Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/NHr1Xp5Ar6_93HkTVGyR6sinkvY.roa
File: NHr1Xp5Ar6_93HkTVGyR6sinkvY.roa (raw, json)
Hash identifier: 82sWz1oTAlquyAHess5iFJmPLLjRvhrqqSCAr5qzrEc=
Subject key identifier: 34:7A:F5:5E:9E:40:AF:AF:FD:DC:79:13:54:6C:91:EA:C8:A7:92:F6
Certificate issuer: /CN=6868f656805380ca86e79173789d668dc401d5b5
Certificate serial: 018CCA28FBCF82F8FDE36532534428DA42AF
Authority key identifier: 68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/NHr1Xp5Ar6_93HkTVGyR6sinkvY.roa
Signing time: Tue 02 Jan 2024 12:32:12 +0000
ROA not before: Tue 02 Jan 2024 12:32:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49382
IP address blocks: 134.255.248.0/24 maxlen: 24
185.233.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:28:fb:cf:82:f8:fd:e3:65:32:53:44:28:da:42:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6868f656805380ca86e79173789d668dc401d5b5
Validity
Not Before: Jan 2 12:32:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=347af55e9e40afaffddc7913546c91eac8a792f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:97:17:7a:b9:90:63:51:e9:4d:a6:08:90:e9:
42:44:19:22:cb:91:39:de:eb:4c:a0:6a:8b:cf:c4:
dd:6a:7e:53:40:96:58:b4:67:cb:3e:cb:e9:89:d8:
6e:e0:8d:0d:5b:77:06:35:61:3c:04:c0:4f:b6:93:
0d:65:a2:c3:f4:41:20:26:b6:4c:d5:18:81:28:6c:
31:e8:88:82:55:63:dc:e7:0d:df:75:06:30:43:70:
af:ad:80:f1:f0:88:f6:a3:52:5a:09:de:02:f0:08:
60:a1:6e:0f:ba:be:5e:54:22:df:4a:69:1d:b5:3c:
1b:6b:01:1d:ab:ad:5d:a1:a4:3c:df:b0:2d:c7:bc:
9f:fc:3b:51:19:03:f9:25:eb:fb:dc:2c:ea:83:cd:
19:66:16:5a:bc:c9:5e:77:95:1b:55:c9:3c:90:f5:
9f:01:6e:b2:54:ea:df:b4:f3:a2:fc:16:cf:4f:4d:
17:d9:57:97:5f:ef:b3:b3:e4:b0:5c:fa:8e:a3:20:
7e:8f:3b:e1:2b:7d:87:d7:32:4c:db:b6:ba:37:d3:
bf:3e:88:98:40:16:3e:04:51:f5:73:dc:94:07:eb:
58:4d:e4:b6:50:b7:30:ac:56:f3:3c:32:8f:db:df:
4c:24:2b:48:7f:c0:22:9b:e7:4b:da:75:1b:8a:5b:
af:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7A:F5:5E:9E:40:AF:AF:FD:DC:79:13:54:6C:91:EA:C8:A7:92:F6
X509v3 Authority Key Identifier:
keyid:68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/NHr1Xp5Ar6_93HkTVGyR6sinkvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.255.248.0/24
185.233.84.0/22
Signature Algorithm: sha256WithRSAEncryption
99:dc:a6:c8:ca:f8:80:44:0d:66:3b:8a:55:16:a9:e1:f8:cf:
d7:09:b2:0a:d7:60:9d:6e:6a:5c:f2:26:2b:3a:a4:a3:4e:35:
ba:cc:a2:16:2c:0d:d4:39:f7:0d:02:2b:2b:61:7c:a5:4a:e5:
17:2f:cc:c2:6f:f3:29:61:62:b6:9a:a2:02:f2:0a:95:a9:21:
1c:8e:1c:ea:da:3c:4e:77:e9:f8:51:fa:eb:1b:67:6b:40:ed:
2a:bd:50:c1:3e:10:66:00:2c:d3:2f:8e:d0:be:b8:7b:53:1a:
8f:49:5b:a6:99:0c:ac:38:5b:64:05:03:52:75:7b:77:34:2a:
8a:e3:78:e0:07:3a:90:53:07:6a:9d:40:64:a6:5f:d0:52:87:
6b:25:b7:1f:96:78:b5:61:8a:7b:ae:0d:c1:ea:33:e4:05:34:
cd:5e:36:ce:00:60:1e:77:5d:1f:14:e8:d8:89:f6:b3:67:5c:
d8:ee:0e:6b:b0:57:a1:46:23:3b:92:7a:eb:e6:7a:5e:62:b5:
79:b0:e2:b3:fa:eb:3f:82:88:fd:c7:31:5d:b1:f7:5b:53:80:
64:e7:4c:bc:38:1c:00:63:70:eb:15:01:d4:de:75:60:5e:61:
f4:ce:36:53:06:5c:e4:d3:e6:a9:fa:2d:e0:4f:04:28:83:01:
03:c1:5e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:42:45 2024 by rpki-client on console-fra.rpki-client.org