Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/NTVBx724Tv7AtucWSPXlbPS5EcI.roa
File: NTVBx724Tv7AtucWSPXlbPS5EcI.roa (raw, json)
Hash identifier: 30S+akiraRQ9uW475SfIVytCQb+bVdR5BCYv90StXbg=
Subject key identifier: 35:35:41:C7:BD:B8:4E:FE:C0:B6:E7:16:48:F5:E5:6C:F4:B9:11:C2
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 018CC8DEDC02724D31FE8A77023E989DAD06
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/NTVBx724Tv7AtucWSPXlbPS5EcI.roa
Signing time: Tue 02 Jan 2024 06:31:37 +0000
ROA not before: Tue 02 Jan 2024 06:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41269
IP address blocks: 212.110.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:dc:02:72:4d:31:fe:8a:77:02:3e:98:9d:ad:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Jan 2 06:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=353541c7bdb84efec0b6e71648f5e56cf4b911c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:2b:35:b8:0c:47:19:d8:53:f4:35:17:52:
3b:5c:23:57:5c:c8:25:9d:8f:f1:89:75:74:09:69:
4b:4b:8b:9c:d9:fd:39:7b:5a:6d:e6:81:28:57:16:
40:12:cb:fc:0f:f0:c4:03:4d:e8:7c:e6:50:69:32:
a5:9b:8a:fb:77:63:36:89:a2:f0:45:1b:32:dd:c1:
f4:33:8c:75:a8:ed:52:ed:35:27:a7:2f:77:5e:c5:
12:88:2f:63:77:ef:64:a0:e7:34:e1:f2:1d:0d:65:
40:8d:d0:f0:a3:ea:eb:7d:7d:ae:f1:70:d1:4e:db:
fa:ae:b7:51:81:a4:9e:a5:22:1c:00:be:d6:95:34:
40:db:22:4f:cf:d9:ef:ae:b0:73:7a:e8:d8:05:bb:
af:d9:a6:89:54:b8:c5:6a:11:d3:a2:8b:c3:28:ae:
3e:1b:53:3b:ee:bd:b9:a9:f7:88:69:fb:9b:50:f6:
b6:6f:5b:09:37:72:1f:7f:14:f7:48:d8:6e:e8:1a:
76:c6:3c:7d:e0:57:c9:dc:33:3d:7f:7a:80:a3:3e:
06:58:82:c2:58:2a:3d:e0:5e:99:f4:87:37:93:c1:
c6:c5:67:61:d4:a6:51:b4:11:ae:34:8a:79:be:80:
b4:d2:f0:7a:6f:91:94:ab:fb:67:a9:32:54:7b:8d:
cd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:35:41:C7:BD:B8:4E:FE:C0:B6:E7:16:48:F5:E5:6C:F4:B9:11:C2
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/NTVBx724Tv7AtucWSPXlbPS5EcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.110.158.0/24
Signature Algorithm: sha256WithRSAEncryption
89:07:c2:53:8a:b1:2f:af:eb:1e:63:4a:27:69:e6:ac:c1:6b:
99:26:ba:ec:c9:47:a1:4c:67:33:92:ab:94:7b:6c:c1:d3:a6:
8b:44:fe:90:0f:2c:9e:96:c7:75:c2:d8:b6:c9:91:51:8f:ca:
14:51:44:f2:21:41:66:ca:67:0b:09:ee:8c:14:db:33:57:85:
81:95:01:52:c2:b3:0f:7c:22:06:5a:88:43:33:06:1f:ab:a2:
e8:a3:43:74:96:de:ce:26:9f:32:ec:96:3c:9e:40:20:b4:15:
04:14:ba:53:e3:e3:1a:71:23:16:cc:c6:5b:b3:25:8f:8e:6a:
fb:73:21:56:3f:05:10:ad:fc:79:79:b7:e4:78:97:27:5a:0f:
4c:91:3a:a6:67:ef:ad:48:23:e9:2e:ae:b1:3f:c5:88:98:f9:
ca:35:6c:2e:ef:fd:02:06:5e:b7:52:30:ac:41:bf:e0:b8:35:
32:11:f6:18:70:26:b1:a2:65:97:d8:61:30:ad:c3:60:4a:e6:
29:b4:09:f1:1b:49:02:06:11:a4:40:fe:2f:22:3b:a1:d3:d5:
d1:05:74:86:78:f4:9b:28:9f:a8:a9:54:a4:b5:e6:0d:70:d6:
c3:38:71:00:3d:ca:36:dd:a4:59:0c:85:05:0a:43:87:61:68:
79:9a:21:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:09:14 2024 by rpki-client on console-fra.rpki-client.org