Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/nTxxSUrkmZ9MV1LNcBi5CB1YYNU.roa
File: nTxxSUrkmZ9MV1LNcBi5CB1YYNU.roa (raw, json)
Hash identifier: 0zaozQcI1IN9aLH4x9bWGAlgQEsnBfaVDRdJygvqihI=
Subject key identifier: 9D:3C:71:49:4A:E4:99:9F:4C:57:52:CD:70:18:B9:08:1D:58:60:D5
Certificate issuer: /CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Certificate serial: 018CC493490722C2181B6080D648B923925C
Authority key identifier: 4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/nTxxSUrkmZ9MV1LNcBi5CB1YYNU.roa
Signing time: Mon 01 Jan 2024 10:30:35 +0000
ROA not before: Mon 01 Jan 2024 10:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.117.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:49:07:22:c2:18:1b:60:80:d6:48:b9:23:92:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Validity
Not Before: Jan 1 10:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d3c71494ae4999f4c5752cd7018b9081d5860d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:cd:e8:ac:2b:f9:b5:dd:10:f8:b8:c2:9d:7d:
9d:e3:7b:36:73:02:38:50:54:05:99:e0:b2:0e:d6:
d5:0e:1d:b4:c0:30:bd:83:c2:d0:8d:b2:06:76:98:
42:fd:40:a9:7a:91:8a:fa:f1:fb:9e:1b:a0:62:26:
21:02:6d:e3:95:f3:e4:e8:35:9a:18:5f:3d:fe:7f:
d6:bc:0e:0c:e3:ca:43:a3:8c:d2:53:a6:6e:1e:d8:
b9:8a:ca:40:ec:0a:33:3d:e1:05:d0:bf:88:9e:13:
a2:ea:be:1f:1d:5f:93:7a:2c:47:cd:60:eb:01:a9:
d7:7e:c4:ba:b8:ba:64:a2:c9:08:d8:2f:f5:fc:53:
0a:8c:ac:10:75:31:39:6a:31:ae:94:d5:a4:97:af:
c6:96:12:f9:47:7a:4c:72:86:99:e6:87:12:88:43:
32:c2:38:dd:2c:5f:fc:4b:8b:d0:d0:f9:9d:1a:75:
a9:23:45:85:e5:a7:f2:7b:30:8d:e7:db:a4:91:66:
e3:a1:b0:92:4d:60:f2:df:01:be:45:8b:bc:db:03:
83:15:fc:68:fc:57:99:d7:c4:50:46:10:dd:5d:91:
44:90:bc:a8:79:7c:19:00:de:83:40:5c:f8:df:0d:
d7:44:9c:0b:87:24:a0:dc:6f:f4:29:1b:1f:37:23:
96:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3C:71:49:4A:E4:99:9F:4C:57:52:CD:70:18:B9:08:1D:58:60:D5
X509v3 Authority Key Identifier:
keyid:4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/nTxxSUrkmZ9MV1LNcBi5CB1YYNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.225.0/24
Signature Algorithm: sha256WithRSAEncryption
80:c6:44:77:9d:f2:97:5a:1f:83:49:55:ea:ad:eb:b0:be:4a:
12:a9:48:6f:0f:d4:db:b9:b9:d4:71:27:7e:3c:7c:04:58:3d:
0a:75:55:f3:f4:eb:f9:76:16:40:6d:09:c0:09:aa:be:7b:60:
ab:8e:b5:26:22:6d:76:40:51:eb:c5:18:88:83:01:9b:5d:3d:
5e:32:c3:55:1f:b7:48:bb:d1:c1:79:74:b0:d3:9b:69:32:04:
9a:96:44:e4:61:dd:cc:ee:05:98:3f:7e:fe:d8:cc:20:ab:cb:
0a:b2:0d:f2:5b:c3:85:4c:6d:e8:54:90:ec:f9:7b:0e:22:19:
3b:d2:87:6a:d8:2e:c8:ca:b4:14:8a:4f:0e:b2:fc:1f:af:dc:
8a:c2:81:38:fc:28:45:c7:b2:3d:a9:35:80:7e:a5:ba:31:14:
b5:9f:c5:d9:3e:f8:5e:36:9c:86:2a:b5:87:32:3b:e0:a0:42:
55:ef:f7:1d:78:91:36:39:71:20:85:8d:7c:88:47:f2:bf:13:
0d:2d:3c:48:fd:5d:ed:d3:ec:45:91:eb:54:83:57:3c:43:6b:
59:cc:db:8d:95:24:92:00:6f:61:d1:66:95:fb:76:2f:f1:c0:
be:64:ee:a1:4f:ce:45:61:36:c5:26:20:64:53:03:a4:95:09:
40:af:b6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 09:05:55 2024 by rpki-client on console-ams.rpki-client.org