Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/nVFfWV6XQ3JCcXuJ5LeCAghMJ3s.roa
File: nVFfWV6XQ3JCcXuJ5LeCAghMJ3s.roa (raw, json)
Hash identifier: ekfT77cazuniKDH4MSjDsbbnNPd2R8jKiwPnddttq0A=
Subject key identifier: 9D:51:5F:59:5E:97:43:72:42:71:7B:89:E4:B7:82:02:08:4C:27:7B
Certificate issuer: /CN=d58214cfa326611e9d494135a12ce8276f0f1784
Certificate serial: 018CC2DADAFE4665207D1F8ACEFBEC1C0D2C
Authority key identifier: D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/nVFfWV6XQ3JCcXuJ5LeCAghMJ3s.roa
Signing time: Mon 01 Jan 2024 02:29:32 +0000
ROA not before: Mon 01 Jan 2024 02:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216264
IP address blocks: 194.150.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:da:fe:46:65:20:7d:1f:8a:ce:fb:ec:1c:0d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58214cfa326611e9d494135a12ce8276f0f1784
Validity
Not Before: Jan 1 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d515f595e97437242717b89e4b78202084c277b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d9:e3:05:fe:84:46:df:05:e0:59:4f:d6:e1:
86:c1:d0:77:13:c5:e9:5b:a1:83:c8:2c:63:72:ea:
02:12:7b:5b:f7:01:cd:f9:4e:02:30:fd:b1:1f:8e:
51:8d:9a:42:7d:67:58:aa:8f:23:69:d6:94:5f:78:
37:98:93:f8:f7:94:8a:67:f8:59:f4:62:0d:a0:27:
da:3d:f9:a1:4a:d6:bb:bb:15:7d:f1:0b:cc:a2:15:
b5:c1:9a:66:24:36:7c:40:d6:e5:bf:86:c5:8e:a9:
6f:82:a7:84:c9:35:68:a2:4a:53:72:e2:90:db:9a:
d9:99:21:20:4c:1f:0e:48:ea:52:55:a9:b5:b7:f7:
47:e8:bd:42:26:92:2a:82:29:24:bc:93:37:16:8e:
e1:0a:14:6f:66:f1:15:17:02:68:48:e6:a2:8c:e5:
a5:9a:6a:69:bf:01:58:c4:9f:f3:31:13:60:88:c3:
9d:82:f9:96:1d:0b:47:1f:ef:b6:7c:0c:a1:c1:e2:
c8:74:2e:07:02:6c:92:d0:31:37:09:b3:fd:95:20:
91:34:89:bd:86:13:13:d9:6c:c5:1e:65:36:e9:cb:
6e:b0:47:5d:19:aa:d8:34:02:f7:e2:33:02:e4:a5:
09:31:b0:8f:3b:ad:e5:f1:28:f7:51:98:1f:e5:62:
ac:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:51:5F:59:5E:97:43:72:42:71:7B:89:E4:B7:82:02:08:4C:27:7B
X509v3 Authority Key Identifier:
keyid:D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/nVFfWV6XQ3JCcXuJ5LeCAghMJ3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.174.0/23
Signature Algorithm: sha256WithRSAEncryption
17:32:11:66:da:df:92:3b:68:92:e4:d5:eb:fe:93:7a:76:ef:
05:d4:dd:9e:7b:52:60:dc:64:a5:9c:ea:5b:6b:d9:e0:5f:93:
25:8a:e1:ce:e7:54:54:5f:78:bc:dd:22:d6:6f:fc:6c:0e:99:
a7:33:53:20:ad:cc:03:d9:3f:00:d6:d8:cc:39:2f:e9:18:f6:
72:3f:7e:08:1d:f8:b4:dd:a9:76:ac:ca:f6:48:62:95:0a:b6:
4e:44:d8:92:de:d9:9b:ae:d6:05:8c:01:4e:3e:db:45:fd:89:
06:55:a5:26:6a:47:de:f4:a0:3a:2b:a4:84:ab:3b:8b:55:63:
97:c1:60:a2:5e:ed:89:60:84:38:e1:75:36:00:f2:88:72:c5:
df:0d:12:0b:30:6e:28:ff:ef:f5:ba:d4:71:72:a5:4c:ad:00:
bc:78:90:72:b1:13:03:4f:35:10:f4:35:84:73:93:ae:d8:7b:
76:7c:3f:94:ff:eb:7c:c5:79:19:ca:8f:15:36:35:60:f4:6e:
81:b0:42:9c:bb:91:79:a5:fc:53:8f:3f:c0:56:b3:09:f1:8e:
78:89:92:cf:4a:28:b0:f7:8b:48:72:5f:03:92:0b:0f:43:2d:
f8:b8:48:67:62:d3:c3:e7:6d:84:ce:c8:8f:8f:09:25:c1:ea:
5d:17:73:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:39:46 2024 by rpki-client on console-fra.rpki-client.org