Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/n0nH0CnvCque6p_OunKGRR62hwA.roa
File: n0nH0CnvCque6p_OunKGRR62hwA.roa (raw, json)
Hash identifier: 92B6K/VhF3wuND5Jcd98pKpeXaZtdtud2dIJu77ZLS0=
Subject key identifier: 9F:49:C7:D0:29:EF:0A:AB:9E:EA:9F:CE:BA:72:86:45:1E:B6:87:00
Certificate issuer: /CN=e992a035bffc5a41412c497c1285d1838234ffb0
Certificate serial: 018CC26CFD8E5E4B45D104770E011BFF471E
Authority key identifier: E9:92:A0:35:BF:FC:5A:41:41:2C:49:7C:12:85:D1:83:82:34:FF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/n0nH0CnvCque6p_OunKGRR62hwA.roa
Signing time: Mon 01 Jan 2024 00:29:31 +0000
ROA not before: Mon 01 Jan 2024 00:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15830
IP address blocks: 217.114.96.0/20 maxlen: 24
185.76.16.0/22 maxlen: 24
77.222.64.0/19 maxlen: 24
87.249.96.0/19 maxlen: 24
2001:1540::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:fd:8e:5e:4b:45:d1:04:77:0e:01:1b:ff:47:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e992a035bffc5a41412c497c1285d1838234ffb0
Validity
Not Before: Jan 1 00:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f49c7d029ef0aab9eea9fceba7286451eb68700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:04:52:c8:c7:29:35:93:da:cc:f8:25:37:83:
66:49:bc:4a:fe:77:a2:1b:27:b6:f9:37:3e:94:5b:
5c:46:3d:14:f9:a0:d7:bc:5e:e2:c0:70:aa:38:06:
9c:79:50:06:2a:b6:7b:05:6e:26:40:ca:1d:41:04:
57:96:52:bd:37:5e:23:6b:0b:9a:b7:65:55:ed:89:
6d:03:90:29:36:4e:67:44:ba:40:8d:67:32:44:9e:
56:ed:2f:d2:f0:18:46:22:00:6f:60:f1:2d:07:05:
4b:26:0c:93:3e:89:95:b5:21:a0:fc:c0:72:e8:bc:
a5:c0:65:25:37:b9:22:64:0d:d5:06:f8:77:89:bf:
44:f6:1e:ba:d9:8e:fc:2d:c2:2e:76:ff:02:21:96:
f3:ec:b2:57:eb:d3:54:c6:0f:33:c2:45:f7:0b:a5:
09:20:af:0d:30:52:c6:7b:46:b1:d6:69:f4:3c:96:
5c:5d:4c:11:0e:68:27:3e:38:a4:2d:7e:d1:f1:4d:
df:31:bf:cd:ad:34:d8:f0:e0:de:46:92:5d:cc:04:
a5:a4:20:49:a8:f4:7e:21:63:a0:ce:35:55:38:bf:
d9:ff:69:c0:8d:15:a8:d8:eb:7b:47:66:10:5d:8d:
be:ee:97:92:ec:01:bf:9f:2e:6f:17:d4:51:a6:17:
25:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:49:C7:D0:29:EF:0A:AB:9E:EA:9F:CE:BA:72:86:45:1E:B6:87:00
X509v3 Authority Key Identifier:
keyid:E9:92:A0:35:BF:FC:5A:41:41:2C:49:7C:12:85:D1:83:82:34:FF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/n0nH0CnvCque6p_OunKGRR62hwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.222.64.0/19
87.249.96.0/19
185.76.16.0/22
217.114.96.0/20
IPv6:
2001:1540::/32
Signature Algorithm: sha256WithRSAEncryption
7f:98:a2:08:f9:a5:de:f4:6c:65:b7:55:57:71:fb:c4:9c:84:
d3:27:d4:90:9c:57:69:35:00:d5:87:52:62:ee:b1:71:ae:ba:
4b:68:41:83:6f:20:c9:3e:2f:35:70:37:9b:b9:38:13:d2:88:
c4:ee:cc:b0:c8:b4:a6:e6:9a:a3:71:f3:04:e9:4f:3c:b9:c3:
b4:86:a7:2c:94:75:ec:72:08:ca:de:12:1c:c7:d5:62:a2:c2:
11:40:4f:86:94:61:00:ba:2d:02:89:07:57:e7:20:56:3d:2b:
bd:f8:e2:bd:2b:d4:e9:4c:9e:c7:f7:c9:1b:4a:66:a8:bf:75:
ff:64:00:2c:dd:2c:02:fd:bc:0b:f7:bf:ec:29:ce:13:9d:32:
23:2a:ff:d8:eb:bb:f8:6f:4c:2c:cb:98:0e:b6:b0:1b:16:a3:
36:bd:c1:bf:e5:62:75:30:9c:e3:60:03:ec:09:f3:68:59:d5:
6a:5c:82:fd:1e:13:45:3e:3d:64:0b:cd:86:45:4e:98:1f:ad:
4e:57:8e:10:53:c2:ad:aa:fd:8e:38:02:94:6b:42:89:9d:0b:
7c:28:6c:fd:08:27:85:4e:9d:6a:78:5e:52:00:c5:4d:84:50:
46:72:62:ce:bf:cf:9b:33:23:5b:f2:03:b4:da:48:63:aa:87:
b7:0d:9e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:36:38 2024 by rpki-client on console-fra.rpki-client.org