Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/N2VUhb-LBYvcfkkEoH__n5VokmA.roa
File: N2VUhb-LBYvcfkkEoH__n5VokmA.roa (raw, json)
Hash identifier: Tap2KT2T9ieM1TEIhexQN1dpvN1P/DZhp+ZJ/BIZrwc=
Subject key identifier: 37:65:54:85:BF:8B:05:8B:DC:7E:49:04:A0:7F:FF:9F:95:68:92:60
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018F2FB7D8C5DFDFBCFED48C5B0CAAC55F1B
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/N2VUhb-LBYvcfkkEoH__n5VokmA.roa
Signing time: Tue 30 Apr 2024 15:55:28 +0000
ROA not before: Tue 30 Apr 2024 15:55:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210027
IP address blocks: 91.236.195.0/24 maxlen: 24
176.126.223.0/24 maxlen: 24
185.180.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2f:b7:d8:c5:df:df:bc:fe:d4:8c:5b:0c:aa:c5:5f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Apr 30 15:55:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37655485bf8b058bdc7e4904a07fff9f95689260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6c:ae:59:6f:2e:17:f6:84:50:2c:4d:d8:b1:
e3:d4:f7:c7:6f:eb:6e:5f:5d:ee:ac:eb:d8:74:6a:
ea:d6:d1:93:89:a1:d2:ce:70:fc:19:ae:e6:7f:3f:
fe:b2:22:ad:85:8b:5e:f1:e2:23:cc:c0:e1:02:45:
5c:c4:f8:b1:94:16:33:75:69:12:28:64:65:d8:ed:
14:21:2b:25:cf:21:83:b0:9a:03:08:67:eb:39:9a:
e6:f7:a9:18:24:c7:e1:7b:31:98:0f:67:2f:d6:86:
e4:80:44:60:95:83:bf:e9:42:0d:b4:8c:bf:cc:b9:
54:be:26:dc:96:64:bd:59:56:e0:f1:4a:84:6a:93:
70:a8:80:a9:4d:5d:ff:13:b8:1b:00:0c:e9:9f:17:
a4:d0:e7:42:e8:9f:9d:a3:90:ec:34:87:60:cf:51:
dd:22:01:93:e1:19:b1:75:86:ac:e3:d3:ad:dd:ae:
c5:df:bf:a4:f7:bc:d4:72:08:87:75:e4:64:fa:ea:
f5:4e:5d:f1:00:fc:f2:55:76:77:c4:93:08:a2:bf:
c2:32:09:b9:a2:52:4f:ea:92:7d:b3:96:d8:fc:9d:
41:41:c1:c4:07:39:37:83:56:2e:78:00:02:d6:d4:
56:ba:b9:ab:ec:df:e4:ef:c9:02:e0:75:9c:dd:5c:
4d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:65:54:85:BF:8B:05:8B:DC:7E:49:04:A0:7F:FF:9F:95:68:92:60
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/N2VUhb-LBYvcfkkEoH__n5VokmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.195.0/24
176.126.223.0/24
185.180.145.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:1e:f4:32:fc:7e:06:c5:c5:94:0a:1d:15:75:57:4e:79:f9:
53:59:43:21:2e:49:db:dd:3b:8e:5d:48:ba:f6:cb:ad:25:96:
dd:99:06:de:fc:50:07:92:df:c6:01:74:03:45:91:8a:d0:58:
b3:85:67:db:6e:cc:82:ec:ed:d7:93:c0:af:5a:b9:df:75:1f:
f5:6c:5b:3e:61:2e:cf:40:45:cc:3c:a8:4f:4b:a3:ca:85:cd:
15:d7:7f:9c:c8:a3:07:e7:48:35:c0:bb:71:eb:9a:98:02:61:
c9:a8:d0:10:2f:30:6c:b7:73:80:08:3f:49:4c:6b:46:01:0d:
24:25:0b:8c:c6:66:d9:cb:0c:90:13:ca:8a:bc:65:09:02:c3:
f1:3d:59:8b:96:62:8b:bd:cc:18:ee:2e:02:7d:56:f2:12:fe:
a2:0c:d0:ee:6f:b8:3d:13:bf:96:b8:63:60:c3:81:db:d2:ba:
cf:11:c4:01:f3:bc:19:55:d6:80:b7:71:d8:a4:5e:80:68:12:
2a:b5:0d:98:af:aa:f2:3c:ef:8b:38:23:f8:71:52:35:68:ac:
ce:9e:e9:3f:3e:55:fa:af:f9:6a:31:49:eb:3f:0a:7f:f8:3a:
48:0d:79:bf:f0:d5:20:e2:52:fd:7b:b4:d5:71:43:a6:ce:ea:
9a:40:e4:e7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY8vt9jF39+8/tSMWwyqxV8bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjQwNDMwMTU1NTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzY1NTQ4NWJmOGIwNThiZGM3ZTQ5MDRhMDdmZmY5Zjk1Njg5MjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmyuWW8uF/aEUCxN2LHj1PfHb+tu
X13urOvYdGrq1tGTiaHSznD8Ga7mfz/+siKthYte8eIjzMDhAkVcxPixlBYzdWkS
KGRl2O0UISslzyGDsJoDCGfrOZrm96kYJMfhezGYD2cv1obkgERglYO/6UINtIy/
zLlUvibclmS9WVbg8UqEapNwqICpTV3/E7gbAAzpnxek0OdC6J+do5DsNIdgz1Hd
IgGT4RmxdYas49Ot3a7F37+k97zUcgiHdeRk+ur1Tl3xAPzyVXZ3xJMIor/CMgm5
olJP6pJ9s5bY/J1BQcHEBzk3g1YueAAC1tRWurmr7N/k78kC4HWc3VxNYwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDdlVIW/iwWL3H5JBKB//5+VaJJgMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvTjJWVWhiLUxCWXZjZmtrRW9IX19uNVZva21BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW+zDAwQA
sH7fAwQAubSRMA0GCSqGSIb3DQEBCwUAA4IBAQCdHvQy/H4GxcWUCh0VdVdOeflT
WUMhLknb3TuOXUi69sutJZbdmQbe/FAHkt/GAXQDRZGK0FizhWfbbsyC7O3Xk8Cv
WrnfdR/1bFs+YS7PQEXMPKhPS6PKhc0V13+cyKMH50g1wLtx65qYAmHJqNAQLzBs
t3OACD9JTGtGAQ0kJQuMxmbZywyQE8qKvGUJAsPxPVmLlmKLvcwY7i4CfVbyEv6i
DNDub7g9E7+WuGNgw4Hb0rrPEcQB87wZVdaAt3HYpF6AaBIqtQ2Yr6ryPO+LOCP4
cVI1aKzOnuk/PlX6r/lqMUnrPwp/+DpIDXm/8NUg4lL9e7TVcUOmzuqaQOTn
-----END CERTIFICATE-----
Generated at Mon Jun 17 22:59:49 2024 by rpki-client on console-fra.rpki-client.org