Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/NjBNEVesgALtXaTCCX0UiVy9o2E.roa
File: NjBNEVesgALtXaTCCX0UiVy9o2E.roa (raw, json)
Hash identifier: BEh8+zUS7rtmN7PlkiV2+lZD4iIEl+cvgYT+xU00VvQ=
Subject key identifier: 36:30:4D:11:57:AC:80:02:ED:5D:A4:C2:09:7D:14:89:5C:BD:A3:61
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B934D76AFA73D5693542AD3F781617
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/NjBNEVesgALtXaTCCX0UiVy9o2E.roa
Signing time: Mon 01 Jan 2024 20:31:15 +0000
ROA not before: Mon 01 Jan 2024 20:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41280
IP address blocks: 151.237.24.0/24 maxlen: 24
151.237.26.0/24 maxlen: 24
85.187.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:34:d7:6a:fa:73:d5:69:35:42:ad:3f:78:16:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36304d1157ac8002ed5da4c2097d14895cbda361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7c:a3:22:5a:e5:01:ed:be:74:83:ce:c5:94:
db:53:37:df:61:d9:dd:09:96:5c:d4:a9:a7:c2:a3:
81:3d:55:42:93:3f:b9:9c:89:fe:63:12:ba:b3:86:
6b:49:4e:68:df:47:d3:71:37:97:05:7a:1a:68:a8:
3d:14:a7:cf:c2:8e:c9:f9:69:23:e2:1b:b4:68:0a:
02:6b:b0:cc:b9:e4:d2:f1:4f:35:73:3e:f0:35:51:
46:fa:63:04:a1:a4:c4:c8:7b:86:c0:2d:50:dd:85:
78:c9:cd:ac:aa:97:09:a4:34:dc:14:ca:4b:90:12:
16:7e:38:8b:c8:fa:12:11:1b:44:3a:25:ff:01:61:
0c:7e:41:9c:05:6b:10:fc:5b:0e:e3:9b:32:bf:29:
9c:df:50:1d:bb:46:1a:13:d6:6e:f2:f4:18:7d:3b:
99:d1:e8:ed:b1:1f:f2:65:36:3f:b9:e9:8d:21:84:
12:68:63:50:eb:11:6d:6a:a3:9a:4a:69:be:7f:5a:
f7:1e:e4:cb:59:a8:35:b7:98:32:cc:c1:5a:ca:bd:
2d:e1:9d:98:af:10:e5:5c:6b:ef:d0:58:22:d1:0a:
cd:e4:df:fb:93:57:f0:ac:64:d3:c8:5c:a5:ea:d2:
e6:93:7b:7f:aa:fc:e2:a3:c5:bb:3d:a6:ec:e2:e7:
82:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:30:4D:11:57:AC:80:02:ED:5D:A4:C2:09:7D:14:89:5C:BD:A3:61
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/NjBNEVesgALtXaTCCX0UiVy9o2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.244.0/22
151.237.24.0/24
151.237.26.0/24
Signature Algorithm: sha256WithRSAEncryption
15:31:f8:f4:e3:ad:1b:b8:5b:3f:74:b1:be:b0:32:4c:38:52:
44:53:e0:79:1e:af:8d:b0:de:14:cb:af:ea:2f:d4:00:65:ed:
12:c8:2f:a5:90:d6:d3:30:fe:4a:39:b3:80:28:64:d3:0d:e6:
86:d0:52:20:54:eb:78:a6:01:73:f5:c4:22:96:b6:03:ef:a3:
e6:7d:4a:9b:b7:f3:57:59:a1:70:d5:ee:2d:94:5a:a5:b4:ee:
b1:45:c0:9a:10:05:4c:2e:06:96:52:6c:8a:55:38:0d:8f:48:
0a:b7:0d:d5:cc:74:05:a7:54:67:8f:99:73:fb:5b:6f:61:f9:
f9:42:c7:e8:51:a8:05:51:7c:f4:2a:bc:d1:1e:34:3f:11:2e:
5c:72:da:d7:43:9f:1e:4a:5b:89:59:cd:a8:b7:f1:5b:30:b0:
63:de:89:be:50:04:65:f5:08:4a:c0:72:b9:b0:a0:cb:44:68:
cd:b8:a6:cd:cc:28:08:6c:63:cc:4f:bd:38:c5:8d:b0:94:4f:
57:02:e5:0d:bf:6a:ce:90:68:1d:a6:eb:48:45:34:fb:5a:b5:
17:a8:fd:3f:53:26:d4:f9:2d:24:eb:e0:ed:47:2b:a2:9a:c4:
b5:47:6d:d3:5d:34:ab:fd:d3:8e:d0:e6:7f:dd:d5:ba:98:cf:
cf:f7:35:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:48:05 2024 by rpki-client on console-ams.rpki-client.org