Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/NeS9nhsXtLlIqeoNcoGKVM4KDVw.roa
File: NeS9nhsXtLlIqeoNcoGKVM4KDVw.roa (raw, json)
Hash identifier: 1jKzo110F3ZJRHfbcbEl3C7ed/GqX7jCDFXe6U49AWk=
Subject key identifier: 35:E4:BD:9E:1B:17:B4:B9:48:A9:EA:0D:72:81:8A:54:CE:0A:0D:5C
Certificate issuer: /CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
Certificate serial: 018CC5DD35734C7669E7B1ADED7A57A98AA0
Authority key identifier: C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/NeS9nhsXtLlIqeoNcoGKVM4KDVw.roa
Signing time: Mon 01 Jan 2024 16:30:57 +0000
ROA not before: Mon 01 Jan 2024 16:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211269
IP address blocks: 91.213.201.0/24 maxlen: 24
5.8.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:35:73:4c:76:69:e7:b1:ad:ed:7a:57:a9:8a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
Validity
Not Before: Jan 1 16:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35e4bd9e1b17b4b948a9ea0d72818a54ce0a0d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ca:58:a1:7d:cf:b8:a0:20:52:62:da:d7:2e:
84:b1:d7:58:77:68:3a:57:69:02:e5:db:09:ec:21:
85:5a:90:24:3a:39:ee:88:66:bc:e3:b0:2f:0f:96:
ec:15:0d:47:40:94:a2:88:2b:08:a9:57:6b:11:64:
26:e0:8e:f3:c5:bd:10:46:0d:57:9c:c8:20:50:3c:
2e:e1:6c:db:6b:a9:89:d9:69:34:ce:4a:bb:1c:23:
b3:81:ef:b6:dc:d9:b8:f4:d1:ce:5b:3f:b6:76:2b:
5a:09:91:28:95:d4:d0:94:98:b3:0d:77:88:1e:a7:
93:08:10:b2:ca:b1:5a:4a:56:21:47:14:02:c6:12:
6b:c4:3d:02:cb:78:02:f7:11:c1:c3:36:09:c4:d4:
b2:76:55:43:60:c0:b3:1d:6c:8b:4f:c0:a2:d1:8b:
1e:f5:3c:32:21:93:7a:e4:a0:4e:e7:c2:a5:19:5a:
8a:7e:0c:6b:9e:ac:ef:89:f4:23:d3:93:8c:2e:2f:
ec:e0:bc:bb:75:06:1d:c9:fe:07:e8:f2:ce:6c:33:
85:e4:b6:80:22:05:13:9d:28:f2:ed:44:88:41:f4:
33:e1:ce:cc:2f:89:b5:5f:ef:f0:ab:1a:ac:4e:7a:
63:8c:e4:d1:6e:ac:fb:da:cf:81:85:6c:64:85:1b:
a2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E4:BD:9E:1B:17:B4:B9:48:A9:EA:0D:72:81:8A:54:CE:0A:0D:5C
X509v3 Authority Key Identifier:
keyid:C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/NeS9nhsXtLlIqeoNcoGKVM4KDVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.250.0/24
91.213.201.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d6:f0:c6:12:d1:cf:8f:f2:61:31:ca:75:be:48:e0:ac:82:
21:1e:75:f7:66:7e:5a:61:e9:71:b0:4a:ce:a2:bb:65:dc:37:
f7:a6:97:22:da:f4:26:c3:81:a4:bb:f1:4b:49:75:cb:50:2e:
65:87:71:ba:f3:92:47:8b:7a:80:da:30:5f:b7:89:6f:2b:ce:
bc:ae:fa:f5:af:20:55:9d:c6:40:10:3d:f6:b0:5c:c1:d7:ab:
88:52:56:cb:d8:56:ef:b8:92:75:2a:f6:5c:aa:88:74:f3:34:
3d:0b:76:b5:ea:a0:fc:c8:ed:b6:4c:dc:e6:4d:88:3c:fd:2f:
3b:dc:82:29:3b:60:e1:46:02:9e:3b:7e:a1:34:39:dd:10:5d:
1f:d2:d8:eb:1b:da:ce:71:2b:0b:cb:d9:57:bc:8d:25:38:e6:
d7:6a:1f:fa:95:84:f5:2c:b0:a1:48:44:0f:76:35:73:bf:b7:
21:99:6d:13:6f:ff:7f:6d:9d:04:a4:ff:c8:9c:1a:e3:b3:13:
06:0e:7d:f6:64:cc:bb:56:eb:a1:b5:62:8f:b7:c5:87:30:d2:
94:f5:df:d4:68:23:5d:15:cf:ad:e4:95:ac:c4:cd:cc:52:5d:
7c:11:fa:2f:07:52:99:01:00:2d:ac:a8:a5:55:ab:c9:92:c1:
6e:eb:24:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:09:59 2024 by rpki-client on console-ams.rpki-client.org