Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/Nhu4gGCtdOLahMlw9l_nAnm3Mfg.roa
File: Nhu4gGCtdOLahMlw9l_nAnm3Mfg.roa (raw, json)
Hash identifier: OVTrPYNyCqWOipnjW2X2S4hLaCc55j9G/zbNJiG2tIU=
Subject key identifier: 36:1B:B8:80:60:AD:74:E2:DA:84:C9:70:F6:5F:E7:02:79:B7:31:F8
Certificate issuer: /CN=e8cbd4c23062d69537fb2e8a8accbfb027f2b525
Certificate serial: 018CC9BC4496C4A08C2811A570E5652002FB
Authority key identifier: E8:CB:D4:C2:30:62:D6:95:37:FB:2E:8A:8A:CC:BF:B0:27:F2:B5:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/Nhu4gGCtdOLahMlw9l_nAnm3Mfg.roa
Signing time: Tue 02 Jan 2024 10:33:27 +0000
ROA not before: Tue 02 Jan 2024 10:33:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58031
IP address blocks: 91.238.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:44:96:c4:a0:8c:28:11:a5:70:e5:65:20:02:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8cbd4c23062d69537fb2e8a8accbfb027f2b525
Validity
Not Before: Jan 2 10:33:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=361bb88060ad74e2da84c970f65fe70279b731f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ef:b9:f3:b1:45:16:ba:8b:5d:b0:1c:7c:15:
c9:47:d7:ed:98:3f:29:e7:2e:91:d6:63:df:dd:ca:
28:80:91:02:49:04:1a:a3:1b:84:7a:58:74:2b:81:
9e:0f:59:12:1a:19:39:d7:f1:01:2f:0c:de:69:f5:
21:a4:e7:6f:ea:8a:32:39:b0:0f:6d:a4:b3:64:80:
6f:82:dd:32:05:0b:65:b4:27:7f:f1:a1:c8:29:12:
fa:f1:b5:e7:05:57:84:8d:51:78:8c:57:08:6d:81:
29:ab:78:73:be:07:2b:11:1f:bd:be:a3:17:88:92:
9b:84:ae:09:f2:2b:75:f7:9e:89:50:3f:b1:82:b1:
48:96:e6:01:eb:10:de:91:4c:99:33:13:d1:5d:90:
1f:f5:99:54:8d:9b:e9:4d:b2:36:82:1b:f7:d6:fc:
6b:75:aa:1f:6e:c9:b5:5c:36:8d:44:d5:1c:3f:4f:
15:be:fe:06:6d:28:92:4e:d5:9f:a5:1d:09:9b:1e:
c0:19:f9:3c:eb:dc:5f:35:25:2b:56:d8:93:ed:bb:
02:be:77:f6:da:1c:51:db:04:ab:f7:74:b9:e8:f1:
07:be:da:8a:61:d8:67:0f:23:00:c6:a7:05:da:de:
7b:86:26:ae:9c:43:07:f2:3d:b5:71:dc:c2:5b:50:
46:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1B:B8:80:60:AD:74:E2:DA:84:C9:70:F6:5F:E7:02:79:B7:31:F8
X509v3 Authority Key Identifier:
keyid:E8:CB:D4:C2:30:62:D6:95:37:FB:2E:8A:8A:CC:BF:B0:27:F2:B5:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/Nhu4gGCtdOLahMlw9l_nAnm3Mfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.2.0/23
Signature Algorithm: sha256WithRSAEncryption
05:e8:ab:bf:94:0f:24:aa:68:72:23:6d:51:34:03:ed:bf:4b:
48:4c:06:6b:a3:c6:3c:79:bb:f2:8b:89:5c:f6:6d:58:c6:48:
43:c5:14:06:51:6f:e1:e8:44:06:16:43:18:43:f2:6e:17:df:
29:dd:80:09:42:42:24:82:19:12:e1:7a:46:84:be:dc:f8:ab:
ea:ec:d3:2d:4d:53:8a:7d:f9:c2:01:70:98:fd:e5:f7:4d:f0:
b3:03:35:ef:e7:27:60:8e:0e:09:f6:66:04:31:46:ba:b3:3a:
0c:0f:37:b2:94:f5:89:16:00:d6:67:98:5c:3b:44:b1:8d:89:
74:a4:ca:05:eb:02:bd:b4:2a:45:1b:22:1c:66:e3:ab:c0:24:
ce:52:9b:50:6d:ba:73:c9:c3:b0:c3:9c:5d:89:d0:96:4d:ad:
95:c8:ed:dd:2c:02:d6:cf:2f:3a:a7:2c:3c:f7:f7:fe:37:db:
ba:4b:ec:1d:35:aa:a4:8f:da:16:f8:53:5e:41:3a:72:8e:04:
be:97:7c:bf:f8:4c:1c:0c:ff:64:6b:a8:96:36:42:11:58:38:
a7:72:9d:c4:22:00:99:a1:f7:8d:45:18:07:13:4f:7f:09:38:
9e:00:cd:ca:3e:85:2d:eb:51:bd:8f:8a:c6:e7:24:37:95:64:
f7:b7:7f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:53:36 2024 by rpki-client on console-fra.rpki-client.org