Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/nvpNsvltSqi6Zm8eXhD9dSJHmwA.roa
File: nvpNsvltSqi6Zm8eXhD9dSJHmwA.roa (raw, json)
Hash identifier: gs+PLESzai2U2W6ZDE49VnPaW5csNqg1h21RMdl78Fk=
Subject key identifier: 9E:FA:4D:B2:F9:6D:4A:A8:BA:66:6F:1E:5E:10:FD:75:22:47:9B:00
Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Certificate serial: 018D1D8D3BB912F1AA7548163C2520AF52C0
Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/nvpNsvltSqi6Zm8eXhD9dSJHmwA.roa
Signing time: Thu 18 Jan 2024 17:10:11 +0000
ROA not before: Thu 18 Jan 2024 17:10:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41743
IP address blocks: 176.115.136.0/21 maxlen: 21
176.115.136.0/24 maxlen: 24
176.115.137.0/24 maxlen: 24
176.115.138.0/24 maxlen: 24
176.115.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1d:8d:3b:b9:12:f1:aa:75:48:16:3c:25:20:af:52:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Validity
Not Before: Jan 18 17:10:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9efa4db2f96d4aa8ba666f1e5e10fd7522479b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:30:82:b2:31:e6:a2:34:9d:f0:fc:47:97:97:
6b:fd:1f:90:7a:ce:f3:c8:36:ef:0c:a0:d4:fc:df:
a3:bb:68:a1:dc:00:01:37:99:0c:46:2d:7c:17:53:
4e:d5:f6:11:a0:87:9b:70:e4:7f:80:8d:79:09:b6:
19:37:1e:17:47:13:54:98:fb:90:ac:a4:75:fe:e1:
5f:6d:b4:e5:10:91:18:8f:24:d7:60:13:78:85:a5:
c1:dd:b1:11:a3:78:9d:a3:40:29:e2:bd:45:f0:cc:
f8:c1:26:5e:6b:82:9a:a6:2f:b8:46:24:a9:a1:45:
27:21:ed:8d:14:13:c4:84:05:a8:81:ef:35:f5:f5:
58:c6:b4:b9:aa:d1:77:47:b1:0a:44:09:0f:c7:6f:
ed:87:77:83:8e:7f:1f:74:29:8d:38:f4:8a:b2:45:
7c:37:21:7a:09:01:1a:62:8a:72:03:4f:c8:c2:ea:
93:b4:bb:dd:09:11:43:d2:88:15:ba:ab:8e:b8:da:
05:ed:da:e0:11:ed:5a:48:c3:65:2c:5c:c5:1a:9e:
01:35:f3:60:2a:08:f7:a0:5d:32:24:d1:b8:c3:8d:
dc:58:01:6f:a2:7c:5e:30:32:71:a4:db:fd:36:bb:
2a:f5:b7:58:12:74:96:48:ae:b8:84:f8:ad:ad:d5:
92:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FA:4D:B2:F9:6D:4A:A8:BA:66:6F:1E:5E:10:FD:75:22:47:9B:00
X509v3 Authority Key Identifier:
keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/nvpNsvltSqi6Zm8eXhD9dSJHmwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.115.136.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:9c:ca:b8:07:58:ef:fe:1f:5c:2d:cb:29:ea:d1:c6:40:e9:
2c:9c:bc:e6:70:c7:d2:b0:a1:a5:a3:13:bd:83:2b:1b:ff:8b:
5d:6f:c2:3b:77:0e:6b:90:10:80:52:a6:75:3d:a8:fb:f4:17:
41:57:53:50:bd:22:a6:eb:15:02:d9:5e:e8:ff:84:93:c2:24:
5c:f3:2b:29:60:75:0a:9e:46:34:ce:c4:a9:fc:c7:70:80:6e:
1f:86:33:1b:ac:b9:f1:e6:d2:85:32:43:7e:3b:3b:cd:38:d3:
11:31:fe:cb:64:48:80:5a:c9:69:d6:42:e4:46:62:d1:e2:96:
f2:a2:50:25:6e:8d:05:94:47:b4:6e:ce:65:a1:10:45:fc:c6:
3b:20:d5:80:b3:60:c9:34:c6:bc:9a:f5:34:97:7b:f5:4c:aa:
aa:7b:d4:69:2b:94:b9:e3:31:cd:f4:6e:00:90:f6:f7:dd:db:
12:ab:82:31:60:0d:21:0f:bc:a7:25:52:3f:f2:b5:08:d8:86:
de:55:02:a4:b0:d2:a3:23:88:b1:ad:53:e8:ae:43:a9:ee:a4:
59:81:15:d7:06:33:4d:ef:2d:51:77:2f:3c:40:33:06:2a:dd:
2a:4f:04:94:d2:b2:fd:c3:5a:f9:a0:7d:7a:be:32:8e:7a:83:
d0:55:64:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:06:32 2024 by rpki-client on console-ams.rpki-client.org