Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/nvGeOxwynUCZLOGEdyyvB9oinoA.roa
File: nvGeOxwynUCZLOGEdyyvB9oinoA.roa (raw, json)
Hash identifier: mpkKc0dKd3LorLj9mkkjtZ3YbGLbJF8TGTXmQ9e7wsk=
Subject key identifier: 9E:F1:9E:3B:1C:32:9D:40:99:2C:E1:84:77:2C:AF:07:DA:22:9E:80
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 019230336B63DFE3FB292CD2907866E5CF70
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/nvGeOxwynUCZLOGEdyyvB9oinoA.roa
Signing time: Thu 26 Sep 2024 21:18:49 +0000
ROA not before: Thu 26 Sep 2024 21:18:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137409
IP address blocks: 212.81.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 Nov 2024 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:30:33:6b:63:df:e3:fb:29:2c:d2:90:78:66:e5:cf:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Sep 26 21:18:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ef19e3b1c329d40992ce184772caf07da229e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:31:77:94:f7:4f:93:ab:b6:12:45:2b:73:dc:
a5:16:80:05:00:e8:cb:45:7a:fb:3b:7a:5b:18:be:
e2:cd:50:07:0f:25:65:e0:c9:e3:8e:da:23:d1:ee:
42:af:4d:b2:be:84:e6:e0:b2:ce:e6:4c:27:8e:f4:
d3:46:d2:16:fe:3f:8c:3a:49:0c:64:8d:09:28:ff:
cf:f2:c5:45:86:12:96:93:de:b2:90:f6:92:c9:99:
d9:c7:a5:83:31:b8:d3:66:76:12:2b:4a:1d:a3:82:
d8:9d:bd:70:a2:55:c1:ca:b8:4f:ee:3b:19:af:98:
4b:da:b4:8c:d4:48:7e:47:7b:4f:25:a4:ef:6b:71:
40:b4:ed:63:7d:13:b5:05:88:c7:d0:4c:b7:0f:35:
30:7d:e6:a9:5e:79:2d:0c:f7:2f:be:cc:6a:d8:86:
43:74:98:47:df:37:c4:d4:c0:b8:f8:51:35:31:54:
8f:45:ef:37:03:af:42:53:86:3e:b6:0d:d1:2f:01:
b9:85:e0:5c:44:46:d7:63:16:d3:63:20:e7:4c:9c:
9c:e5:29:1e:91:7f:26:6e:49:e0:11:ee:66:a2:57:
7d:0e:68:86:11:e1:a6:a2:37:27:7d:e4:2c:fc:dd:
80:15:b4:60:c6:75:41:6b:cc:7d:35:9f:d7:3d:46:
f8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F1:9E:3B:1C:32:9D:40:99:2C:E1:84:77:2C:AF:07:DA:22:9E:80
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/nvGeOxwynUCZLOGEdyyvB9oinoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.81.46.0/24
Signature Algorithm: sha256WithRSAEncryption
33:43:d3:a5:8c:30:ce:69:74:39:16:26:28:9c:59:fd:a4:c4:
3a:e5:2b:c6:ca:76:59:5a:6c:d1:c5:21:9a:5d:67:57:98:d1:
1c:49:ea:5b:62:74:a5:92:3e:77:3f:01:78:81:74:8d:6e:30:
6b:d7:1b:96:51:89:45:d3:09:f5:4c:72:7d:01:10:c4:a2:6d:
db:f5:fe:f5:e1:22:c9:6c:10:ae:56:82:a5:b5:31:da:07:c5:
12:95:71:66:84:b2:8a:9a:c5:cd:e8:6e:8b:83:55:bc:32:db:
6d:31:53:c0:2a:24:8c:43:4f:9a:2e:7d:60:35:ac:e0:c9:60:
67:26:df:bc:41:7e:0c:19:82:ac:69:03:c7:10:cb:a0:d1:9c:
51:7d:3f:68:a2:43:16:b5:1d:c3:84:a5:d6:c7:31:23:a6:b1:
d7:64:62:e4:a4:3d:59:b1:c0:c6:19:20:44:dc:a6:c1:8c:d3:
6c:b6:17:32:fb:e2:1a:36:d9:94:4c:d2:cf:75:c0:15:69:94:
46:8c:9e:27:52:44:7c:cd:0d:fb:1d:d4:76:78:76:28:c2:b8:
42:6c:dc:e4:9c:bf:66:0c:ad:10:13:70:79:bc:27:28:2f:76:
22:92:75:00:11:99:d7:df:e8:4e:4e:52:5e:cc:c7:d1:61:d2:
12:f2:bb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 01:34:40 2024 by rpki-client on console-ams.rpki-client.org