Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/nxsCckuGwESuSwyU7f1fkXYl9LM.roa
File: nxsCckuGwESuSwyU7f1fkXYl9LM.roa (raw, json)
Hash identifier: zaXi6GbF0PjQ9A4id91IdIZ0o1TrGU1UXjrpKHnagPg=
Subject key identifier: 9F:1B:02:72:4B:86:C0:44:AE:4B:0C:94:ED:FD:5F:91:76:25:F4:B3
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01926A79EF271DAEBE26A48171954B725D01
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/nxsCckuGwESuSwyU7f1fkXYl9LM.roa
Signing time: Tue 08 Oct 2024 04:53:48 +0000
ROA not before: Tue 08 Oct 2024 04:53:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43278
IP address blocks: 45.129.237.0/24 maxlen: 24
213.226.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6a:79:ef:27:1d:ae:be:26:a4:81:71:95:4b:72:5d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Oct 8 04:53:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f1b02724b86c044ae4b0c94edfd5f917625f4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:cf:1a:c9:3c:11:2f:85:98:b3:bb:86:e8:
97:75:d8:24:a3:54:fe:e3:26:6d:68:62:36:be:bf:
7b:e5:d2:5e:fe:79:fb:e1:c9:1b:2e:00:23:ef:de:
a1:ac:f6:bb:0c:60:0f:32:b0:cb:0c:8f:54:aa:d1:
81:63:16:ab:0a:55:64:64:3b:7b:50:78:62:0b:ee:
ac:c8:84:f0:41:d2:1a:fc:7b:48:a7:70:3a:db:76:
5d:5e:bc:5e:15:7b:5c:51:31:bb:fd:1b:b2:1f:35:
3b:16:c9:4e:5b:ee:97:25:7b:6a:8c:7a:2d:f7:f8:
78:fc:1e:49:28:6d:fc:8d:ff:87:be:3b:35:a3:62:
12:ce:e0:69:66:3c:96:00:c0:43:53:db:3c:08:cb:
24:41:aa:6b:d7:0e:be:2b:c1:a6:a5:55:68:86:e8:
d2:77:df:64:f3:55:0f:e8:64:d8:ea:34:2c:00:3e:
0c:d5:2b:e6:43:59:12:3a:12:6c:fb:34:ea:fb:ef:
54:9c:9c:5f:5e:70:fe:1c:90:63:4d:61:2a:07:8a:
4a:61:77:71:56:0f:d1:0e:ab:59:4b:ea:2c:20:e5:
91:dc:88:90:7f:8a:14:2b:fc:c3:6b:46:0d:b4:ce:
d1:98:28:40:e6:b5:3b:99:7e:7d:c7:56:d5:31:c4:
36:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1B:02:72:4B:86:C0:44:AE:4B:0C:94:ED:FD:5F:91:76:25:F4:B3
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/nxsCckuGwESuSwyU7f1fkXYl9LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.237.0/24
213.226.115.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:92:bf:75:1d:d0:17:22:ba:05:a8:8b:ca:2f:dc:7b:58:1d:
04:86:7e:48:60:e7:e8:7f:cb:f7:1a:63:84:f8:82:ec:6b:b3:
69:9b:13:3d:81:49:a3:ba:4c:46:51:58:1a:ef:1a:76:a8:dc:
2d:e6:36:72:f3:de:4e:11:f8:47:69:9a:7e:21:a4:33:11:3a:
6e:e0:62:c0:2c:23:27:ac:52:3c:67:b8:c2:b5:8a:65:29:27:
4a:16:23:cb:fd:54:d9:e3:1a:6a:be:1d:49:95:b1:d6:9e:ce:
b9:f2:4a:6b:7c:2e:c1:1d:b8:97:75:76:d1:d3:08:0e:67:ac:
7f:dd:e0:b2:13:a1:6f:54:9d:53:ed:2b:30:de:3a:8c:7a:2f:
60:53:8c:04:97:ad:51:23:3b:72:fc:aa:c8:4c:57:ea:d8:9d:
9c:c9:de:77:2f:42:4a:3a:c0:77:e7:f9:f3:c9:d2:c8:87:07:
c6:1d:af:fb:e7:ae:94:a8:5f:17:db:87:17:d8:35:12:87:60:
c1:3e:94:76:5f:52:a0:7a:ef:e3:4e:cc:2f:26:d7:4d:74:79:
68:a1:48:28:9a:16:42:1a:f2:7d:4b:6e:6a:50:f5:10:6a:68:
a6:6d:e9:fb:0c:6d:62:77:a7:7e:32:4e:19:a6:9b:17:50:c9:
b0:0c:14:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:29:03 2024 by rpki-client on console-fra.rpki-client.org