Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/njzBGhsfWzv1T8rIBICmF2NdYTA.roa
File: njzBGhsfWzv1T8rIBICmF2NdYTA.roa (raw, json)
Hash identifier: dCNVyQ086YYWPZrUB0hWt1YpZ+Chm8Q8skEs2JnRq0k=
Subject key identifier: 9E:3C:C1:1A:1B:1F:5B:3B:F5:4F:CA:C8:04:80:A6:17:63:5D:61:30
Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Certificate serial: 018CC64ADC377ABACC7A22FD98E2D0519738
Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/njzBGhsfWzv1T8rIBICmF2NdYTA.roa
Signing time: Mon 01 Jan 2024 18:30:43 +0000
ROA not before: Mon 01 Jan 2024 18:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14288
IP address blocks: 157.23.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:dc:37:7a:ba:cc:7a:22:fd:98:e2:d0:51:97:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Validity
Not Before: Jan 1 18:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e3cc11a1b1f5b3bf54fcac80480a617635d6130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:11:98:1b:e7:20:af:eb:c6:a8:a7:36:0b:e9:
eb:b9:94:51:c9:11:42:a7:97:67:8d:35:31:94:84:
f3:44:d4:af:d2:83:12:35:e5:e5:07:94:33:81:39:
db:83:60:1d:72:f1:ad:be:1a:35:97:6c:bb:83:b2:
3b:da:40:39:7a:82:c9:51:f6:2a:7f:18:1d:82:10:
44:c4:0e:c3:af:30:0a:a6:03:cd:c7:1c:35:db:72:
13:99:44:b7:a7:68:b7:13:5c:41:29:fb:4a:de:0d:
b1:aa:96:53:73:37:69:a0:ff:20:69:12:41:ec:5e:
0d:af:ed:52:7d:72:bb:85:7e:5b:d1:29:2b:51:18:
26:1e:73:c1:fd:8e:51:52:9d:c5:41:6e:2a:6c:8b:
58:3c:fd:71:e6:f0:75:68:12:fc:a8:01:99:cd:32:
af:f6:99:47:e2:a2:e0:1e:fb:26:19:bd:09:14:7a:
18:a9:ca:68:1c:5f:15:59:8f:36:4d:54:0b:e4:54:
77:d8:a2:33:4e:28:58:3f:ba:f7:cc:cc:5a:8b:c3:
13:cf:27:4b:76:15:a9:d4:a1:82:b8:05:3c:37:f3:
a7:8c:34:f1:d6:63:fc:b4:6a:60:11:1c:4b:77:c8:
5e:e1:2a:4d:71:87:77:30:52:6d:38:c3:6d:5c:2e:
f2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3C:C1:1A:1B:1F:5B:3B:F5:4F:CA:C8:04:80:A6:17:63:5D:61:30
X509v3 Authority Key Identifier:
keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/njzBGhsfWzv1T8rIBICmF2NdYTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.23.249.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:34:8c:03:8f:7a:bb:76:94:4f:f3:4c:b7:4c:13:0c:15:bc:
a3:88:83:6f:53:1c:8c:5f:40:41:0f:e1:a0:e7:16:73:0e:10:
c4:4a:f9:17:7d:f7:09:11:14:96:9d:69:b5:a5:15:ad:c8:6b:
ab:59:7b:9d:a7:99:3b:30:31:f4:a8:46:55:41:2e:ec:35:4e:
39:7d:58:f9:db:27:7d:7b:f6:13:2c:f3:52:57:ca:1c:7f:ad:
95:ef:0f:1d:ac:e4:b5:06:4a:b9:ff:65:e1:37:c0:f6:07:8f:
61:1e:71:2c:03:ba:ca:5b:7e:d0:54:3b:86:ca:0d:68:84:45:
ed:8d:a5:7d:64:d0:ac:e1:a4:8a:79:d2:59:2a:48:01:42:01:
f4:e3:51:3c:11:a1:4c:56:22:ba:5f:d3:41:75:63:19:92:62:
24:5e:e1:2f:9a:3a:f1:8f:5c:e8:9c:76:96:1d:0f:36:19:8a:
2a:da:d1:22:dd:37:08:82:8a:c2:b7:d9:e5:36:3f:b2:af:fd:
df:c5:16:6c:94:7e:50:2d:9c:7f:bf:78:59:82:b5:af:52:c4:
3b:38:56:be:1c:5a:6a:8a:4b:e3:bf:d4:12:58:63:94:d8:40:
0b:14:43:41:b5:d2:e7:e7:cb:f5:e0:ca:b5:45:ed:2b:32:43:
c0:d8:34:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:35:27 2024 by rpki-client on console-ams.rpki-client.org