Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/NxmHPXetjPtwbJ7gP2extOj_66o.roa
File: NxmHPXetjPtwbJ7gP2extOj_66o.roa (raw, json)
Hash identifier: WnBGpF/uSe2uGhrZ3zSR3eXxIoStNmsx3fhzYROcFik=
Subject key identifier: 37:19:87:3D:77:AD:8C:FB:70:6C:9E:E0:3F:67:B1:B4:E8:FF:EB:AA
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018F3EE6B0AB51768CAB7B1F57F592A67432
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/NxmHPXetjPtwbJ7gP2extOj_66o.roa
Signing time: Fri 03 May 2024 14:40:56 +0000
ROA not before: Fri 03 May 2024 14:40:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202010
IP address blocks: 5.1.81.0/24 maxlen: 32
5.1.81.139/32 maxlen: 32
5.1.81.140/32 maxlen: 32
178.251.228.0/24 maxlen: 32
2a01:367:beef::/48 maxlen: 48
2a01:367:dead::/48 maxlen: 48
2a01:367:ffa1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3e:e6:b0:ab:51:76:8c:ab:7b:1f:57:f5:92:a6:74:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: May 3 14:40:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3719873d77ad8cfb706c9ee03f67b1b4e8ffebaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:99:2f:1c:9b:ac:43:0a:a9:8f:6d:58:5e:
3d:bd:aa:82:38:e8:8d:78:c6:cb:9c:f7:ac:1a:49:
d9:9d:2f:9b:6b:ba:70:06:13:01:65:5b:4b:d1:06:
86:41:62:a3:76:19:d2:4b:14:c4:0c:95:b8:c7:54:
4f:59:5e:9c:fe:0d:d5:7c:3d:d4:b4:e8:4f:a8:dd:
8b:d1:06:12:a5:de:68:f8:7a:2c:2b:d9:6e:f1:97:
35:72:fb:81:7b:8b:c3:24:42:5d:7c:93:31:35:37:
15:2f:5e:07:61:5c:07:a9:49:1a:3f:f9:20:c4:7b:
cf:56:b0:b8:fa:5b:2c:7c:94:73:25:c8:7d:a3:70:
d1:e5:50:db:89:9b:fb:9e:ff:f5:3b:2a:34:f2:02:
fc:21:94:dc:92:b4:24:54:0a:2d:df:f5:9a:67:60:
4d:93:5a:97:72:47:be:51:7a:3b:3a:82:23:18:5f:
3d:d6:ff:45:72:84:32:ec:bd:89:6e:6d:0e:aa:19:
d0:8e:8c:c4:26:1f:49:d3:17:45:d1:09:59:7d:9d:
b8:7b:f6:1e:1e:b0:1a:f6:ac:8c:39:63:2a:bb:c1:
47:f5:67:fa:ef:c4:ed:c2:11:12:33:54:b2:c8:0c:
b4:c5:bc:24:5f:97:5b:46:97:2f:ef:6d:fe:69:36:
12:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:19:87:3D:77:AD:8C:FB:70:6C:9E:E0:3F:67:B1:B4:E8:FF:EB:AA
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/NxmHPXetjPtwbJ7gP2extOj_66o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.81.0/24
178.251.228.0/24
IPv6:
2a01:367:beef::/48
2a01:367:dead::/48
2a01:367:ffa1::/48
Signature Algorithm: sha256WithRSAEncryption
42:1d:39:7d:51:c2:4b:1d:59:92:65:0b:aa:d7:36:67:60:fa:
ce:62:66:92:67:c3:ec:4a:b5:10:e8:85:30:47:44:56:26:61:
2f:3e:ea:0b:14:12:0d:59:65:c0:e1:69:89:b7:c1:38:4a:13:
31:af:8c:36:73:e5:f2:01:01:ba:f3:3c:70:ae:ab:a7:82:5e:
e6:28:93:e6:a2:d4:3c:ad:00:d9:a5:b5:70:65:52:dc:71:d5:
5c:cf:a9:33:32:5d:f7:40:ef:70:c8:41:ae:3e:c5:be:28:a1:
89:83:7d:cb:0e:a4:72:67:be:86:00:42:0b:14:7c:a9:e5:ba:
53:2c:5b:82:4f:a6:6b:0b:8e:a4:31:bd:02:cd:1c:39:27:d8:
27:23:99:a4:e7:44:5f:50:94:1b:1f:2e:f0:e3:d1:32:ef:ed:
51:a3:95:b9:f6:cd:cd:b7:85:d6:32:7e:a2:37:e5:16:cb:2f:
3d:ed:1c:89:eb:88:e8:ef:65:e7:4c:c3:02:48:96:59:77:9c:
83:8b:25:6c:61:6a:c8:22:3d:20:f9:df:68:ca:d4:b4:c0:07:
9a:66:49:15:8d:d5:91:33:a7:43:aa:68:5c:e6:06:c9:e3:4d:
84:81:e7:a3:b3:84:9c:f5:c1:c8:80:38:19:de:04:47:4c:dd:
b4:48:2a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 13:20:27 2024 by rpki-client on console-ams.rpki-client.org