Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/NqWOE0MJi99DCMUKDhItL0tssWk.roa
File: NqWOE0MJi99DCMUKDhItL0tssWk.roa (raw, json)
Hash identifier: vQ/3IAvs1qlAkjBA36PdnbWWnbf/8pXbq6pJvNHwWg0=
Subject key identifier: 36:A5:8E:13:43:09:8B:DF:43:08:C5:0A:0E:12:2D:2F:4B:6C:B1:69
Certificate issuer: /CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Certificate serial: 018CC5DCFDD2726F3247C8C6A4D1C0B82A04
Authority key identifier: 05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/NqWOE0MJi99DCMUKDhItL0tssWk.roa
Signing time: Mon 01 Jan 2024 16:30:43 +0000
ROA not before: Mon 01 Jan 2024 16:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13101
IP address blocks: 82.97.128.0/18 maxlen: 24
176.119.214.0/24 maxlen: 24
86.103.0.0/16 maxlen: 24
217.70.192.0/20 maxlen: 24
213.158.96.0/19 maxlen: 24
213.178.64.0/19 maxlen: 24
185.118.20.0/22 maxlen: 24
2a00:12d0::/29 maxlen: 29
2a03:c140::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:fd:d2:72:6f:32:47:c8:c6:a4:d1:c0:b8:2a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Validity
Not Before: Jan 1 16:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36a58e1343098bdf4308c50a0e122d2f4b6cb169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:13:0c:7c:2d:a2:46:02:67:2c:60:df:37:fb:
89:f6:c2:16:b3:da:b7:f8:85:48:62:8a:24:2b:5c:
c5:ce:7a:ba:91:ea:66:54:a0:21:00:59:0a:6a:f8:
8e:bc:38:e2:48:66:7b:20:36:9c:d4:6e:29:c5:8f:
85:df:24:93:8b:20:03:a7:a4:d7:bf:dd:eb:1d:de:
61:2e:4c:b4:f9:1c:da:23:33:16:78:53:16:7a:e1:
b4:17:b7:0c:14:03:2c:e4:59:7e:63:2b:51:1c:09:
d9:9f:54:ff:51:20:9b:ec:ba:49:96:f2:85:7b:9b:
ff:d1:b4:08:5a:ec:23:3f:11:55:ae:de:8b:69:00:
31:0b:55:19:65:ba:d8:92:96:41:e7:b1:e6:ef:f4:
31:ec:1b:00:b6:e9:42:d9:df:a5:cb:d6:ec:96:2f:
71:a7:00:33:af:f9:a8:3a:af:7b:8b:44:cd:f0:70:
dd:7d:10:9a:1a:a1:9f:48:eb:90:a8:97:f6:40:70:
ca:c5:a2:fb:e7:66:14:89:45:6f:d4:ec:e7:de:f7:
a2:79:ad:f2:64:61:5c:95:c0:dd:60:a1:3f:cd:dc:
32:d7:41:d6:da:53:b0:17:fd:b0:e9:c0:02:33:48:
4b:2c:5e:aa:c3:dd:c7:ef:8b:ae:83:aa:48:70:9b:
5a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A5:8E:13:43:09:8B:DF:43:08:C5:0A:0E:12:2D:2F:4B:6C:B1:69
X509v3 Authority Key Identifier:
keyid:05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/NqWOE0MJi99DCMUKDhItL0tssWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.97.128.0/18
86.103.0.0/16
176.119.214.0/24
185.118.20.0/22
213.158.96.0/19
213.178.64.0/19
217.70.192.0/20
IPv6:
2a00:12d0::/29
2a03:c140::/29
Signature Algorithm: sha256WithRSAEncryption
19:f1:2a:65:51:14:ed:7e:36:89:06:53:d0:e0:b6:36:00:d4:
53:c2:aa:b7:9e:8a:1e:bc:18:37:b4:5f:ca:fc:7f:70:fe:b3:
5d:88:4b:08:d3:3a:74:70:5a:ce:01:b8:c2:0a:53:af:fd:7b:
89:cb:68:9a:ab:54:5c:45:03:f2:da:0d:e5:c6:02:1d:c0:58:
99:fe:89:76:67:e9:90:d0:56:8e:05:31:a5:66:4b:cb:f2:dd:
fa:a5:0c:9d:46:86:2a:a7:dd:7c:bf:47:97:d6:01:8d:ec:fa:
64:82:50:5a:f3:cd:9c:ad:f8:ae:8f:7f:ab:0c:2e:66:01:8e:
65:f2:6f:8b:74:56:95:83:4b:60:b3:3f:9a:4a:30:12:6f:14:
e8:93:8a:37:e1:86:66:e5:14:58:69:43:34:52:8f:3d:68:d0:
a3:81:05:4e:65:12:50:dc:89:11:51:c9:7e:04:1f:4d:1b:49:
90:17:70:5d:7c:e6:9e:25:33:81:8d:0e:cb:4b:ed:c2:c5:03:
59:fc:0c:32:7f:76:fc:96:64:9c:43:c5:09:06:cc:04:94:ca:
27:ab:2a:cc:e5:87:a1:35:df:78:51:28:fa:02:02:b8:ba:82:
92:87:47:db:5b:d5:b5:88:f4:ae:be:36:f8:c8:2f:14:9c:6b:
d0:8b:9c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:55:14 2024 by rpki-client on console-ams.rpki-client.org