Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/nlQD8SD3p1UnjOZs-Tk6PwVhNzw.roa
File: nlQD8SD3p1UnjOZs-Tk6PwVhNzw.roa (raw, json)
Hash identifier: h8ocq5AxBE3xwuh/hiHRPhfS4y7WxJtZGX5t64qVT90=
Subject key identifier: 9E:54:03:F1:20:F7:A7:55:27:8C:E6:6C:F9:39:3A:3F:05:61:37:3C
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 018CC64AB0570096D3D4686354C93C247D51
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/nlQD8SD3p1UnjOZs-Tk6PwVhNzw.roa
Signing time: Mon 01 Jan 2024 18:30:32 +0000
ROA not before: Mon 01 Jan 2024 18:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202636
IP address blocks: 158.255.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:b0:57:00:96:d3:d4:68:63:54:c9:3c:24:7d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Jan 1 18:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e5403f120f7a755278ce66cf9393a3f0561373c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:84:4f:18:ed:af:98:12:e3:46:c4:5b:4e:dc:
d7:58:d2:06:57:ad:3c:69:25:cd:8c:0a:28:49:a8:
fd:24:6d:70:d8:5d:d0:eb:2d:33:70:af:b6:73:1d:
87:01:c2:97:f0:3f:a2:73:b0:5a:6a:38:20:65:0f:
dc:61:da:00:7b:84:a2:e8:c2:ca:40:45:36:0f:da:
2a:75:cc:da:96:d3:a9:97:ce:0f:91:df:83:7f:36:
f1:96:65:fa:29:60:e3:4c:44:38:f6:de:fd:d2:5c:
0d:36:9e:dd:f1:14:07:cc:8e:c8:45:e1:e5:21:4b:
5a:64:d8:ea:3f:76:ab:4f:d1:7e:c5:2c:4f:76:fe:
dc:5b:4e:b9:06:9d:0d:31:b3:e0:d7:6e:35:83:93:
42:d2:4c:c7:03:7e:50:1f:bd:ce:d7:b9:61:37:9b:
22:b3:8c:2d:79:d2:48:11:cc:60:56:1f:b9:ca:62:
16:23:40:61:f1:94:4e:56:18:76:39:8f:10:6c:9f:
00:36:fa:e4:e4:bc:e6:3a:c9:bb:11:f3:a2:1e:9e:
a1:bf:b6:87:ec:a5:af:60:ff:a4:33:ba:9c:fe:19:
92:cb:7e:04:58:3f:0c:73:f5:2f:35:00:a1:37:bc:
3c:b0:43:23:49:8f:50:44:7b:45:e4:68:93:54:3f:
ad:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:54:03:F1:20:F7:A7:55:27:8C:E6:6C:F9:39:3A:3F:05:61:37:3C
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/nlQD8SD3p1UnjOZs-Tk6PwVhNzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.255.232.0/24
Signature Algorithm: sha256WithRSAEncryption
34:7d:07:5e:cf:98:73:89:5f:ea:55:09:31:38:fa:45:30:00:
32:b7:f0:29:19:46:80:4d:72:5d:76:6a:50:13:54:96:e5:8f:
a3:16:46:e2:e8:a5:72:3b:c0:90:f7:fb:65:04:ae:e0:7b:31:
2f:82:c3:e4:e8:c2:7a:a7:ba:9e:c3:54:c7:74:08:0b:4f:e3:
4a:9a:fa:8e:be:44:41:b4:b8:3a:ce:69:52:82:7d:01:c1:1c:
37:2b:76:66:b0:ed:7c:a2:6e:d0:38:1f:a4:07:79:b5:5a:cd:
3d:c0:35:41:27:04:2b:3b:62:2d:fc:16:bd:e1:04:32:00:82:
11:b5:6d:50:d5:39:ad:9d:dd:ac:15:5f:93:80:f1:6b:60:98:
70:10:a9:c5:4a:3f:ce:09:d4:38:11:8f:0d:42:ad:a0:60:b2:
de:78:be:92:d6:5b:55:36:3a:2c:96:af:b8:9b:ea:7c:f5:c0:
fc:4f:e9:c9:71:ef:09:26:6f:88:9f:ef:81:1b:c8:10:d6:8d:
10:d4:a2:64:16:80:f2:be:2e:9c:14:cc:e0:c6:a8:83:e1:f9:
ff:c3:7f:ff:e4:8a:ee:23:93:ef:ff:54:34:0e:45:46:ba:b2:
59:9b:cd:a5:fc:44:85:ee:96:f9:17:ad:4a:b4:d5:b4:72:12:
e7:61:ad:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:05:48 2024 by rpki-client on console-ams.rpki-client.org