Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/nskl5V6jk2WEjwWiKdmeyfT_nTY.roa
File: nskl5V6jk2WEjwWiKdmeyfT_nTY.roa (raw, json)
Hash identifier: 2BMNt/Eu2Y+IrrPvXo/Rrawrr2vR3shoiMSjURjb4l0=
Subject key identifier: 9E:C9:25:E5:5E:A3:93:65:84:8F:05:A2:29:D9:9E:C9:F4:FF:9D:36
Certificate issuer: /CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Certificate serial: 018CC6B7A9419619DFFB84CF8A29A8629F07
Authority key identifier: 2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/nskl5V6jk2WEjwWiKdmeyfT_nTY.roa
Signing time: Mon 01 Jan 2024 20:29:34 +0000
ROA not before: Mon 01 Jan 2024 20:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58109
IP address blocks: 37.235.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a9:41:96:19:df:fb:84:cf:8a:29:a8:62:9f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Validity
Not Before: Jan 1 20:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ec925e55ea39365848f05a229d99ec9f4ff9d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:02:b3:ed:1c:79:54:23:ed:b1:76:df:75:
f3:df:27:48:72:1e:1d:1f:37:fc:d1:1e:10:b2:c7:
86:64:1d:dd:00:e2:1b:e4:e8:8b:31:22:dc:7e:00:
e4:4f:32:05:29:2f:e5:5b:ac:03:31:b7:bc:3f:54:
4b:cd:2d:4e:0d:a8:ea:d0:f0:16:35:a2:7d:b2:e5:
c9:58:45:c1:4d:5e:98:db:3a:2b:d5:5c:4e:a7:f1:
e7:13:1e:20:31:8e:bd:ba:14:31:96:18:c0:b2:3f:
07:e3:fd:b8:b4:fe:7b:22:df:59:69:42:bc:83:6b:
63:11:ed:40:b3:77:f6:be:1d:15:46:97:3c:4d:9d:
f0:96:5b:38:19:c2:65:f9:e6:0d:82:8f:50:c8:ce:
d9:ff:66:16:ad:9f:47:7a:0e:ea:81:53:f6:b2:af:
41:0d:56:ee:44:6a:72:2e:54:7f:df:38:a1:c1:c2:
06:13:fc:1a:76:c3:5d:39:55:81:89:24:c4:05:1c:
bf:d7:b0:cf:a3:84:bc:27:80:66:2a:1b:14:ec:5e:
3c:d2:5b:2c:e0:59:c0:89:5a:de:f3:fe:28:86:d5:
63:4f:32:07:70:94:90:5e:0c:2e:f1:15:47:1c:7e:
8d:b2:fd:6a:b3:72:56:02:dd:2b:d2:ac:91:65:1f:
32:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C9:25:E5:5E:A3:93:65:84:8F:05:A2:29:D9:9E:C9:F4:FF:9D:36
X509v3 Authority Key Identifier:
keyid:2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/nskl5V6jk2WEjwWiKdmeyfT_nTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.72.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:57:7e:35:ab:f0:86:cb:1e:60:8d:d9:f9:72:63:05:0c:ab:
07:ed:d6:20:8f:65:e8:87:82:5d:84:95:a4:8f:9e:c7:8d:47:
37:f2:4d:cb:84:67:0d:ab:5a:bd:9d:5a:72:72:08:55:be:af:
6a:22:56:41:01:fc:c7:d7:66:e2:4e:f2:3b:01:76:8e:52:0b:
d7:44:ac:6d:48:33:06:4d:aa:05:e7:e5:7c:04:49:2a:c0:17:
3b:b5:6d:31:dd:4a:eb:55:dd:d4:bc:58:5e:a3:19:0f:35:8f:
cf:dc:ee:98:1d:95:cd:33:4d:8a:d4:79:fc:61:03:d1:c6:d7:
93:f9:2f:d0:ce:14:8f:53:14:1e:af:86:1c:14:7e:77:d6:dc:
8d:85:6c:55:ff:6b:b7:62:c6:9c:f6:2f:bd:97:ef:fb:fa:41:
40:9c:35:04:eb:e4:6e:f1:74:8c:c4:ae:5f:b7:58:4e:8c:06:
4e:3a:43:e5:f3:14:b6:1e:90:e2:0a:07:ef:67:a9:41:ab:2f:
d1:4a:66:1b:b8:cf:29:4b:e7:75:b6:da:14:21:ad:0b:05:c0:
c8:dc:77:09:5d:ce:42:ce:b6:72:b4:64:f3:0b:f5:f7:37:eb:
af:eb:28:db:a8:68:68:bb:bc:2b:12:cf:eb:50:2b:e7:bf:7b:
88:6f:56:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:45 2024 by rpki-client on console-ams.rpki-client.org