Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/Ny-n9deG5AfM5sWz7Hn9pA380eo.roa
File: Ny-n9deG5AfM5sWz7Hn9pA380eo.roa (raw, json)
Hash identifier: rzx9WIeETiPIQudPrDbKqrRjUNx9eRRPJJDjzuvnNhE=
Subject key identifier: 37:2F:A7:F5:D7:86:E4:07:CC:E6:C5:B3:EC:79:FD:A4:0D:FC:D1:EA
Certificate issuer: /CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Certificate serial: 018CC8DF30595AF654AAED45829EDA095057
Authority key identifier: 53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/Ny-n9deG5AfM5sWz7Hn9pA380eo.roa
Signing time: Tue 02 Jan 2024 06:31:59 +0000
ROA not before: Tue 02 Jan 2024 06:31:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201575
IP address blocks: 193.228.1.0/24 maxlen: 24
2a12:e342::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 07:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:30:59:5a:f6:54:aa:ed:45:82:9e:da:09:50:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Validity
Not Before: Jan 2 06:31:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=372fa7f5d786e407cce6c5b3ec79fda40dfcd1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:db:7a:19:4c:ef:49:f8:74:3b:ed:4c:d9:dd:
e5:3f:dd:2d:d6:60:0a:46:28:f7:60:dc:80:cb:98:
62:a8:19:46:98:0e:88:79:f9:a5:68:ca:70:67:36:
70:be:f7:34:8c:0c:cf:c5:e0:e2:e5:6c:de:b8:b6:
94:f9:67:a0:be:50:44:fa:7e:93:28:ef:36:36:7d:
a9:b9:ca:2e:35:5d:7b:42:81:d6:a8:01:c1:f2:6b:
97:be:22:88:ee:d9:78:7c:75:03:f8:20:fe:b7:b5:
82:88:3a:0f:c3:42:5a:4b:0e:fb:c5:04:d2:01:0e:
c1:41:f8:a8:b8:4a:2e:50:cc:98:83:6b:03:f5:fc:
98:44:47:57:51:28:de:72:3e:82:6d:fa:dd:f8:be:
ff:26:9b:da:e8:16:e6:2b:8c:d8:24:d2:2c:c2:ab:
bb:ef:91:e0:ea:ee:3d:91:05:a5:22:72:b8:1f:ec:
af:d5:0e:40:d2:7b:c7:ec:37:39:5a:53:5c:ff:48:
5b:e2:fc:e2:77:62:07:cc:a1:0b:ff:ad:a6:d9:48:
19:f5:d9:c9:ae:84:f1:6c:3d:b5:33:66:fd:91:7b:
b9:8c:bf:30:ac:f1:75:39:08:d8:6f:fe:2d:ae:e5:
db:35:2f:c2:a9:10:93:ff:1b:37:bb:73:58:e0:ad:
af:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2F:A7:F5:D7:86:E4:07:CC:E6:C5:B3:EC:79:FD:A4:0D:FC:D1:EA
X509v3 Authority Key Identifier:
keyid:53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/Ny-n9deG5AfM5sWz7Hn9pA380eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.1.0/24
IPv6:
2a12:e342::/32
Signature Algorithm: sha256WithRSAEncryption
60:97:e4:43:91:93:02:3b:5c:09:71:aa:8b:50:30:b0:eb:42:
2f:d8:3d:05:b5:e7:6a:d9:c8:35:6b:1a:77:d2:b8:12:5e:ac:
3d:a4:11:be:71:70:21:2a:b2:e5:bb:fd:9a:2f:fa:6c:e0:75:
c8:0c:c5:1f:d4:50:2b:d9:06:32:e8:d5:ae:36:28:fc:e8:84:
9f:84:da:37:7d:a9:9e:b1:38:b8:3d:ce:2e:af:ea:fa:7d:fe:
c3:e4:f3:79:e9:a7:24:6c:36:06:48:9e:e3:c5:92:ba:da:33:
84:0a:0d:c6:ad:da:ca:72:98:cf:39:29:b4:b9:02:ae:85:48:
1c:a0:a2:8c:3d:c0:87:81:a2:9a:5c:63:12:46:68:7e:43:47:
52:7b:4a:41:73:68:f8:24:38:17:af:f6:e9:23:7a:75:17:2d:
f4:69:d4:b4:2c:11:09:60:e4:59:f5:f0:b8:cf:36:54:a5:e3:
13:81:9e:f3:c1:8e:7c:38:62:48:cf:c2:29:44:e2:cd:e9:b0:
cf:c4:72:39:ab:56:0e:0e:a1:4c:0c:5a:ed:89:a4:54:9f:69:
59:4d:1a:0c:73:93:93:53:8b:cf:25:c4:cd:85:cb:2b:e7:ec:
d8:c9:a6:40:38:01:f6:c0:de:c1:98:11:1b:34:f3:a3:ea:0d:
3c:3b:8f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 10:25:55 2024 by rpki-client on console-fra.rpki-client.org