Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/NB5vmB_aQTI9vYv9tlIeVswPlLQ.roa
File: NB5vmB_aQTI9vYv9tlIeVswPlLQ.roa (raw, json)
Hash identifier: n/2QJXA9ySafSmUX2iwt849Ov9Odlgji9LdX+E5Lvr8=
Subject key identifier: 34:1E:6F:98:1F:DA:41:32:3D:BD:8B:FD:B6:52:1E:56:CC:0F:94:B4
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 018CC56EFD390201B3A1A46B5B579637478D
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/NB5vmB_aQTI9vYv9tlIeVswPlLQ.roa
Signing time: Mon 01 Jan 2024 14:30:34 +0000
ROA not before: Mon 01 Jan 2024 14:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34376
IP address blocks: 85.14.31.0/24 maxlen: 24
82.119.93.0/24 maxlen: 24
85.14.35.0/24 maxlen: 24
85.14.33.0/24 maxlen: 24
85.14.32.0/24 maxlen: 24
85.14.32.0/22 maxlen: 22
85.14.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:fd:39:02:01:b3:a1:a4:6b:5b:57:96:37:47:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 1 14:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=341e6f981fda41323dbd8bfdb6521e56cc0f94b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3f:3d:c4:09:c0:07:3d:75:56:45:9f:c2:76:
c7:16:54:0c:cb:d4:67:d1:d1:ee:b7:61:e3:4a:a9:
af:84:34:2f:b9:fd:0b:ee:32:13:2d:04:52:17:03:
2a:4f:0a:17:3c:2c:5b:6a:32:76:38:7c:d8:dc:89:
3c:4a:ba:72:2b:9e:5a:85:5b:62:d9:09:02:d7:ee:
ce:66:f0:f6:60:64:fb:f8:34:c5:2e:19:e2:b7:5a:
ef:60:77:4d:81:12:f9:73:aa:d3:e6:24:95:e2:3a:
1b:b5:f5:cd:db:b1:ad:1e:b2:b8:6a:2a:53:b6:37:
d2:2c:85:de:cf:dd:9d:04:66:1d:da:c7:66:a1:cf:
90:82:fd:c1:7b:7a:38:fd:f9:d3:85:48:f0:a7:bd:
44:fb:7e:1a:2d:13:70:a6:2b:a3:3f:05:f3:e0:65:
32:b7:7e:be:24:55:ff:04:8e:f8:99:23:6e:18:8b:
bf:b5:51:7f:33:df:ef:91:bf:d9:13:d8:ff:82:d8:
3f:05:e5:c1:ab:1f:f3:3a:c2:fb:71:06:68:42:67:
fd:60:6f:dd:a6:8b:dc:25:c3:0f:75:5c:d0:ca:cb:
42:32:6f:57:81:b8:03:2a:b7:c5:0f:e9:b1:dc:23:
e2:9a:ef:be:b8:cd:1f:c8:8b:4a:1e:97:1c:1d:33:
11:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1E:6F:98:1F:DA:41:32:3D:BD:8B:FD:B6:52:1E:56:CC:0F:94:B4
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/NB5vmB_aQTI9vYv9tlIeVswPlLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.93.0/24
85.14.31.0-85.14.35.255
Signature Algorithm: sha256WithRSAEncryption
7f:48:1f:c0:8d:7b:a1:0e:68:cd:d3:2d:96:5c:6b:4f:1c:8f:
e2:3a:02:ec:95:21:59:1a:19:b3:84:6e:82:9c:0c:7a:44:a6:
69:69:89:31:e9:86:95:ab:95:78:b7:10:e8:d9:94:da:b6:fa:
21:1a:85:a3:b5:d5:d0:4f:12:b0:ce:7c:f7:d3:9d:0b:c3:f0:
ce:4b:db:0f:a5:58:eb:d3:d0:a0:4d:ff:a0:64:18:7f:51:02:
d2:10:21:de:3b:36:a6:27:85:e0:d5:79:76:4b:6e:fc:b9:1e:
93:33:0d:93:7f:d4:b0:ee:c8:44:eb:76:8b:4a:fb:06:50:ec:
07:e8:b6:dc:25:48:06:90:be:ce:eb:14:ba:b4:b4:81:56:79:
63:00:3c:d7:87:52:09:6e:1b:c8:d4:4e:a8:bf:36:59:00:6f:
e6:9e:d3:fa:8d:b6:79:ba:aa:99:0f:be:ed:25:dd:79:ae:9f:
66:08:00:e4:9d:ed:a7:94:a2:3e:ca:90:dd:af:c1:13:3e:d2:
97:44:f4:51:0b:a0:f9:80:88:93:92:fc:1c:fb:36:2b:60:01:
ba:91:09:6d:25:b6:fa:6b:75:20:aa:a4:e2:d3:86:5a:f5:cb:
38:bb:da:d3:a7:ad:48:5c:b2:ae:2e:dc:f0:14:03:15:32:f9:
16:db:f7:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:53:20 2024 by rpki-client on console-fra.rpki-client.org