Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/NCJUP8O_xyOPkKoDe_mkcxK3x4Y.roa
File: NCJUP8O_xyOPkKoDe_mkcxK3x4Y.roa (raw, json)
Hash identifier: 3b3raGtYiR8PB8Rd2qNlYJH9vi1CZU5uRGlh6lklBFY=
Subject key identifier: 34:22:54:3F:C3:BF:C7:23:8F:90:AA:03:7B:F9:A4:73:12:B7:C7:86
Certificate issuer: /CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc
Certificate serial: 01903A841B26168D471FD5ABB48D01D4B2B0
Authority key identifier: A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/NCJUP8O_xyOPkKoDe_mkcxK3x4Y.roa
Signing time: Fri 21 Jun 2024 11:17:34 +0000
ROA not before: Fri 21 Jun 2024 11:17:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41345
IP address blocks: 193.37.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:84:1b:26:16:8d:47:1f:d5:ab:b4:8d:01:d4:b2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc
Validity
Not Before: Jun 21 11:17:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3422543fc3bfc7238f90aa037bf9a47312b7c786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:05:e5:b6:1f:dc:9b:e1:d2:70:98:ba:de:9d:
d1:8a:bb:35:38:8b:25:40:66:a8:a9:cb:96:da:1e:
30:76:b8:7d:f2:f9:b3:39:6e:43:a5:92:69:33:34:
c2:86:93:c9:93:48:d3:04:64:87:9c:ea:39:95:d6:
7c:43:81:d1:a3:f8:fa:90:8e:48:77:b0:8d:48:81:
9c:38:d6:ed:30:b7:75:20:80:1f:3d:2f:2a:ff:d9:
5d:e5:53:90:a6:20:f5:5b:22:b3:cd:c8:fa:c7:37:
41:4f:db:3b:ef:5c:db:3e:c6:ca:73:96:bf:12:8a:
5d:f7:fb:ea:6c:67:86:bf:c2:3f:6c:1c:ca:a3:4c:
77:98:69:a5:fb:3e:69:b9:56:36:3b:e3:c2:00:4b:
cd:11:be:aa:d6:55:e8:a3:c4:78:e3:0c:f3:38:96:
e9:06:81:a5:a0:d1:ea:92:29:5a:de:07:ab:f5:85:
96:54:0a:f8:2c:bb:30:3d:40:18:53:e5:92:ee:28:
8d:fd:74:c1:a2:39:23:06:32:34:ed:e0:f4:2c:21:
8b:31:63:8f:74:da:50:23:6e:55:4f:e9:3c:62:15:
77:67:35:cf:75:f5:74:54:d8:89:22:44:ce:e6:13:
92:24:ec:e1:05:d5:f7:db:fe:e9:28:55:82:b9:a1:
70:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:22:54:3F:C3:BF:C7:23:8F:90:AA:03:7B:F9:A4:73:12:B7:C7:86
X509v3 Authority Key Identifier:
keyid:A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/NCJUP8O_xyOPkKoDe_mkcxK3x4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.153.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:97:f6:56:49:44:d9:21:1c:30:dc:ab:c8:ad:6d:fe:f0:49:
5d:6a:57:21:fe:a8:5a:70:ce:e9:33:10:ac:68:e1:bf:82:3c:
eb:5c:ba:86:f7:ed:a4:52:03:a1:2b:7f:70:58:73:45:f9:27:
27:90:0a:63:2f:62:80:2d:cd:04:81:05:55:a1:a6:fa:85:50:
62:56:67:e3:4d:83:0c:28:40:0d:c5:09:0f:e7:9d:95:6c:79:
28:06:5a:70:cd:0d:78:0c:cd:4d:16:56:ae:89:ae:76:8e:4e:
8f:22:df:34:d9:50:ec:61:86:64:77:0e:b8:cf:ed:49:6a:b4:
be:e6:b1:b1:f5:0e:35:e5:22:47:c7:9e:14:72:b2:84:5b:7b:
85:7d:db:da:ed:b3:ec:34:a5:e7:da:e5:80:d1:cf:e4:c7:d7:
cf:39:e7:d0:eb:91:92:7d:5d:ef:59:01:72:ab:2e:c2:3e:0b:
22:1a:6b:dd:46:ae:35:76:61:ad:7b:7d:85:5e:58:6a:d7:4b:
10:0e:c5:b5:53:57:99:bc:a2:a9:ca:d3:53:a6:2c:0a:b3:ff:
6c:0a:2b:f0:36:65:67:0e:3a:12:f9:54:a2:74:e5:ce:d0:36:
41:67:44:d0:50:0c:c8:75:90:b2:58:fe:8b:5b:75:0e:5f:00:
3b:5e:15:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:55:11 2024 by rpki-client on console-fra.rpki-client.org