Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/nbeYGVBS783hhOi2-LJ8cc9av3w.roa
File: nbeYGVBS783hhOi2-LJ8cc9av3w.roa (raw, json)
Hash identifier: tM5YHv1VNU+nvr+oUCv4t4sZBdB1uvtL0EpRze9/Ewk=
Subject key identifier: 9D:B7:98:19:50:52:EF:CD:E1:84:E8:B6:F8:B2:7C:71:CF:5A:BF:7C
Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824
Certificate serial: 019223F1E6E71B8E9DF34387365F5CB1B6A5
Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/nbeYGVBS783hhOi2-LJ8cc9av3w.roa
Signing time: Tue 24 Sep 2024 12:11:48 +0000
ROA not before: Tue 24 Sep 2024 12:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9155
IP address blocks: 185.62.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:23:f1:e6:e7:1b:8e:9d:f3:43:87:36:5f:5c:b1:b6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824
Validity
Not Before: Sep 24 12:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9db798195052efcde184e8b6f8b27c71cf5abf7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:80:d2:17:ff:a8:e2:67:5b:47:6f:14:9f:a1:
48:f7:d8:ee:48:ab:4c:6f:bb:49:14:46:88:4a:46:
8a:10:f2:66:d8:c0:dc:8d:47:57:4d:81:16:1d:f1:
48:a9:e6:ac:cd:b5:d7:ff:7f:88:28:b7:a0:9f:9b:
8d:41:c0:9a:f4:bb:26:da:a9:91:6b:80:4c:5e:7b:
56:7f:96:fc:f2:35:d3:e3:c1:3e:ca:8a:3c:42:a5:
f4:ec:f9:3d:6e:73:90:d7:17:92:3a:b8:4c:2e:84:
57:ae:dc:0d:df:e1:47:3a:04:63:ee:50:37:74:e3:
b2:b2:f1:5c:4e:12:66:e5:e6:0f:37:be:37:cd:0d:
2b:8b:a4:f8:e7:0f:6b:dd:4b:c7:ce:8e:a8:fd:d8:
cb:48:a7:97:e9:79:75:e9:cb:11:ff:9b:f9:62:b2:
fe:35:24:bf:89:a0:be:28:64:63:f0:08:02:e0:75:
24:79:f9:3e:fb:c7:8c:1f:4d:d9:22:1c:86:f6:d5:
45:2b:a8:1e:3e:c8:f7:bc:0d:51:eb:f2:f7:fe:d8:
7b:6f:b3:17:0d:ce:d6:77:29:3a:fb:9a:8a:96:73:
1e:81:0f:43:0e:46:15:1a:1a:f9:d7:1f:dc:1a:51:
11:20:09:a3:99:f9:07:0d:54:3d:b3:66:d0:0a:2c:
2d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B7:98:19:50:52:EF:CD:E1:84:E8:B6:F8:B2:7C:71:CF:5A:BF:7C
X509v3 Authority Key Identifier:
keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/nbeYGVBS783hhOi2-LJ8cc9av3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.230.0/24
Signature Algorithm: sha256WithRSAEncryption
15:84:b3:1d:8e:b1:4a:ad:81:46:1f:76:d3:30:a5:2e:03:92:
8e:0c:a1:7d:f7:2a:16:bd:23:30:db:5b:f5:7c:70:9f:cf:0e:
78:86:db:4e:43:38:64:39:e2:0a:c9:5b:97:92:8e:55:4a:6f:
10:4e:b5:cf:60:c2:35:97:78:6f:42:07:c9:e0:0e:f2:69:5e:
7e:74:96:69:82:aa:be:60:23:88:db:a3:a3:70:e6:a4:d6:6a:
f3:d1:89:a4:5a:9c:dc:8a:88:ca:48:f6:f0:16:a5:ea:7c:de:
23:b2:b1:b8:60:fe:d6:b4:c7:7e:35:01:32:42:71:67:ce:08:
ff:f2:aa:a6:15:68:fd:3c:85:d4:e7:37:93:70:cf:5c:23:3c:
3b:cf:87:6f:e9:6e:4d:1f:1c:77:81:49:aa:02:9b:c2:6a:f5:
76:71:ec:2f:16:71:93:84:73:5e:4b:50:0f:82:34:8d:0d:9d:
25:f8:ed:ca:31:91:c1:22:55:5c:f2:a6:8d:f5:eb:93:16:c1:
fd:03:de:0d:b5:ca:e8:2b:1a:06:7b:7e:b1:4e:0d:d0:f5:da:
22:43:50:e2:ee:42:2d:0d:da:05:ba:5a:7b:4c:69:5a:c2:6f:
04:a0:33:28:46:97:d7:f1:39:72:c3:d4:e7:6b:d1:3d:52:c2:
e3:fe:f9:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZIj8ebnG46d80OHNl9csbalMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMjgwOTUwNjUzYTdlYzU4YzUzMzg1ZDAwYjM4MWVmYmI0
NjU4MjQwHhcNMjQwOTI0MTIxMTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGI3OTgxOTUwNTJlZmNkZTE4NGU4YjZmOGIyN2M3MWNmNWFiZjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIDSF/+o4mdbR28Un6FI99juSKtM
b7tJFEaISkaKEPJm2MDcjUdXTYEWHfFIqeaszbXX/3+IKLegn5uNQcCa9Lsm2qmR
a4BMXntWf5b88jXT48E+yoo8QqX07Pk9bnOQ1xeSOrhMLoRXrtwN3+FHOgRj7lA3
dOOysvFcThJm5eYPN743zQ0ri6T45w9r3UvHzo6o/djLSKeX6Xl16csR/5v5YrL+
NSS/iaC+KGRj8AgC4HUkefk++8eMH03ZIhyG9tVFK6gePsj3vA1R6/L3/th7b7MX
Dc7Wdyk6+5qKlnMegQ9DDkYVGhr51x/cGlERIAmjmfkHDVQ9s2bQCiwtKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ23mBlQUu/N4YTotviyfHHPWr98MB8GA1UdIwQY
MBaAFF4oCVBlOn7FjFM4XQCzge+7RlgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83MmM1ODctYzVjYi00MGU0LThjZTEt
ZTFiNTM1NTZjMWMzLzEvbmJlWUdWQlM3ODNoaE9pMi1MSjhjYzlhdjN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC83MmM1ODctYzVjYi00MGU0LThjZTEtZTFiNTM1NTZjMWMz
LzEvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuT7mMA0G
CSqGSIb3DQEBCwUAA4IBAQAVhLMdjrFKrYFGH3bTMKUuA5KODKF99yoWvSMw21v1
fHCfzw54httOQzhkOeIKyVuXko5VSm8QTrXPYMI1l3hvQgfJ4A7yaV5+dJZpgqq+
YCOI26OjcOak1mrz0YmkWpzciojKSPbwFqXqfN4jsrG4YP7WtMd+NQEyQnFnzgj/
8qqmFWj9PIXU5zeTcM9cIzw7z4dv6W5NHxx3gUmqApvCavV2cewvFnGThHNeS1AP
gjSNDZ0l+O3KMZHBIlVc8qaN9euTFsH9A94NtcroKxoGe36xTg3Q9doiQ1Di7kIt
DdoFulp7TGlawm8EoDMoRpfX8Tlyw9Tna9E9UsLj/vlf
-----END CERTIFICATE-----
Generated at Sat Sep 28 16:16:24 2024 by rpki-client on console-fra.rpki-client.org