Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/NT0ZyTEZsafniIsuNSneB-6EY9M.roa
File: NT0ZyTEZsafniIsuNSneB-6EY9M.roa (raw, json)
Hash identifier: FGEBwxdcS1t9RIm1sejquzDoT/zwO3v8fPWrJce/Jx0=
Subject key identifier: 35:3D:19:C9:31:19:B1:A7:E7:88:8B:2E:35:29:DE:07:EE:84:63:D3
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018D30E63E1A074E4A7D410400D56AC6D497
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/NT0ZyTEZsafniIsuNSneB-6EY9M.roa
Signing time: Mon 22 Jan 2024 11:20:12 +0000
ROA not before: Mon 22 Jan 2024 11:20:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 109.72.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:e6:3e:1a:07:4e:4a:7d:41:04:00:d5:6a:c6:d4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 22 11:20:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=353d19c93119b1a7e7888b2e3529de07ee8463d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:c6:51:55:85:c0:59:71:70:63:7c:5a:f4:
bb:51:16:f8:74:89:04:d8:20:78:b4:f8:ed:04:39:
56:14:f2:82:4d:b5:ef:72:c4:6f:13:4e:7e:14:f7:
7b:2f:bc:e1:15:77:a9:89:3d:da:36:65:64:28:b5:
7d:64:58:46:70:fb:d4:aa:ba:88:c1:b4:30:b7:db:
38:8e:d8:1f:8f:2c:c5:d1:a2:1e:b0:81:56:b9:6f:
f4:4b:8b:2e:8f:01:94:dd:8d:64:da:6c:da:cf:0c:
ca:07:a8:d9:a1:48:5e:8c:d0:9e:47:30:43:4e:2c:
e6:74:cc:11:4a:0b:51:e0:9c:2c:ef:65:70:65:24:
77:87:d6:6a:60:ba:d1:a7:29:d0:79:54:9d:40:e1:
78:77:09:a7:cd:d0:2c:40:2f:0a:d2:38:21:13:b6:
7b:24:37:75:ee:28:dd:78:44:06:a1:38:d6:7f:21:
45:7a:a8:6a:c2:3b:52:69:dd:3a:69:c8:99:dc:22:
11:e2:36:0c:7c:77:18:ea:6b:2e:5d:b2:7b:43:2d:
5e:13:21:be:e9:f3:04:aa:e3:86:83:ac:5e:c9:df:
7f:0d:83:4a:16:06:e8:0d:29:e0:35:0b:23:2c:6c:
cd:88:8f:a5:8d:a2:10:1c:18:c1:76:60:e5:ef:5b:
8a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3D:19:C9:31:19:B1:A7:E7:88:8B:2E:35:29:DE:07:EE:84:63:D3
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/NT0ZyTEZsafniIsuNSneB-6EY9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.118.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:04:29:a2:72:a6:85:b7:c2:9e:39:f1:00:c2:2d:c9:55:b0:
2a:0c:2a:33:23:ea:a3:a4:2d:b2:b9:cf:29:f5:27:8a:c7:f8:
50:2d:2f:a5:a9:de:c6:f1:92:a5:48:88:21:88:6d:b9:6a:1e:
42:1a:0d:76:df:4d:ec:db:9d:c5:1c:ba:28:70:16:e3:f6:56:
6e:7f:76:02:51:e4:0e:78:6c:e5:c8:cb:82:f2:d9:68:3c:aa:
53:c1:6f:48:1f:45:7b:f2:13:da:2b:69:b5:58:e4:b3:a0:34:
09:67:16:98:19:71:ee:c6:e1:c3:a8:e4:c7:b4:e3:ef:2b:58:
9c:61:9a:57:73:fd:60:17:d0:4a:12:6a:be:7d:b2:e0:58:fe:
4b:76:bd:57:75:97:df:f6:70:8d:5a:97:c5:01:00:60:a3:02:
74:ed:10:00:b6:a0:73:11:ad:51:a6:99:c7:e2:d7:49:ca:57:
8a:3b:00:7f:08:41:85:94:3f:92:3d:c1:a9:11:ee:68:ed:ca:
aa:1b:d3:61:98:96:d5:4d:6d:0b:7f:97:70:7e:aa:8a:7e:0b:
08:94:ff:bb:b4:d2:70:12:bb:b4:25:5e:d0:c3:ae:35:b9:ee:
80:49:ac:b4:99:92:61:97:26:14:6f:42:d7:9e:46:28:20:c0:
65:a7:bd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 13:47:03 2024 by rpki-client on console-ams.rpki-client.org