Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/NTsCp3LOovrVe9stXyk7fztvwoI.roa
File: NTsCp3LOovrVe9stXyk7fztvwoI.roa (raw, json)
Hash identifier: MAtr49LANOvnP9MAOb0fEiyD/KUA5P/RNRfyDVfuapY=
Subject key identifier: 35:3B:02:A7:72:CE:A2:FA:D5:7B:DB:2D:5F:29:3B:7F:3B:6F:C2:82
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018E8875CC2F0EB8EB16C01B27E6107A50F3
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/NTsCp3LOovrVe9stXyk7fztvwoI.roa
Signing time: Fri 29 Mar 2024 04:26:45 +0000
ROA not before: Fri 29 Mar 2024 04:26:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8568
IP address blocks: 195.166.160.0/20 maxlen: 20
195.166.160.0/24 maxlen: 24
195.166.163.0/24 maxlen: 24
195.166.176.0/21 maxlen: 24
195.166.176.0/24 maxlen: 24
195.166.184.0/22 maxlen: 24
195.166.188.0/24 maxlen: 24
195.166.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:88:75:cc:2f:0e:b8:eb:16:c0:1b:27:e6:10:7a:50:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Mar 29 04:26:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=353b02a772cea2fad57bdb2d5f293b7f3b6fc282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0e:5a:c5:51:4f:3e:9f:aa:af:89:c6:b5:c7:
61:8e:5b:c7:0f:b9:74:cb:2d:7e:19:12:a0:e9:27:
91:97:76:19:31:bc:c8:ac:94:d0:62:c4:eb:ac:36:
fc:1f:1e:4c:e6:39:7e:9b:72:3b:90:85:7e:f1:f9:
41:fc:16:9c:34:32:aa:a5:9e:09:34:70:93:7f:cf:
cf:d3:c2:ec:41:dd:0f:57:0a:36:46:0f:d2:ac:19:
68:71:1c:ff:45:c3:55:b9:ca:c9:8f:d8:6c:29:9f:
4d:31:f1:3f:b4:04:70:8a:6d:d7:e4:9b:34:fc:44:
73:c7:7c:1d:f9:37:79:05:88:d6:bb:de:ec:83:75:
3c:94:51:3f:d9:fd:3d:e5:d0:57:86:2c:b6:fe:84:
cb:85:1e:c1:1f:b7:af:ff:80:a4:d7:2f:5d:73:96:
dc:13:b2:0e:5f:cf:17:b7:c3:9c:5b:63:32:73:cb:
24:93:7e:49:59:f9:5d:ba:e8:ac:fa:79:f9:f1:be:
a4:80:33:7a:f6:1f:41:46:ed:45:0c:33:e0:47:b6:
a9:7b:3c:3b:52:e2:37:d8:52:dc:d7:19:e7:24:e8:
99:e0:da:09:ff:c2:65:9f:8f:ce:e5:9f:fc:73:61:
e2:cb:ea:56:de:9e:b5:59:ab:c6:28:15:c0:54:4e:
ea:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3B:02:A7:72:CE:A2:FA:D5:7B:DB:2D:5F:29:3B:7F:3B:6F:C2:82
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/NTsCp3LOovrVe9stXyk7fztvwoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.166.160.0-195.166.189.255
Signature Algorithm: sha256WithRSAEncryption
44:71:0d:34:41:1a:77:6c:73:00:0c:c5:e4:25:5f:d1:2d:d9:
37:e6:06:f1:ce:49:ec:4e:51:f6:35:ff:00:fb:87:d7:b1:9e:
93:8d:c0:fb:10:cd:6f:22:e4:d6:25:19:b3:bd:0e:7b:83:03:
56:a4:f4:47:fd:9c:09:a2:8d:09:9a:d2:ac:f5:03:a2:a8:67:
56:33:04:ac:a3:fc:7a:34:db:7e:80:2f:8b:8d:f5:5f:f6:f9:
b5:3d:2b:cd:50:df:64:e9:6d:23:0f:23:4b:33:47:9b:e9:39:
dd:7c:ac:6c:55:9f:ec:af:0a:61:cf:d3:7a:d2:23:dc:dd:c8:
e8:0e:fd:78:d1:02:eb:f5:d1:8f:81:f3:1e:4f:4f:86:19:4c:
e1:ea:54:50:97:0e:76:05:1e:0c:29:28:62:88:08:fb:03:1b:
17:47:69:90:83:02:4a:40:ae:11:32:01:ba:a3:5a:0a:2f:5e:
81:87:0a:af:ad:3b:b1:49:fe:c6:3b:e6:73:11:db:bd:b4:32:
5b:e7:46:e3:82:2d:63:e1:da:e8:04:d6:c6:ed:cf:e9:03:20:
79:f9:71:22:c5:8a:90:b5:d0:94:00:f1:02:ef:d4:09:51:7b:
f3:f1:0e:1b:e8:38:9b:6d:0c:e4:71:27:c4:95:02:2f:eb:ee:
b2:49:30:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:30:26 2024 by rpki-client on console-ams.rpki-client.org