Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/NpHF4D03PDPDKZyCfM2mkpSPvyI.roa
File: NpHF4D03PDPDKZyCfM2mkpSPvyI.roa (raw, json)
Hash identifier: 0g7I+Xesc183MhCY2OFnWii6u7hOlhUhh3DUlBxi/lw=
Subject key identifier: 36:91:C5:E0:3D:37:3C:33:C3:29:9C:82:7C:CD:A6:92:94:8F:BF:22
Certificate issuer: /CN=7e909fea81e398fed93049dd7a007efd69735563
Certificate serial: 018CC3B72E1E2A23F01499659D690A99FCC6
Authority key identifier: 7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/NpHF4D03PDPDKZyCfM2mkpSPvyI.roa
Signing time: Mon 01 Jan 2024 06:30:11 +0000
ROA not before: Mon 01 Jan 2024 06:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210719
IP address blocks: 94.103.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:2e:1e:2a:23:f0:14:99:65:9d:69:0a:99:fc:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e909fea81e398fed93049dd7a007efd69735563
Validity
Not Before: Jan 1 06:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3691c5e03d373c33c3299c827ccda692948fbf22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:15:5f:1a:03:47:cd:c4:a1:10:4c:47:08:1b:
2e:81:13:72:15:a4:71:a8:ad:68:51:7f:9a:7f:f4:
51:da:04:95:77:49:1a:bd:3c:83:88:0f:6d:c9:8e:
32:aa:f6:6e:9f:5e:b9:67:ef:71:15:db:b2:66:8a:
57:8b:43:73:b6:87:78:34:ad:f9:c2:71:bc:3b:74:
ca:8a:20:06:33:4a:1c:63:22:b2:9a:d6:6e:e7:de:
d6:f6:45:5b:84:12:9d:a9:f3:25:8a:ee:39:f4:94:
77:de:51:03:4b:39:2f:19:fb:aa:36:e4:14:71:4c:
ad:85:d8:cf:8e:42:90:5c:b0:d9:63:66:3a:3c:6c:
2e:9a:25:8a:30:30:5b:75:bb:8a:2d:67:bc:2d:13:
7d:ad:7d:35:4d:1d:44:88:82:82:24:da:b6:8c:2b:
3e:71:08:b5:b3:c0:e6:95:05:dc:ed:16:d9:f8:b7:
82:bb:95:25:f3:2d:4c:2d:6a:15:64:f0:b2:ca:25:
82:09:69:2b:14:6b:9e:6b:2d:a8:e6:59:01:17:ca:
2b:f1:02:03:e5:fb:b0:cc:a5:63:4f:61:31:34:9d:
fc:09:6d:89:a7:42:b9:72:eb:21:d4:e3:6e:c1:08:
4b:a9:47:aa:14:e6:8d:9b:76:75:18:7c:01:c6:06:
bf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:91:C5:E0:3D:37:3C:33:C3:29:9C:82:7C:CD:A6:92:94:8F:BF:22
X509v3 Authority Key Identifier:
keyid:7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/NpHF4D03PDPDKZyCfM2mkpSPvyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.181.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:22:b4:13:a8:ea:07:47:6c:18:cd:1b:e6:c1:6a:e2:1e:e8:
69:ea:16:51:12:c1:78:48:71:86:5d:6a:3e:cc:c1:11:ea:e6:
01:42:c6:21:60:f2:91:10:56:c1:ed:3b:0d:c5:f6:5d:c3:0d:
1b:49:0b:2f:67:bc:fb:9a:e7:d8:9d:1e:35:b7:0d:15:7e:f6:
53:4d:01:6c:c1:59:64:8e:7d:93:d7:68:a7:74:46:c5:03:3f:
63:e6:17:38:e4:e1:92:5d:21:d2:8b:e1:4a:79:9e:67:ef:25:
90:23:67:c6:86:38:05:a9:49:f0:56:f7:89:49:f3:88:60:1a:
40:87:59:0e:7d:23:13:40:65:2f:71:5b:b0:04:ae:93:01:85:
72:54:ba:f6:54:d1:69:1d:47:df:07:bc:9f:5d:6d:1a:d2:eb:
a7:23:8d:76:bb:90:45:b9:41:af:0e:a1:cc:f7:f0:75:ae:f2:
02:57:4f:1e:c5:e9:2e:f7:9d:de:4f:db:0e:47:21:05:9f:bd:
db:04:cc:f8:5f:f1:3c:a4:a0:1e:e0:4d:50:27:b1:28:95:c7:
14:42:1b:17:7b:81:6c:e2:9f:21:82:84:cb:9c:a2:1c:06:52:
8f:36:70:e6:31:02:28:ec:0a:31:1e:e0:2c:58:a7:04:f9:1b:
31:6f:fd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:56:50 2024 by rpki-client on console-ams.rpki-client.org