Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/nKQGr73w9ppYLG4l4EO6wkGKaRo.roa
File: nKQGr73w9ppYLG4l4EO6wkGKaRo.roa (raw, json)
Hash identifier: 4BYT+FnHiI3l3GmvSc+Rg/SJxVJbQhQ+9xDEcSrnp6s=
Subject key identifier: 9C:A4:06:AF:BD:F0:F6:9A:58:2C:6E:25:E0:43:BA:C2:41:8A:69:1A
Certificate issuer: /CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Certificate serial: 018CC5010FA98286FCAB90859FB4361E46B5
Authority key identifier: 3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/nKQGr73w9ppYLG4l4EO6wkGKaRo.roa
Signing time: Mon 01 Jan 2024 12:30:30 +0000
ROA not before: Mon 01 Jan 2024 12:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 194.54.32.0/19 maxlen: 24
212.156.0.0/16 maxlen: 24
81.212.0.0/14 maxlen: 24
62.248.0.0/17 maxlen: 24
78.160.0.0/11 maxlen: 24
88.224.0.0/11 maxlen: 24
95.0.0.0/12 maxlen: 24
85.96.0.0/12 maxlen: 24
176.52.176.0/22 maxlen: 24
212.174.0.0/15 maxlen: 24
195.174.0.0/15 maxlen: 24
2a01:358::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:0f:a9:82:86:fc:ab:90:85:9f:b4:36:1e:46:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Validity
Not Before: Jan 1 12:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ca406afbdf0f69a582c6e25e043bac2418a691a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fa:36:da:25:85:1b:65:f2:46:ca:ca:af:9d:
53:33:64:42:82:fa:59:1e:d1:01:97:af:2e:c0:00:
a4:7a:2a:67:df:0b:ed:df:96:8c:b4:cf:18:9c:a2:
55:c5:d1:fd:05:3b:75:32:31:95:c9:d1:4d:8c:2b:
ad:c9:96:59:63:8d:74:0e:50:98:54:9c:6f:15:c3:
ee:a3:32:5d:65:86:3c:56:f9:28:4b:54:5c:3a:f5:
84:0a:9b:bd:c2:52:61:56:ad:09:b5:5c:0f:9e:e2:
28:0b:54:ae:33:6e:f9:1c:63:54:cc:df:d1:2f:ee:
07:a2:30:45:85:46:16:c5:3f:3e:d8:4c:07:ac:87:
b3:d7:28:b6:13:63:e1:ed:13:95:ce:66:69:12:da:
16:52:67:3c:b5:cf:40:c4:3f:12:14:35:9a:22:ef:
1c:d2:ed:24:94:73:ce:e1:41:3e:1b:9a:c1:d4:c3:
de:65:df:de:6c:bf:06:0e:9c:57:ef:06:45:a2:aa:
04:e9:a4:df:b3:7a:54:11:a5:18:51:f6:c1:4f:1e:
cf:e7:84:5f:27:81:6f:9f:aa:13:e2:e5:7d:64:6b:
ed:b2:af:50:00:9b:f0:1a:79:b2:d4:bf:17:00:6a:
18:6f:0e:ac:c6:27:59:32:e9:ed:2e:2f:22:c3:06:
3a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A4:06:AF:BD:F0:F6:9A:58:2C:6E:25:E0:43:BA:C2:41:8A:69:1A
X509v3 Authority Key Identifier:
keyid:3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/nKQGr73w9ppYLG4l4EO6wkGKaRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.248.0.0/17
78.160.0.0/11
81.212.0.0/14
85.96.0.0/12
88.224.0.0/11
95.0.0.0/12
176.52.176.0/22
194.54.32.0/19
195.174.0.0/15
212.156.0.0/16
212.174.0.0/15
IPv6:
2a01:358::/29
Signature Algorithm: sha256WithRSAEncryption
aa:e8:5c:95:ad:fe:60:ca:e9:1f:cc:df:8b:c3:0b:08:ba:10:
b0:58:7c:1f:49:b7:56:22:2c:5a:d6:a3:ec:91:1c:39:b8:90:
77:17:3c:7e:c9:37:c2:4f:e2:00:3e:6e:d8:c4:ce:46:14:ed:
4e:78:b4:24:5b:30:1b:19:4e:e7:44:3e:ec:fd:83:28:30:9e:
df:56:b1:03:ec:fb:3b:92:bf:81:94:60:58:c2:ec:a6:84:bb:
50:8f:0b:21:64:4d:f1:3b:0b:22:ec:64:2a:aa:72:c7:5f:b8:
81:f9:6a:2a:a7:ba:f1:93:96:0f:09:0b:95:54:fb:06:08:9e:
f8:f4:b7:00:c6:4b:b7:a2:98:60:f7:6b:d6:59:47:dc:5c:cb:
7a:fc:31:71:e0:f7:ce:80:19:9c:d7:5e:60:ec:c3:ac:c0:41:
89:64:8a:8f:ac:00:fd:bd:72:d2:77:e9:01:e1:22:3a:f8:14:
9c:75:c7:0e:b1:00:10:bb:35:49:bc:a4:5d:d7:2f:40:e4:20:
76:28:ea:fe:3c:0d:36:51:e4:15:7a:2b:37:2d:41:9a:3b:31:
3c:64:f6:d3:26:44:ee:36:b2:8d:ca:aa:15:af:4e:a4:a7:64:
1b:67:e2:47:06:47:9e:6f:6a:1f:fa:61:ee:75:81:82:e4:1e:
93:3e:5f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:43:20 2024 by rpki-client on console-fra.rpki-client.org