Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/NL56a-6PtPVgGAtVFT0HPZTEwWk.roa
File: NL56a-6PtPVgGAtVFT0HPZTEwWk.roa (raw, json)
Hash identifier: /YUFSHjgbsrlcVgoF83kyjiETSpiLsqw5p7M6tKdgWY=
Subject key identifier: 34:BE:7A:6B:EE:8F:B4:F5:60:18:0B:55:15:3D:07:3D:94:C4:C1:69
Certificate issuer: /CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Certificate serial: 018CC2DAD600BF95AC7310472334F90F670E
Authority key identifier: 2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/NL56a-6PtPVgGAtVFT0HPZTEwWk.roa
Signing time: Mon 01 Jan 2024 02:29:30 +0000
ROA not before: Mon 01 Jan 2024 02:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197735
IP address blocks: 91.226.27.0/24 maxlen: 24
91.226.26.0/24 maxlen: 24
91.226.26.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 04:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d6:00:bf:95:ac:73:10:47:23:34:f9:0f:67:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Validity
Not Before: Jan 1 02:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34be7a6bee8fb4f560180b55153d073d94c4c169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:75:2a:7c:85:b8:e6:5e:1a:7e:81:36:f3:bc:
a8:cf:f9:20:2c:46:0a:1a:f1:13:7c:a4:07:ff:fa:
56:2e:b7:15:99:13:5a:01:7e:89:d8:5d:29:e8:8d:
e1:f0:cb:e2:85:a7:a9:34:61:98:40:34:e4:9b:3b:
79:9b:92:1e:42:5c:bc:85:4e:28:8f:bc:e4:f3:c7:
e8:cf:7e:7c:96:23:13:00:43:84:4e:71:c7:2b:4a:
89:65:ef:80:e9:e7:ee:82:11:d2:c5:4d:ce:4b:4d:
b2:5f:e0:e8:c4:04:0c:9b:d6:ea:3d:19:f2:9f:5c:
67:27:e3:da:78:f1:7f:98:e3:d9:3b:4a:a9:80:7a:
64:c3:b2:08:65:93:12:45:01:87:ca:f3:fa:8d:f6:
77:09:d8:27:25:34:6c:a3:61:50:1a:b2:b5:56:88:
da:80:b9:89:a7:5e:2f:fe:b4:a1:31:d5:7e:79:14:
58:a7:bc:c6:4c:73:08:70:ad:e3:2f:b6:a2:15:1b:
e8:90:c5:4c:c5:b1:ec:31:9c:2a:5e:94:0d:a7:ed:
d9:1b:b2:04:24:60:44:62:78:f3:4a:a9:16:3e:f7:
e2:5e:91:08:dc:80:14:c1:2b:0c:49:f4:5b:d7:28:
ca:f9:d0:d4:a6:8b:47:2b:43:35:52:ae:4d:0a:34:
8d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BE:7A:6B:EE:8F:B4:F5:60:18:0B:55:15:3D:07:3D:94:C4:C1:69
X509v3 Authority Key Identifier:
keyid:2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/NL56a-6PtPVgGAtVFT0HPZTEwWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.26.0/23
Signature Algorithm: sha256WithRSAEncryption
94:59:4a:5a:97:1c:57:82:55:4b:63:5a:56:f3:b5:54:91:7f:
c6:0d:75:25:49:44:69:55:95:d0:2c:24:a3:23:a5:c6:a3:9e:
50:6e:76:c0:ae:9e:ed:06:a5:2e:2c:d7:59:a6:40:32:0b:dd:
eb:46:9a:37:db:6c:5f:24:fa:ec:cd:0a:71:a7:30:f4:63:66:
c8:e8:97:58:0e:ef:d8:6e:22:45:7f:36:cc:79:66:ea:85:de:
1c:5d:9c:f4:d8:ae:7e:ca:ae:94:c8:af:59:c2:db:24:b4:a1:
b8:c2:05:bd:65:fb:22:d1:54:6a:b3:00:7c:9a:a4:9a:03:f5:
55:32:7a:f9:f3:8d:40:e2:68:95:2f:39:f6:c3:6c:1b:23:20:
0a:32:ee:c6:d5:6c:61:6b:5f:b4:54:34:37:a3:fc:e8:f6:d1:
9e:31:9a:4e:d3:41:af:0a:aa:d9:fd:32:63:46:fa:85:5e:4a:
0f:8a:99:ef:56:e2:50:40:ec:95:44:da:aa:59:45:6b:b2:b3:
e6:c5:9f:78:d3:94:69:9c:10:2f:81:ba:8d:57:58:29:cd:af:
58:b2:7f:a9:25:4f:21:39:55:76:e6:71:e0:a5:38:ba:74:9b:
bc:76:f1:04:c9:39:9e:b0:29:11:52:5d:e6:36:ec:cd:08:b5:
c6:a7:5a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:45:19 2024 by rpki-client on console-fra.rpki-client.org