Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/NnmX4o-EDoPjeZTewq0q1c5Ttng.roa
File: NnmX4o-EDoPjeZTewq0q1c5Ttng.roa (raw, json)
Hash identifier: AOklZLeXK0QQh5fQOy+2GnMhi+GlqQ6ztLvHSGMsVjk=
Subject key identifier: 36:79:97:E2:8F:84:0E:83:E3:79:94:DE:C2:AD:2A:D5:CE:53:B6:78
Certificate issuer: /CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Certificate serial: 018CC2DB568EB2A1FC0B7770A822B88CD7E2
Authority key identifier: 7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/NnmX4o-EDoPjeZTewq0q1c5Ttng.roa
Signing time: Mon 01 Jan 2024 02:30:03 +0000
ROA not before: Mon 01 Jan 2024 02:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201966
IP address blocks: 185.92.219.0/24 maxlen: 24
185.92.218.0/24 maxlen: 24
185.92.217.0/24 maxlen: 24
185.92.216.0/24 maxlen: 24
94.229.84.0/23 maxlen: 23
94.229.83.0/24 maxlen: 24
2a05:2c7:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:56:8e:b2:a1:fc:0b:77:70:a8:22:b8:8c:d7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Validity
Not Before: Jan 1 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=367997e28f840e83e37994dec2ad2ad5ce53b678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:37:92:da:aa:8b:9b:a4:de:22:be:9b:4f:a2:
02:d7:9b:5e:44:06:2b:bf:8a:68:45:87:22:e8:4d:
dd:ac:13:9d:0d:b4:19:07:67:a9:8a:a6:f2:4d:12:
43:f8:5b:30:ea:fa:33:78:23:ab:de:77:46:28:55:
4f:b9:f9:64:ee:25:67:3e:b6:9b:0d:23:10:a9:9e:
2b:57:d8:1e:15:20:65:f2:b3:15:df:25:a2:58:8e:
bd:d7:98:61:4c:5e:98:0b:48:75:46:88:8b:69:09:
be:48:22:ac:b6:b7:99:f2:10:8b:40:3b:97:78:fc:
2f:b9:98:6d:54:5f:80:4b:c7:ca:a1:3c:16:ca:46:
c3:51:1a:e0:d8:75:3b:ea:56:6e:bb:19:b7:c1:20:
e0:ef:29:6d:1f:dc:57:b7:a7:46:c8:14:0f:ce:11:
c7:1c:ba:11:dd:51:5a:1d:9b:7f:3c:14:a0:5e:15:
2f:34:3c:73:28:90:9a:83:55:8e:2a:29:64:28:cf:
de:32:00:58:16:34:30:f7:ff:db:8c:e8:56:e0:34:
09:5d:8e:aa:75:59:8b:47:3f:f9:89:55:ce:46:4e:
16:f2:61:ec:96:1c:5a:a1:73:13:b5:63:e9:c3:61:
8c:e0:c4:e4:2f:08:12:6a:ca:9d:87:56:73:2e:12:
2b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:79:97:E2:8F:84:0E:83:E3:79:94:DE:C2:AD:2A:D5:CE:53:B6:78
X509v3 Authority Key Identifier:
keyid:7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/NnmX4o-EDoPjeZTewq0q1c5Ttng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.83.0-94.229.85.255
185.92.216.0/22
IPv6:
2a05:2c7:c000::/34
Signature Algorithm: sha256WithRSAEncryption
80:5f:70:36:8a:1f:97:e4:13:cb:ca:47:ea:54:78:5d:eb:b1:
2d:2e:cb:ae:6b:ff:c0:6d:9a:72:7c:8b:db:dc:9a:3a:1b:37:
70:dc:88:32:c4:88:95:97:9c:0f:e8:89:5d:eb:5b:0a:d9:af:
12:84:4e:e7:9b:9d:35:17:67:a6:a7:22:ac:89:4d:4b:55:05:
c3:7b:1a:e5:a5:ab:e7:fb:b2:8e:4f:92:7c:b6:83:36:7e:1b:
85:14:43:21:19:fa:56:df:a7:6d:58:32:c7:8c:a5:49:4e:60:
41:6e:a0:9d:23:38:d8:93:f2:26:b7:5c:ff:19:84:82:61:57:
0e:6e:44:c2:cd:d4:d1:e0:44:39:26:9a:94:0f:cb:82:92:45:
d4:de:88:c8:c3:88:bc:dc:cb:22:51:b3:ad:d9:00:b5:80:63:
bf:90:a8:0b:89:ec:45:13:b4:0f:56:c7:e5:6a:10:cf:bf:a2:
51:66:6d:6b:c6:6d:64:40:f0:fb:2b:69:59:08:94:2d:2d:f9:
9a:8c:9c:0e:d0:09:fc:4d:d8:e3:19:45:7c:c5:f4:49:d2:2d:
fd:7a:99:e4:7e:a8:af:fa:55:27:4b:6c:5e:4b:53:6d:fa:51:
60:f3:e0:25:83:6b:f5:a2:12:e9:b4:ad:06:e1:5e:6e:86:8b:
dd:62:67:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:46:42 2024 by rpki-client on console-fra.rpki-client.org