Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/N0iQVnjKj4L889HWEOwkVYuaN8M.roa
File: N0iQVnjKj4L889HWEOwkVYuaN8M.roa (raw, json)
Hash identifier: gkQ7aufg4DkJgfMxsAd1tSW4mMs9ofPLN7ug6L1Ist0=
Subject key identifier: 37:48:90:56:78:CA:8F:82:FC:F3:D1:D6:10:EC:24:55:8B:9A:37:C3
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 018CC8DEB9E5D936F4DAEAA672F4D3866A50
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/N0iQVnjKj4L889HWEOwkVYuaN8M.roa
Signing time: Tue 02 Jan 2024 06:31:28 +0000
ROA not before: Tue 02 Jan 2024 06:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207611
IP address blocks: 131.220.0.0/16 maxlen: 17
193.23.254.0/24 maxlen: 32
193.30.3.0/24 maxlen: 24
2a00:5ba0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:b9:e5:d9:36:f4:da:ea:a6:72:f4:d3:86:6a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: Jan 2 06:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3748905678ca8f82fcf3d1d610ec24558b9a37c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3e:a9:7d:ac:f2:3e:01:4e:b3:3e:56:0d:17:
f5:12:a7:b3:cf:ca:22:ea:97:0b:65:26:c0:5c:e1:
54:ff:58:46:e8:6b:5c:96:69:d3:ca:7d:97:6c:03:
fe:55:5d:d1:b0:66:01:1c:d6:4f:da:11:66:05:d6:
19:f7:f0:99:d2:0b:b5:86:8f:a8:99:e2:04:30:7c:
c0:05:03:7c:58:e2:3f:e8:1d:3e:33:01:e6:dd:18:
00:9d:19:fe:6f:23:9d:2a:62:fa:4a:6c:d5:11:3a:
a7:bf:4f:04:3c:5d:98:04:0a:36:c7:81:ca:63:85:
cb:7d:bd:41:14:d0:c1:9f:d0:db:fd:fb:34:03:99:
06:52:5c:8e:cd:2b:9b:88:9a:b3:ef:66:ab:93:70:
9b:ba:47:7f:a9:c2:22:49:5a:a6:6b:ae:d1:aa:d7:
c9:f3:f7:5b:c5:b1:77:4c:6d:e9:2c:10:33:cc:36:
04:67:9f:8a:63:fa:bf:48:24:aa:fc:99:fd:ed:a5:
c0:8a:25:3c:0c:77:4e:c6:e4:c2:ab:ad:b1:15:79:
fa:5f:df:04:87:0b:83:66:5a:a0:4b:3a:05:fc:b7:
91:34:1a:90:c1:2b:58:b4:7b:fb:e7:08:98:87:53:
23:ea:44:de:90:87:6a:ad:45:42:14:55:f8:7f:8f:
13:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:48:90:56:78:CA:8F:82:FC:F3:D1:D6:10:EC:24:55:8B:9A:37:C3
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/N0iQVnjKj4L889HWEOwkVYuaN8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.220.0.0/16
193.23.254.0/24
193.30.3.0/24
IPv6:
2a00:5ba0::/29
Signature Algorithm: sha256WithRSAEncryption
8f:b1:64:f4:21:1e:a0:56:26:0b:61:43:74:f0:96:a9:b2:61:
02:a8:69:75:79:c7:77:45:df:0a:24:5d:bf:dd:c3:39:a8:6e:
fd:ae:ca:74:3e:36:72:27:9e:93:ed:fa:fd:bd:0c:e7:6b:68:
c4:a0:3d:91:d8:a3:5e:af:6c:75:da:5c:8f:45:7f:00:8f:32:
e5:fe:72:c6:1e:64:56:4b:10:af:2e:65:9a:e4:aa:b4:1a:b6:
32:90:d1:5f:78:bf:f0:3a:85:d3:90:a1:b8:15:93:e0:b5:1f:
79:90:12:42:e1:a7:c3:b9:27:1f:f0:03:11:ab:cb:94:29:0a:
04:5d:2b:20:0e:04:a8:e4:dc:67:26:fe:ba:45:a0:76:af:32:
c2:3f:86:56:9a:79:5a:2f:1b:15:27:17:73:43:f0:78:26:c9:
42:5a:a0:71:da:fb:f6:54:72:9f:4e:a8:96:fc:d9:cc:03:ad:
45:ce:b4:c5:44:7c:e4:b1:a1:54:d5:e1:ce:04:b4:58:16:f0:
db:b4:46:b4:31:7a:e6:6b:3d:f7:86:fc:e5:c6:88:2d:f5:54:
a4:7a:a5:d0:53:12:e6:46:ad:64:be:e4:9a:27:02:9f:77:c8:
cd:6f:b8:22:66:33:58:13:53:d0:87:ac:58:43:f2:a6:34:a9:
37:c4:00:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:39:30 2024 by rpki-client on console-fra.rpki-client.org