Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/npTUaaRLrcIm4r1lXUDhJ4rO1AI.roa
File: npTUaaRLrcIm4r1lXUDhJ4rO1AI.roa (raw, json)
Hash identifier: b50DSI/yewWJqjl6FWATLPagQVKOrkWlK1ry3Ip3820=
Subject key identifier: 9E:94:D4:69:A4:4B:AD:C2:26:E2:BD:65:5D:40:E1:27:8A:CE:D4:02
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018CE2FB498CB034A625EC43D4509242C4DD
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/npTUaaRLrcIm4r1lXUDhJ4rO1AI.roa
Signing time: Sun 07 Jan 2024 08:12:48 +0000
ROA not before: Sun 07 Jan 2024 08:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152179
IP address blocks: 45.8.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e2:fb:49:8c:b0:34:a6:25:ec:43:d4:50:92:42:c4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 7 08:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e94d469a44badc226e2bd655d40e1278aced402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:36:35:17:cb:ee:04:21:8d:0d:33:bb:fc:6f:
cd:7e:fd:7e:b2:41:5e:26:a4:db:5e:6c:1d:fa:94:
28:8a:44:de:ff:4e:2d:3b:32:18:27:fd:6c:02:69:
d8:32:fd:60:2d:8e:22:4c:dd:e8:4b:77:40:3c:16:
4a:3b:15:8a:2f:91:3a:79:89:04:d2:b4:a0:fb:70:
90:33:ef:14:d2:59:85:0a:f7:6d:8d:d0:f2:d2:4b:
11:2b:10:b9:d2:73:fe:93:78:1a:a9:d1:e1:7d:eb:
42:f1:f6:ef:2a:48:b8:ea:1a:8a:f7:e6:a6:f2:f6:
6d:b6:c4:34:d3:e3:2c:00:ca:3a:eb:b4:51:19:cb:
fd:a7:1b:71:8b:48:cc:0a:53:9a:21:8f:30:fb:0d:
ce:4f:72:d2:83:b1:1b:13:cc:35:e0:23:00:2a:8d:
1b:23:ec:30:6f:d8:04:22:70:d5:6f:ca:3f:34:15:
41:fa:b3:25:a2:59:a3:89:01:eb:f3:6e:37:c0:b9:
6e:c2:7c:78:80:ee:93:2a:06:83:4b:27:1e:1d:02:
79:ca:aa:a3:2f:48:9f:d7:31:51:a7:0b:85:0a:8d:
54:1d:e8:62:78:22:7f:db:fd:b2:b7:33:40:56:45:
91:1a:c7:18:49:c1:78:ef:c0:80:1e:f3:42:f9:d3:
db:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:94:D4:69:A4:4B:AD:C2:26:E2:BD:65:5D:40:E1:27:8A:CE:D4:02
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/npTUaaRLrcIm4r1lXUDhJ4rO1AI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.191.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:97:18:e7:14:e5:6d:df:83:2d:84:3c:84:15:c1:fe:98:57:
16:31:45:3c:23:b3:31:9d:85:23:3a:67:31:85:c2:a5:b3:6b:
24:c2:44:91:dc:70:77:fd:b6:cf:3e:3d:df:e6:44:9d:3c:6a:
79:da:20:fd:4b:2e:9d:35:25:07:23:3c:92:92:9d:e2:2f:c8:
3d:4c:27:2d:ac:3f:12:05:99:ea:0d:15:de:8a:ba:7f:df:b8:
65:9c:6a:d6:d8:4c:ac:7f:3c:56:a9:b6:82:a9:3d:98:3f:05:
bd:a7:30:49:a4:9b:45:9a:4a:ff:93:95:c9:1e:e1:42:50:64:
19:94:c6:ab:da:38:74:07:0a:3e:0d:fc:a1:90:8a:23:8f:3b:
dc:1f:6e:8b:e8:42:e6:86:47:b6:30:7b:18:dc:a5:08:32:60:
36:5d:1a:54:4d:0f:f9:4e:a6:17:94:5d:21:d4:69:79:da:4e:
61:0b:d0:32:dd:26:1b:d2:fc:eb:21:fa:5b:6d:06:6d:9d:26:
03:72:a8:a7:23:11:78:ff:56:b0:ee:01:74:da:29:72:55:fc:
ad:59:b4:ae:8f:88:2f:0c:98:7e:50:ed:0f:37:61:8e:26:86:
57:85:b6:89:d2:1f:18:c0:71:e8:fd:c3:ce:9c:c3:61:5c:c2:
cb:d8:f1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 08:29:20 2024 by rpki-client on console-fra.rpki-client.org