Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/rNXjte-FmQQOVloe4k8_vSqwRR8.roa
File: rNXjte-FmQQOVloe4k8_vSqwRR8.roa (raw, json)
Hash identifier: LQZLa0waoplXGO3RRZgTp3lSVtOK3u36Pq/zBU6ljHQ=
Subject key identifier: AC:D5:E3:B5:EF:85:99:04:0E:56:5A:1E:E2:4F:3F:BD:2A:B0:45:1F
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018CC64A8460879D38C3FE2D49D9C5051A28
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/rNXjte-FmQQOVloe4k8_vSqwRR8.roa
Signing time: Mon 01 Jan 2024 18:30:21 +0000
ROA not before: Mon 01 Jan 2024 18:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203371
IP address blocks: 141.101.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:84:60:87:9d:38:c3:fe:2d:49:d9:c5:05:1a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 18:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=acd5e3b5ef8599040e565a1ee24f3fbd2ab0451f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c6:7c:d5:8f:1b:10:be:51:04:c2:12:a9:82:
04:f4:30:d6:10:fb:c3:cb:ae:ad:e8:cc:de:fb:19:
f6:c6:5c:31:cd:00:7e:a1:49:c3:d4:4f:46:92:50:
2c:66:42:6a:07:36:6e:5e:28:b1:24:12:fa:c9:af:
aa:46:b1:cd:26:a8:00:af:8b:ac:00:39:f1:ef:15:
c3:2b:88:f4:70:41:88:65:f4:f9:86:12:54:8b:0a:
72:3a:52:d0:2b:ac:cb:47:71:3a:08:f7:ea:2e:64:
77:39:1a:01:b1:ba:3a:5b:18:22:3c:a9:a7:b2:f0:
49:bc:89:ac:4e:bc:64:44:50:03:c9:ff:81:90:a2:
42:03:7f:5a:28:78:46:04:b3:f9:3a:2c:bd:a1:18:
02:24:43:5b:c7:ce:b9:5f:3e:77:56:27:68:78:61:
87:be:eb:a8:7c:40:fa:23:62:44:88:60:25:35:e1:
f3:70:f5:08:b6:0c:04:d2:2a:d5:e2:5c:62:37:ec:
4e:4c:c0:74:1a:1e:9c:e4:d7:09:c8:0f:3a:f3:cd:
17:ca:49:e5:20:8b:5d:32:46:ac:fe:ce:c6:5d:6c:
36:70:aa:11:f1:75:a6:f5:4f:26:ee:20:55:a2:b5:
fa:11:5a:f2:67:ea:33:ca:9c:aa:69:9c:46:90:15:
84:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D5:E3:B5:EF:85:99:04:0E:56:5A:1E:E2:4F:3F:BD:2A:B0:45:1F
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/rNXjte-FmQQOVloe4k8_vSqwRR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.224.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:7a:14:ec:26:0d:f7:21:fc:64:c8:61:3f:c9:8a:4e:93:63:
b8:08:bb:e5:a4:c7:41:d3:d6:a7:a5:6d:99:0e:35:5b:80:e2:
4f:ce:ce:e6:e9:b7:b5:36:ea:e3:1e:cf:ec:a6:aa:79:7c:27:
b4:20:56:cb:1a:22:6b:9e:da:ef:b3:a0:46:dc:60:8f:9a:bf:
44:1e:1d:02:08:fe:77:b9:a4:78:c1:a0:52:fa:1f:8f:fb:06:
af:18:91:c5:78:ed:2b:7d:eb:64:dc:f0:b7:e7:32:84:18:13:
3b:c8:78:d1:e0:9a:6c:c4:39:ea:50:96:cf:dd:a9:2f:26:8b:
0d:cb:70:6b:ab:37:db:e8:d2:f1:ba:53:ff:0b:42:94:5b:65:
18:f1:59:e0:af:c9:04:e7:75:91:7d:b5:b1:f6:4e:2d:7a:b8:
06:da:40:3d:7f:39:3c:80:e3:5c:0d:f0:4f:7a:a8:59:1f:3d:
48:5c:ca:0e:19:f2:26:b7:88:b7:e1:a4:5f:32:2b:80:00:35:
91:3d:5b:bb:fd:04:6a:ab:c7:cb:fd:a7:99:e7:75:61:05:bc:
b6:e9:7c:85:7d:bc:20:d1:56:9b:40:05:42:2f:a6:1f:1c:92:
0e:59:eb:65:1a:d6:11:bb:a9:f6:85:1f:8b:74:ef:3d:60:71:
36:ae:64:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSoRgh504w/4tSdnFBRooMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjQwMTAxMTgzMDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2Q1ZTNiNWVmODU5OTA0MGU1NjVhMWVlMjRmM2ZiZDJhYjA0NTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8Z81Y8bEL5RBMISqYIE9DDWEPvD
y66t6Mze+xn2xlwxzQB+oUnD1E9GklAsZkJqBzZuXiixJBL6ya+qRrHNJqgAr4us
ADnx7xXDK4j0cEGIZfT5hhJUiwpyOlLQK6zLR3E6CPfqLmR3ORoBsbo6WxgiPKmn
svBJvImsTrxkRFADyf+BkKJCA39aKHhGBLP5Oiy9oRgCJENbx865Xz53VidoeGGH
vuuofED6I2JEiGAlNeHzcPUItgwE0irV4lxiN+xOTMB0Gh6c5NcJyA86880Xyknl
IItdMkas/s7GXWw2cKoR8XWm9U8m7iBVorX6EVryZ+ozypyqaZxGkBWEZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKzV47XvhZkEDlZaHuJPP70qsEUfMB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvck5YanRlLUZtUVFPVmxvZTRrOF92U3F3UlI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWXgMA0G
CSqGSIb3DQEBCwUAA4IBAQAfehTsJg33IfxkyGE/yYpOk2O4CLvlpMdB09anpW2Z
DjVbgOJPzs7m6be1NurjHs/spqp5fCe0IFbLGiJrntrvs6BG3GCPmr9EHh0CCP53
uaR4waBS+h+P+wavGJHFeO0rfetk3PC35zKEGBM7yHjR4JpsxDnqUJbP3akvJosN
y3Brqzfb6NLxulP/C0KUW2UY8Vngr8kE53WRfbWx9k4tergG2kA9fzk8gONcDfBP
eqhZHz1IXMoOGfImt4i34aRfMiuAADWRPVu7/QRqq8fL/aeZ53VhBby26XyFfbwg
0VabQAVCL6YfHJIOWetlGtYRu6n2hR+LdO89YHE2rmQK
-----END CERTIFICATE-----
Generated at Mon Jun 17 12:31:40 2024 by rpki-client on console-ams.rpki-client.org