Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/Nd9FoQoa_BFWo4D3oo9d9hNuPB8.roa
File: Nd9FoQoa_BFWo4D3oo9d9hNuPB8.roa (raw, json)
Hash identifier: uHYUPwkRyNcJa2ElhY5FoQcJVNdwxKnOGZg9veN191Y=
Subject key identifier: 35:DF:45:A1:0A:1A:FC:11:56:A3:80:F7:A2:8F:5D:F6:13:6E:3C:1F
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 018DEF796C9E335FECA6B6AF21FDFEEE1211
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/Nd9FoQoa_BFWo4D3oo9d9hNuPB8.roa
Signing time: Wed 28 Feb 2024 11:28:48 +0000
ROA not before: Wed 28 Feb 2024 11:28:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21500
IP address blocks: 195.123.177.0/24 maxlen: 24
195.123.184.0/24 maxlen: 24
195.123.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ef:79:6c:9e:33:5f:ec:a6:b6:af:21:fd:fe:ee:12:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Feb 28 11:28:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35df45a10a1afc1156a380f7a28f5df6136e3c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:68:c9:96:d1:d5:88:44:4a:5d:c2:26:b4:46:
31:22:40:63:bb:4c:64:3f:a1:bb:2c:2d:0b:44:4f:
06:a8:97:db:82:eb:9d:bb:f1:db:f6:54:12:cd:ca:
70:7d:f1:8e:bb:14:38:a7:4c:0d:0c:78:84:9d:f1:
75:23:3a:80:d0:7f:3a:3f:23:e3:11:00:15:55:d1:
a5:91:f5:3f:d7:13:c2:a8:7b:e0:47:8a:f6:fd:8d:
ea:bb:e2:1b:4b:f3:8b:99:64:e6:c9:6a:b4:eb:e9:
45:af:89:37:d1:23:8b:fa:6e:60:3c:a6:03:20:aa:
26:c8:54:d4:5d:61:a7:c5:d6:ba:90:71:16:d4:ae:
42:a3:2c:97:26:97:08:f2:fd:28:a7:18:ec:02:a6:
54:8b:d8:7c:f8:4a:bf:b3:bb:1d:a1:ee:fe:12:35:
38:d1:77:1e:b1:34:55:7b:b2:d4:11:8a:88:24:a7:
3c:b8:ea:23:f5:c2:6f:12:56:4a:0e:a0:b5:48:81:
e2:c5:6e:b5:b6:88:a0:68:11:d1:a6:81:88:34:1a:
9e:e8:72:0c:ab:47:07:0a:3d:2e:86:55:65:01:24:
54:d9:ca:4b:c5:b4:2b:6d:d0:6b:e0:25:ca:6d:14:
8d:e7:b3:2d:1b:00:52:51:27:dc:c8:99:22:ee:08:
e3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DF:45:A1:0A:1A:FC:11:56:A3:80:F7:A2:8F:5D:F6:13:6E:3C:1F
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/Nd9FoQoa_BFWo4D3oo9d9hNuPB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.123.177.0/24
195.123.184.0/23
Signature Algorithm: sha256WithRSAEncryption
60:39:b6:41:34:8b:17:15:1b:e7:8e:57:cc:0a:5f:bd:5f:b5:
12:27:45:56:89:7c:45:41:cc:bb:f8:65:f8:58:0a:fd:c9:da:
cc:81:57:90:ba:c5:5b:fd:ba:c9:d0:30:5c:8c:ed:92:13:53:
16:d6:af:a3:df:8f:4e:c8:fb:22:75:44:96:22:c8:2a:7a:51:
82:96:75:2f:40:56:7d:26:de:c2:18:bc:11:06:a1:61:f2:0e:
73:dd:e8:41:8c:cd:61:3d:fb:f5:7f:58:58:6c:15:6a:c2:32:
27:4c:2d:6e:b0:23:1b:77:42:48:64:57:8c:87:88:d3:2c:41:
9b:62:1d:a7:59:44:63:4f:72:48:3a:3c:09:c3:64:a1:31:0a:
74:35:59:ce:ca:69:16:c7:2d:9a:bd:7b:b8:a9:0b:8c:54:98:
33:4b:8d:20:be:ee:fe:6b:50:9d:08:ac:98:54:04:b4:e0:51:
ec:87:15:03:2a:a9:74:e2:ab:d4:a0:ba:75:e5:a9:70:9d:c0:
0f:dd:21:7f:de:6c:02:d3:f3:a8:7a:53:ba:65:45:87:2a:13:
e3:81:7b:69:48:0f:da:b5:b5:80:92:bf:28:1c:06:17:82:b9:
1b:da:1b:88:a9:38:36:ee:89:7f:3e:e4:6a:00:4d:2b:f0:dd:
4c:ea:bb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:21:12 2024 by rpki-client on console-ams.rpki-client.org