Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/N0LEiNsh-6ADWADCUhnVJYcJIk8.roa
File: N0LEiNsh-6ADWADCUhnVJYcJIk8.roa (raw, json)
Hash identifier: meovJJL0uxdbqbcrHb72Y45n62fhNt5OyVBJYcZRLPM=
Subject key identifier: 37:42:C4:88:DB:21:FB:A0:03:58:00:C2:52:19:D5:25:87:09:22:4F
Certificate issuer: /CN=a71e0eee590de2fd8dec4a67e87bc896ffc8b2b5
Certificate serial: 018CC5001C6262470D819E1B389B223E5645
Authority key identifier: A7:1E:0E:EE:59:0D:E2:FD:8D:EC:4A:67:E8:7B:C8:96:FF:C8:B2:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/N0LEiNsh-6ADWADCUhnVJYcJIk8.roa
Signing time: Mon 01 Jan 2024 12:29:27 +0000
ROA not before: Mon 01 Jan 2024 12:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201261
IP address blocks: 185.80.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:1c:62:62:47:0d:81:9e:1b:38:9b:22:3e:56:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71e0eee590de2fd8dec4a67e87bc896ffc8b2b5
Validity
Not Before: Jan 1 12:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3742c488db21fba0035800c25219d5258709224f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8c:23:99:3c:ca:80:1b:70:c9:24:d6:46:95:
4f:c0:99:67:03:99:8d:82:c0:11:87:44:07:ed:72:
04:a3:d7:30:b7:ac:20:fd:d2:92:d7:81:58:82:e8:
9f:04:d1:13:20:be:c1:08:d0:6b:21:47:48:87:0f:
8f:c2:83:80:28:98:d7:8c:57:64:24:0a:0e:fa:81:
5c:cf:27:af:a2:3e:27:8d:ea:5c:f2:75:f7:8f:95:
53:92:a4:78:94:3c:7b:c6:4b:87:db:7c:28:c1:26:
86:ff:f8:1f:16:70:a4:c4:3c:6f:dd:bc:13:8c:f6:
09:85:91:56:db:f6:e5:c8:60:a0:ce:53:6f:d4:3c:
a9:be:32:44:cc:7d:38:d8:b4:a5:da:14:9a:0e:a5:
ef:45:51:6b:1e:bd:8a:81:df:dc:fc:2b:07:70:0a:
6a:60:27:ba:df:a5:9f:b2:1a:e5:a0:91:28:98:70:
b0:e8:d4:0c:80:f8:d3:8d:ed:0c:de:7b:84:e9:0a:
ac:1a:54:fd:38:20:0b:4b:64:df:6b:e8:64:82:7d:
b7:9c:6c:2c:7a:cf:a0:6c:c2:61:5b:86:96:f3:b6:
1a:38:30:74:a4:6f:24:e2:95:e8:ef:73:94:ca:2a:
95:2f:44:ec:61:07:b7:1e:a2:1f:d9:dd:84:2b:f5:
1d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:42:C4:88:DB:21:FB:A0:03:58:00:C2:52:19:D5:25:87:09:22:4F
X509v3 Authority Key Identifier:
keyid:A7:1E:0E:EE:59:0D:E2:FD:8D:EC:4A:67:E8:7B:C8:96:FF:C8:B2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/N0LEiNsh-6ADWADCUhnVJYcJIk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.132.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:25:05:a0:dc:8f:35:47:9e:23:ed:d6:36:c4:df:ab:3e:91:
6d:13:d7:24:a7:03:29:ff:16:b1:74:4e:be:22:ba:42:0a:c8:
27:01:f9:99:9d:bb:ea:3f:4b:12:df:0d:e6:70:07:58:d9:0f:
c9:0a:15:36:86:d1:25:d3:d4:31:e9:ff:54:b1:8f:b8:31:69:
d0:2e:32:5d:d4:70:a1:29:84:37:e3:62:49:8d:e6:29:43:14:
7f:ff:96:7a:17:b1:b6:32:a2:80:66:35:3e:37:9c:2f:82:ce:
6b:fc:86:77:4b:09:3d:35:ec:5c:f3:db:73:ec:2b:5f:48:97:
d2:c4:83:82:89:b7:9e:52:2c:29:2a:2b:5c:85:7d:37:67:cd:
f0:cd:bc:db:41:a4:40:d0:1b:58:f6:ad:3c:91:f8:92:7e:ee:
71:48:de:bc:4c:32:d1:b7:25:95:3f:81:30:63:3b:cc:d1:61:
9f:1a:0d:33:eb:64:a9:7e:15:d8:23:b2:9e:d5:57:eb:38:2b:
2c:13:16:8a:2a:01:69:5c:57:15:8b:de:bd:a8:41:d2:8f:13:
7c:e7:5b:eb:e7:10:2f:31:19:02:67:c8:39:14:b2:d9:08:32:
63:00:68:73:38:bb:b2:5a:77:8f:5f:3f:32:39:3a:52:a6:37:
4c:af:96:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:34:53 2024 by rpki-client on console-ams.rpki-client.org