Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/nAe45nyij3j6Py9d4jwEb95dUsA.roa
File: nAe45nyij3j6Py9d4jwEb95dUsA.roa (raw, json)
Hash identifier: L6bG+quDXjgP+cCppCM/aOxzaYvrSAoqWNgsNu5VayY=
Subject key identifier: 9C:07:B8:E6:7C:A2:8F:78:FA:3F:2F:5D:E2:3C:04:6F:DE:5D:52:C0
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018CC86F90B58ED5CEF5241479BF9518D2C8
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/nAe45nyij3j6Py9d4jwEb95dUsA.roa
Signing time: Tue 02 Jan 2024 04:30:03 +0000
ROA not before: Tue 02 Jan 2024 04:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43482
IP address blocks: 87.110.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:90:b5:8e:d5:ce:f5:24:14:79:bf:95:18:d2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 2 04:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c07b8e67ca28f78fa3f2f5de23c046fde5d52c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:43:92:92:69:50:27:5b:e3:60:51:f9:09:3f:
4d:17:0a:aa:c8:b4:5a:e3:60:c9:2f:2f:6a:f9:d3:
34:d9:6a:82:76:86:58:9f:ec:a6:b3:7e:4f:09:3d:
79:c6:b3:73:fe:34:c9:d5:30:29:03:11:54:c3:fd:
95:1a:88:2c:b7:dc:73:a4:f6:16:f8:5e:73:3a:8c:
9b:cc:00:22:04:95:40:e2:a0:35:0c:63:4f:15:aa:
7b:16:08:73:69:1a:b0:35:25:9e:f7:29:db:46:5e:
d7:a9:45:7c:03:ad:52:9e:37:9a:5c:73:23:26:12:
bc:9a:42:37:13:37:7d:1b:1c:08:78:ca:82:c1:b1:
e8:35:3a:6f:c1:48:f9:a6:d4:c2:55:10:9f:c8:ff:
ba:53:5e:bf:eb:ab:f7:89:d7:ff:b0:62:97:8c:37:
99:2e:45:1b:7b:25:b5:de:37:d1:0d:78:4f:2a:63:
8d:12:f1:e9:fc:7a:7c:a2:25:26:08:28:5e:a7:41:
5b:bf:2f:92:8a:3c:78:a1:12:54:20:bf:8d:21:74:
3d:f8:3e:17:a4:b4:fc:39:1a:7a:32:e5:79:11:ee:
bf:09:aa:bd:3f:fb:c5:8c:cb:86:15:42:45:00:3d:
74:2e:dd:45:52:74:8b:ca:57:e6:98:bb:e3:98:24:
8c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:07:B8:E6:7C:A2:8F:78:FA:3F:2F:5D:E2:3C:04:6F:DE:5D:52:C0
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/nAe45nyij3j6Py9d4jwEb95dUsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.110.233.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:12:92:f8:01:f1:98:de:f2:a9:fb:15:2b:d3:60:02:9a:36:
e8:e8:f3:bf:69:8b:fc:3e:61:58:fe:ac:c4:92:26:45:f9:dd:
aa:cb:2f:59:fb:b7:c7:18:8b:d3:d4:24:32:40:10:cc:59:f4:
02:cc:9e:b1:cd:47:b9:ae:85:8c:d5:ee:95:fa:66:d7:0a:7e:
83:50:4c:3f:7a:60:66:9e:7c:e7:e7:d3:c8:22:9b:9b:92:bb:
9f:96:a4:d9:6b:88:06:53:df:0a:a0:b9:c5:31:bf:f3:fc:9e:
07:f4:c8:fb:37:42:67:7b:a6:2e:2e:ff:7e:c8:57:4c:f2:94:
7a:54:4a:93:b4:00:af:07:78:bf:cd:47:30:27:4b:47:27:c9:
5c:4b:a0:fb:34:b0:78:0c:1a:6a:0c:df:a4:3f:c5:ab:c1:23:
6d:cc:1c:c7:dd:c8:42:d5:1c:dd:4c:d8:10:91:fb:c0:fd:41:
20:b3:bf:63:f0:ae:a1:51:f6:c9:0a:e9:a9:bf:24:c1:2c:b7:
ae:88:cc:29:6c:98:b9:39:fd:68:1c:05:ad:8f:fb:ef:a7:9a:
f8:66:8c:fb:2e:64:5d:61:9f:c5:4a:f2:53:04:06:91:ba:7f:
aa:77:d5:30:11:f6:b3:59:7c:f7:f3:21:e9:1f:b6:2c:c3:56:
00:11:92:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 09:40:38 2024 by rpki-client on console-ams.rpki-client.org