Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/nNYcQlMCMXzqbBlUvZBdHls2HLA.roa
File: nNYcQlMCMXzqbBlUvZBdHls2HLA.roa (raw, json)
Hash identifier: tsIGipOEP1nCWwzuUWRIpW1Xkxl35xSMy3HcWJld7Cs=
Subject key identifier: 9C:D6:1C:42:53:02:31:7C:EA:6C:19:54:BD:90:5D:1E:5B:36:1C:B0
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018CCA2B56B81D01FCD5B8ECCDDCA0D567FE
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/nNYcQlMCMXzqbBlUvZBdHls2HLA.roa
Signing time: Tue 02 Jan 2024 12:34:47 +0000
ROA not before: Tue 02 Jan 2024 12:34:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50673
IP address blocks: 185.172.167.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:56:b8:1d:01:fc:d5:b8:ec:cd:dc:a0:d5:67:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 2 12:34:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9cd61c425302317cea6c1954bd905d1e5b361cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8d:cd:b8:29:8d:df:0e:2f:79:c7:4b:a1:22:
da:e7:c9:87:bf:f5:a7:8d:ed:f0:f3:cd:dc:d5:c3:
45:60:df:96:c3:97:6b:ea:a1:cc:54:85:75:73:65:
0e:93:8c:8e:3b:a8:8e:89:1c:8c:73:d9:6f:e2:6b:
91:50:42:61:1a:0d:2f:e9:75:e7:7a:2e:7c:a1:85:
a7:b4:a2:f8:42:6e:9c:cd:0b:f7:fb:d6:1a:aa:17:
04:e7:19:77:0c:fd:84:45:be:28:3d:bc:2a:ce:bc:
18:0a:f7:4a:eb:55:99:30:6e:5b:dd:e8:d8:2f:a8:
9d:76:03:8b:e8:d8:27:4d:bd:22:33:c1:ce:90:f0:
c6:01:f4:9a:a1:84:39:29:af:68:6b:14:ae:da:37:
2b:07:3b:86:d9:b9:cb:34:33:30:df:71:ee:f6:1f:
c2:cd:56:e5:b3:20:ed:cb:e4:02:54:ca:34:6d:94:
1b:d1:3e:e2:47:fe:7e:69:bf:3b:b2:38:3c:b4:2f:
54:6d:13:99:2e:76:b4:73:a0:df:3b:16:9a:db:40:
f1:36:11:55:94:20:a5:97:3b:f6:f3:2a:25:1f:96:
5d:fa:2c:9a:8c:4d:c6:ad:6c:98:46:ec:e8:4b:26:
76:d1:32:fc:61:8e:85:33:03:a4:e7:d2:ee:77:93:
3d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D6:1C:42:53:02:31:7C:EA:6C:19:54:BD:90:5D:1E:5B:36:1C:B0
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/nNYcQlMCMXzqbBlUvZBdHls2HLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.167.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:48:cf:9a:3b:19:4c:0a:5f:cc:7c:17:92:de:b0:63:c8:7f:
d6:a0:33:1a:ad:a3:36:34:a0:63:02:48:ce:1a:c5:4b:25:b1:
4d:21:f6:7b:76:09:31:9d:ab:46:d4:cc:bb:45:2d:f9:ca:3c:
c7:c0:a6:1b:26:e1:1e:47:ba:69:20:7b:48:89:fb:dd:40:71:
da:71:72:95:37:ef:d5:53:db:2e:ad:cb:cb:3e:54:9c:43:b7:
dc:e9:a5:79:c8:68:82:8a:f7:93:83:03:2f:cc:33:1e:e5:86:
f3:fc:1e:ec:d9:e0:6d:6e:9d:cd:55:15:2b:74:07:dd:6d:7f:
95:84:3c:9e:46:e0:b6:7f:ce:f7:82:4b:c4:61:20:22:f2:60:
9f:54:18:a3:fd:17:a8:49:43:47:58:11:67:b1:71:77:12:ec:
96:1e:6b:a8:fb:cb:b7:63:2e:b8:cb:77:7f:e9:07:8d:b6:7b:
23:7c:bc:e8:5a:ca:a2:23:70:2b:39:75:f5:36:da:f3:cc:74:
d2:a3:28:35:25:57:d2:cf:9c:07:bd:96:fb:43:38:21:e0:ac:
2e:9e:39:e5:41:f3:c0:aa:bf:c3:26:34:0b:d9:92:a8:88:0a:
80:ad:2a:00:9d:c3:ab:c0:65:50:88:5d:ac:ba:65:ab:37:7c:
4a:31:90:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 07:26:16 2024 by rpki-client on console-fra.rpki-client.org