Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/NSS0OlM5O52FDTgB7ycZJ18Ew2o.roa
File: NSS0OlM5O52FDTgB7ycZJ18Ew2o.roa (raw, json)
Hash identifier: N8CopnilQlEGV+OzNW141ymMtvNg9HkPkrbPWloWTjc=
Subject key identifier: 35:24:B4:3A:53:39:3B:9D:85:0D:38:01:EF:27:19:27:5F:04:C3:6A
Certificate issuer: /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial: 018CC6B90E5D3BC836DCBA58C3B371FF92D4
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/NSS0OlM5O52FDTgB7ycZJ18Ew2o.roa
Signing time: Mon 01 Jan 2024 20:31:05 +0000
ROA not before: Mon 01 Jan 2024 20:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200339
IP address blocks: 194.147.153.0/24 maxlen: 24
194.147.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 21:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:0e:5d:3b:c8:36:dc:ba:58:c3:b3:71:ff:92:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Validity
Not Before: Jan 1 20:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3524b43a53393b9d850d3801ef2719275f04c36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d2:31:54:84:16:34:98:bf:4c:5b:2e:43:c8:
b4:3a:7c:f7:30:d8:d8:6c:75:23:53:be:68:e8:78:
1d:dc:7b:67:cc:1c:68:0f:e4:a9:b0:2e:48:18:31:
a2:2b:5f:06:cf:b1:4a:28:f3:47:42:f9:2f:24:2e:
49:c9:48:3b:d2:62:ed:8a:b8:38:b3:81:04:48:1e:
9a:e1:91:21:f9:b7:2d:d2:40:81:f6:9f:a8:a5:64:
d6:5e:92:a1:27:1b:b8:be:5d:69:37:8c:b8:d0:8a:
a0:1c:c3:14:8b:50:e5:21:e5:e8:8b:0e:04:9a:35:
76:53:9c:3b:05:ed:3d:26:89:2f:84:d2:b7:9e:80:
42:d6:b6:f1:85:a3:5a:ee:ec:e4:7f:39:24:3c:f1:
d3:1d:a1:0c:3e:03:26:d7:c3:59:96:43:d7:4c:72:
72:bf:7a:54:21:db:6a:5d:aa:29:6d:a3:c2:df:9c:
da:27:26:89:29:5d:be:53:a4:85:49:16:03:a5:8e:
e3:98:e2:b7:78:87:eb:a3:08:33:d1:32:4e:20:b0:
16:9d:fb:b4:bc:53:ed:8f:a8:9d:d3:9e:f0:fd:08:
65:67:44:ef:b8:f9:71:f2:84:72:44:54:2c:0c:37:
58:94:97:d7:f7:ae:c3:26:21:e2:2d:1c:08:f2:e1:
49:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:24:B4:3A:53:39:3B:9D:85:0D:38:01:EF:27:19:27:5F:04:C3:6A
X509v3 Authority Key Identifier:
keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/NSS0OlM5O52FDTgB7ycZJ18Ew2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.153.0-194.147.155.255
Signature Algorithm: sha256WithRSAEncryption
87:82:43:74:7b:a3:d1:66:1d:9d:65:41:31:38:9a:dc:25:07:
8d:7f:dd:09:2b:32:c8:c7:eb:e6:55:43:1d:9b:28:95:33:2f:
c0:56:e8:9e:29:da:0f:54:11:ae:c8:71:5b:0d:6a:3f:0b:cd:
9d:26:43:7c:b4:16:ca:f0:3e:7f:d6:e7:dc:fe:f1:12:d5:8b:
a2:ca:5a:0e:50:42:87:66:14:6d:3a:9c:83:fe:f8:0f:39:41:
7d:6c:ef:9f:d0:b2:f2:c3:84:2d:c6:2e:31:56:70:01:64:2c:
8c:b3:e4:43:11:e6:0f:11:92:e3:3d:fa:9c:e6:92:66:49:46:
86:6d:2f:c7:6c:32:bf:81:b6:9a:3e:fc:5c:52:e2:3a:41:8a:
07:27:1b:c8:15:37:aa:67:45:06:f3:1c:d5:e2:a8:c1:1f:c9:
b1:c8:e5:20:01:13:f0:f9:ad:fb:64:c6:ee:00:9d:c5:ce:4e:
c9:b7:d6:6d:e1:82:f2:e0:66:32:6f:2e:d2:27:72:08:c2:7c:
8f:87:83:09:22:5d:12:e4:f7:10:67:79:17:d6:5e:d6:1c:b7:
5e:e0:9e:07:8f:34:9b:94:01:a5:55:ce:68:0a:ec:5e:19:61:
5b:df:97:7b:0c:a7:2f:fd:71:b5:2f:29:d6:46:88:38:40:5b:
0f:66:0e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 02:34:21 2024 by rpki-client on console-ams.rpki-client.org