af:6a:6e:18:12:3d:67:bd:ab:aa:f8:6d:2c:ec:
4a:31:73:3a:69:1c:80:b9:21:27:79:5d:db:5f:f6:
f1:7d:65:06:cc:35:b7:0d:be:71:fa:ea:c9:4a:2d:
67:a7:a5:f5:9a:25:42:9f:ef:e2:5d:0f:bb:9d:a8:
a2:bc:5e:47:bb:12:9c:a8:88:da:4a:7e:0c:8c:c8:
66:f5:e9:6d:b5:e7:ba:24:bb:e2:a4:f1:ed:9c:02:
91:53:a6:cf:a6:95:ad:61:00:67:6a:10:2f:27:7f:
99:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B4:85:0D:C3:A5:96:88:6B:31:E7:78:22:17:73:93:6F:73:FF:03
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/NbSFDcOllohrMed4Ihdzk29z_wM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.214.194.0/23
Signature Algorithm: sha256WithRSAEncryption
07:49:ee:cc:a0:f7:6c:0d:4a:25:35:1c:90:dd:23:f4:1a:ec:
27:a4:28:28:17:1e:b1:7a:2e:1c:90:61:61:d0:e0:eb:95:80:
91:b6:a8:29:c4:cc:f9:7f:b3:1d:86:51:7d:e2:40:65:9d:72:
59:f8:07:62:c1:8f:cc:55:2b:d7:6f:67:32:29:90:64:cf:91:
1c:99:94:71:6b:c9:c0:74:cc:4a:9f:8a:19:88:af:fe:5c:21:
bf:83:f1:23:03:cd:1f:ec:88:8b:c0:52:84:59:04:c6:f9:8a:
66:e0:6c:aa:08:0e:56:e7:77:52:a9:80:f1:08:bb:68:1d:aa:
d5:bf:e0:93:03:4c:9d:ec:f2:d6:a0:0b:43:4d:9e:ed:94:0e:
54:f0:60:29:4b:c3:e3:78:33:ab:6b:f4:0b:7f:18:76:a7:8a:
d1:09:15:43:a7:41:c8:4b:25:c9:b5:7c:56:bd:24:a2:22:3e:
28:05:d8:ef:dd:94:ec:1c:9a:95:22:fd:74:d1:47:9c:36:ea:
45:b1:41:94:4e:7d:3a:c3:5e:84:a2:13:b7:77:cd:66:2f:e5:
8e:90:b1:b7:9e:6d:40:b9:26:2a:ac:9e:2c:44:f0:88:67:f9:
33:8b:03:40:a6:c7:35:d4:6d:8d:a4:01:3f:c3:00:56:7a:8d:
60:44:a7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 14:21:32 2024 by rpki-client on console-fra.rpki-client.org