Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/nPrwZWrzzVwkxV45w_AsBiayM48.roa
File: nPrwZWrzzVwkxV45w_AsBiayM48.roa (raw, json)
Hash identifier: OQ5+dIAjZFivff7vrs2+BRasFBFn01Rz3c4095XQKJc=
Subject key identifier: 9C:FA:F0:65:6A:F3:CD:5C:24:C5:5E:39:C3:F0:2C:06:26:B2:33:8F
Certificate issuer: /CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Certificate serial: 018CC7936E372779AF53F301E9C7B0F8EBEA
Authority key identifier: 96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/nPrwZWrzzVwkxV45w_AsBiayM48.roa
Signing time: Tue 02 Jan 2024 00:29:37 +0000
ROA not before: Tue 02 Jan 2024 00:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59885
IP address blocks: 185.152.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:6e:37:27:79:af:53:f3:01:e9:c7:b0:f8:eb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Validity
Not Before: Jan 2 00:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9cfaf0656af3cd5c24c55e39c3f02c0626b2338f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:16:e5:49:2d:25:44:7e:eb:97:bd:ad:65:ab:
4f:6b:02:41:68:12:c5:14:59:73:77:d6:92:a1:db:
0f:db:1c:3f:ef:6f:6b:f9:16:de:ff:20:2a:1b:96:
4e:a8:44:4e:5e:77:87:bc:af:2a:40:b7:51:70:39:
75:37:16:b9:0b:d7:e2:57:67:ae:1f:9b:8c:80:12:
f8:03:f5:23:f2:b7:49:03:30:a1:e8:52:de:5f:59:
51:65:15:83:0f:ac:4c:e9:13:c0:41:af:d2:f2:3c:
8f:9f:80:60:92:eb:e6:2a:d1:bc:32:a5:4a:fb:16:
02:47:fc:ae:5d:67:df:0a:fc:85:48:82:ff:96:c5:
8c:78:a4:92:4e:db:cc:f4:f4:f2:2f:da:15:ab:5d:
90:40:3a:7c:63:3c:1c:52:3a:5e:b6:dc:6c:42:64:
f5:4d:da:40:75:e8:ea:46:2d:e5:59:b5:57:d6:09:
20:e3:a0:c5:71:12:94:46:9e:06:3c:6e:c5:5b:2c:
46:d1:4c:94:c1:3c:e9:95:55:57:b5:55:e6:df:aa:
83:56:40:84:85:05:26:c1:35:b8:5c:b2:61:3b:94:
2b:91:79:24:6c:fe:4c:c3:d5:af:b4:1f:54:23:c4:
a5:8d:09:60:61:2e:2e:2c:68:f2:53:b5:56:e8:08:
18:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FA:F0:65:6A:F3:CD:5C:24:C5:5E:39:C3:F0:2C:06:26:B2:33:8F
X509v3 Authority Key Identifier:
keyid:96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/nPrwZWrzzVwkxV45w_AsBiayM48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.111.0/24
Signature Algorithm: sha256WithRSAEncryption
63:ef:3d:80:6b:b2:67:50:e1:3a:ef:5a:f6:85:06:52:da:42:
98:8c:a6:25:11:d7:8e:7b:d2:50:81:0d:6c:83:04:43:4d:07:
6e:cc:3d:f5:16:51:48:0e:fb:da:cd:cd:d4:5a:8c:e7:a7:82:
5f:26:fc:c7:de:3a:bb:f8:9d:49:d8:0a:ef:08:9a:0c:f8:1a:
d2:e9:41:c1:ef:05:a9:c9:c5:ec:db:10:e3:e9:d4:6d:d2:3c:
cc:a8:be:a1:f0:9c:b1:0f:98:96:15:e0:b8:60:5b:16:88:c8:
5d:c9:79:fa:24:4f:41:88:95:42:b5:60:79:d0:72:6a:37:4b:
58:61:24:30:90:f4:9f:44:e7:d4:3f:cb:c4:2a:7b:3d:79:07:
e9:01:64:88:51:90:d4:9b:66:5b:33:c8:e0:3c:36:05:2b:2f:
c3:5c:be:86:ec:fc:38:20:79:8c:dd:19:b1:0a:b3:16:a8:69:
d5:6f:1a:44:a9:44:d1:a4:8c:66:71:b1:20:70:de:19:08:ea:
10:3f:73:30:23:53:ca:88:b1:55:35:ad:07:fe:60:c7:bb:e1:
91:3c:36:52:5b:00:d5:cc:af:6e:db:07:92:26:83:14:12:b5:
4a:61:36:c9:54:71:3b:60:7e:ba:3c:ac:73:f8:1c:56:4b:44:
c9:88:cd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:49:09 2024 by rpki-client on console-fra.rpki-client.org