Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/nLydmxUHnTtmENPp2m6cGd81m-8.roa
File: nLydmxUHnTtmENPp2m6cGd81m-8.roa (raw, json)
Hash identifier: bO38u0eeAVNpJaBmNhhaH9P6Ac+2rF5QR1WfsX479FE=
Subject key identifier: 9C:BC:9D:9B:15:07:9D:3B:66:10:D3:E9:DA:6E:9C:19:DF:35:9B:EF
Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial: 018FBA5A9B022F911B8877CFC69E238C33FE
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/nLydmxUHnTtmENPp2m6cGd81m-8.roa
Signing time: Mon 27 May 2024 14:00:51 +0000
ROA not before: Mon 27 May 2024 14:00:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39521
IP address blocks: 185.101.168.0/23 maxlen: 24
185.101.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft
rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ba:5a:9b:02:2f:91:1b:88:77:cf:c6:9e:23:8c:33:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Validity
Not Before: May 27 14:00:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9cbc9d9b15079d3b6610d3e9da6e9c19df359bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:37:94:d9:c5:3a:ce:09:2e:92:d9:86:a5:
1f:58:c6:49:e2:c7:2d:5a:cf:a3:dc:68:dc:94:2d:
c2:25:80:c3:99:9b:84:f5:dc:62:29:45:94:ca:74:
05:89:9b:cc:b1:08:59:f0:74:da:9d:45:96:ab:0a:
44:ef:3b:67:43:67:c8:e3:36:4b:74:37:a5:fd:cf:
14:17:69:14:1e:5a:15:8a:30:8c:e9:cf:30:05:cf:
0e:8b:c6:f1:2e:69:a5:6b:3e:af:22:16:ba:24:1a:
ad:93:5b:b2:84:d0:ae:20:c1:b5:cd:e2:10:56:64:
78:16:fb:96:3b:3c:0c:10:b1:2e:84:e6:fc:b8:f6:
d1:fe:37:81:f9:2a:57:7d:0e:15:db:bf:63:c2:9c:
32:1c:81:9f:81:64:43:44:97:71:1e:f1:ee:06:a2:
b5:1d:c2:74:5e:1f:7c:5e:ca:6b:72:62:13:e8:a4:
bc:a5:c1:e1:0a:bc:bd:b0:78:d0:b5:5d:c1:5b:1c:
5a:58:6d:e6:ff:fc:cb:dd:af:48:66:52:c7:a1:7c:
cb:dc:91:08:17:84:85:57:cc:a9:da:0b:74:0a:92:
50:4e:f5:ca:60:7e:d7:9b:d0:fa:e0:d0:db:fa:1e:
ca:2e:04:0c:2e:2d:87:a8:9b:da:59:6b:e0:71:68:
78:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BC:9D:9B:15:07:9D:3B:66:10:D3:E9:DA:6E:9C:19:DF:35:9B:EF
X509v3 Authority Key Identifier:
keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/nLydmxUHnTtmENPp2m6cGd81m-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.168.0/22
Signature Algorithm: sha256WithRSAEncryption
50:d5:7c:c1:44:d3:fb:ed:87:fc:5b:35:59:73:cf:00:67:8b:
73:a5:1c:37:df:d0:bd:90:a9:7a:55:ec:63:a8:3f:9a:50:fb:
a7:19:fb:20:7e:4b:ca:0d:f4:62:8a:40:65:da:9c:b0:21:fb:
d3:e7:0e:3d:40:5c:b2:f2:2a:67:68:09:b6:3f:bf:30:c4:44:
28:40:f0:fe:f9:f1:77:81:67:a2:50:79:83:fb:62:62:17:48:
b0:c9:4e:9e:20:5a:d5:a5:46:b6:72:7b:5a:d9:9a:25:97:b9:
5b:74:00:66:7b:b9:0e:43:49:09:79:b9:4e:1d:58:37:cd:9d:
af:d3:b7:3b:ff:67:6a:30:c7:ee:16:46:20:4e:6d:8e:8f:6c:
76:d4:e3:25:2a:54:da:5f:f1:48:0b:a2:fd:e7:70:9f:fd:d4:
64:8d:ec:7a:38:5e:fb:30:54:fa:96:2d:8d:f6:60:15:f4:c1:
76:7d:98:73:29:ff:25:d5:f4:b8:26:64:d3:e5:b5:45:ee:a0:
de:24:70:cb:a3:e7:52:91:f0:5f:c6:77:93:20:66:de:d3:fb:
0c:a9:54:5c:cc:cd:8f:33:b0:7c:19:b2:c9:d4:1b:8e:6a:dc:
b0:00:a8:b5:26:67:bd:bb:ef:e4:8a:39:39:1d:b9:d2:0d:a7:
92:c7:70:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:57:19 2024 by rpki-client on console.sobornost.net