Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/nhiLvNoCrdxPYdgQdMwqqFFPymg.roa
File: nhiLvNoCrdxPYdgQdMwqqFFPymg.roa (raw, json)
Hash identifier: DyJ1L2ZxkGBFAB+vW5O0U1YNYRMRpaLmr++gulUZfbE=
Subject key identifier: 9E:18:8B:BC:DA:02:AD:DC:4F:61:D8:10:74:CC:2A:A8:51:4F:CA:68
Certificate issuer: /CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a
Certificate serial: 01928F1575998BF10A3443322541E89F53FA
Authority key identifier: 04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/nhiLvNoCrdxPYdgQdMwqqFFPymg.roa
Signing time: Tue 15 Oct 2024 07:30:01 +0000
ROA not before: Tue 15 Oct 2024 07:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58282
IP address blocks: 91.208.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8f:15:75:99:8b:f1:0a:34:43:32:25:41:e8:9f:53:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a
Validity
Not Before: Oct 15 07:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e188bbcda02addc4f61d81074cc2aa8514fca68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2d:7e:9d:cf:67:fa:8a:dc:47:64:14:e3:69:
9c:2a:ad:a2:f2:34:11:d8:f0:f2:46:66:5a:56:36:
96:ae:30:98:27:80:7b:5c:b4:bc:c9:ee:40:a7:28:
94:8e:4f:97:76:48:0b:9d:02:2e:bb:8d:15:ea:3a:
23:2c:96:6f:88:eb:2e:d9:ed:50:ef:a0:6f:bb:ae:
26:57:90:80:c6:3d:94:01:16:c4:a9:06:89:87:53:
53:89:73:c4:eb:a0:bf:d1:8f:4c:bf:6c:4c:4d:34:
4e:c5:90:a8:30:38:9e:46:a1:04:f7:d9:98:2e:a6:
63:3c:50:ac:d0:a9:bc:6c:d0:92:93:21:ac:09:f9:
02:6b:22:af:0a:77:9b:ee:c0:5f:b5:85:5c:ba:e4:
27:a3:9e:fd:ce:f2:1a:d5:8d:70:6c:77:ce:63:81:
71:c8:7c:3b:3d:f3:60:5d:bb:d7:1d:52:b7:6e:74:
c3:42:97:42:24:0b:d5:23:c4:da:79:34:9d:6d:c2:
9b:2c:a8:89:d6:e1:93:1c:ce:bd:3b:ed:b7:8a:c0:
11:2e:86:a3:f0:a4:07:b0:d5:d3:37:48:14:09:5c:
56:81:b5:d2:05:c0:69:e1:5a:16:4c:c2:80:46:14:
9c:ba:6a:72:c8:7f:22:f6:0a:8c:f0:b5:26:0d:ff:
81:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:18:8B:BC:DA:02:AD:DC:4F:61:D8:10:74:CC:2A:A8:51:4F:CA:68
X509v3 Authority Key Identifier:
keyid:04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/nhiLvNoCrdxPYdgQdMwqqFFPymg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.157.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:49:40:e3:93:81:cf:fd:79:f5:da:76:d5:e9:93:19:8e:93:
64:0f:9f:24:98:b3:23:05:cf:cf:8b:34:ff:27:a6:22:38:12:
39:7d:b5:a0:81:d1:ac:1e:d0:18:a9:36:88:a7:48:38:47:a1:
a2:7d:22:35:78:2d:cd:7f:98:0e:bd:32:63:62:4d:6f:8e:88:
fa:1e:b8:5c:a6:39:4d:6e:74:48:bb:f2:01:1d:6f:90:76:bd:
89:5b:43:41:5b:95:a1:a1:59:de:59:ea:c5:17:8a:53:ac:2f:
36:4f:0a:50:a6:59:cd:5b:1a:04:23:69:1b:66:a8:dd:58:a6:
30:7a:9d:a2:72:99:35:31:ee:ed:d4:91:f5:2b:7b:b0:2d:f7:
1d:ba:32:57:2f:b8:50:b8:4b:2f:87:2d:cb:9e:96:68:01:6a:
b8:ed:27:e5:6f:7f:ec:08:23:55:18:84:b6:4b:b9:05:aa:3d:
7f:7c:9c:eb:d9:22:06:14:17:73:8a:50:85:e5:b8:23:ff:63:
84:dd:0e:07:89:61:03:c6:11:3d:9e:e8:67:9e:b4:42:ae:03:
48:30:14:dd:79:19:ef:94:b6:5b:b8:a8:04:58:68:dc:a9:61:
09:89:59:ab:2f:56:1e:4d:3d:fb:1d:20:df:1a:a0:a3:ab:44:
1d:45:f1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:36:38 2024 by rpki-client on console-ams.rpki-client.org