Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/nY_WP4395SrS37FBUC6HRmZt2BQ.roa
File: nY_WP4395SrS37FBUC6HRmZt2BQ.roa (raw, json)
Hash identifier: niIcWCRGA8rKsVdJXilGmt0gWnxXqxC8ODPH7JQPElA=
Subject key identifier: 9D:8F:D6:3F:8D:FD:E5:2A:D2:DF:B1:41:50:2E:87:46:66:6D:D8:14
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802EE621E2A91FF60E6C6A26E5A6D31
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/nY_WP4395SrS37FBUC6HRmZt2BQ.roa
Signing time: Tue 02 Jan 2024 02:31:24 +0000
ROA not before: Tue 02 Jan 2024 02:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44515
IP address blocks: 193.181.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:ee:62:1e:2a:91:ff:60:e6:c6:a2:6e:5a:6d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d8fd63f8dfde52ad2dfb141502e8746666dd814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b1:8a:01:d4:fd:db:74:ff:95:1a:59:16:b8:
cc:6d:a8:47:4d:49:0f:ad:58:7a:a1:c6:e8:b0:8b:
a8:91:4e:23:a0:64:4d:fb:a0:21:97:fa:34:1f:24:
26:7c:d2:ef:04:f8:64:61:02:3b:85:3c:53:77:6b:
01:2e:57:44:f0:cb:2a:15:fd:be:39:bc:8a:97:5d:
10:8a:89:df:97:c5:27:28:3e:eb:98:17:78:5a:da:
f7:36:05:6e:ac:64:fa:ed:09:1a:4d:5d:7d:73:6f:
82:9a:c9:d8:66:20:7e:73:50:8a:27:55:8f:43:56:
2c:26:a9:6c:40:7a:b0:03:38:d5:90:cf:31:f4:c5:
95:a5:6c:db:72:b0:24:ff:b1:24:cf:a9:a2:8a:e8:
05:49:62:bf:a0:4e:04:07:4d:31:a5:98:5b:07:f7:
1b:ee:7a:37:3a:e1:42:39:75:66:4e:32:bc:b6:f4:
1f:20:49:6e:a4:e4:47:90:43:f7:8b:52:36:30:4f:
ed:56:91:aa:9f:41:64:12:fa:f9:d9:f0:8f:37:eb:
25:5e:d3:20:75:b4:4f:80:74:bd:1e:d0:4d:74:c2:
9d:9d:19:bb:ff:3e:aa:83:9d:ae:a4:d0:77:12:ac:
63:3f:95:f5:cf:56:20:87:38:d8:07:b6:35:43:ef:
62:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8F:D6:3F:8D:FD:E5:2A:D2:DF:B1:41:50:2E:87:46:66:6D:D8:14
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/nY_WP4395SrS37FBUC6HRmZt2BQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.181.194.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:72:c1:46:38:92:09:f7:fb:3b:2e:b4:46:14:56:5e:eb:dc:
74:a8:64:8b:92:00:6d:c0:3d:78:c2:51:50:9b:69:d3:f0:1e:
40:08:c8:b9:e0:47:2e:5d:d8:71:7b:29:ee:d7:28:d0:57:1e:
07:67:a2:99:c5:7b:7b:24:5b:97:d7:18:7a:3c:07:0a:36:f0:
f2:a4:6c:28:05:f1:b3:b1:1c:5f:f4:91:82:c1:8f:b7:ed:e4:
2f:c2:5a:0c:ed:50:20:8c:2e:65:07:d1:0a:5b:4a:74:20:e4:
55:d3:c9:c3:df:9b:06:37:02:3c:2e:9e:0b:64:36:e9:76:d1:
d0:e6:63:70:64:05:c5:e7:fe:ca:00:5d:60:12:16:69:53:e9:
ab:aa:27:60:b0:ca:6e:94:14:cb:88:01:67:36:64:ca:a4:be:
f3:07:e2:fd:62:7c:51:5e:48:27:7f:6b:92:b4:38:29:44:54:
70:3a:45:c7:64:7c:35:cc:4d:8d:50:a1:af:96:64:9d:68:2c:
ae:28:9b:a1:bb:59:3c:a4:13:24:57:02:18:59:40:24:71:50:
04:bd:41:b5:c8:75:47:12:0c:ec:51:a5:0f:b4:3a:81:de:1a:
b5:af:05:8f:fa:77:70:de:f4:89:7f:62:22:ba:6a:af:58:7e:
00:e4:ef:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAu5iHiqR/2DmxqJuWm0xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjQwMTAyMDIzMTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDhmZDYzZjhkZmRlNTJhZDJkZmIxNDE1MDJlODc0NjY2NmRkODE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7GKAdT923T/lRpZFrjMbahHTUkP
rVh6ocbosIuokU4joGRN+6Ahl/o0HyQmfNLvBPhkYQI7hTxTd2sBLldE8MsqFf2+
ObyKl10Qionfl8UnKD7rmBd4Wtr3NgVurGT67QkaTV19c2+CmsnYZiB+c1CKJ1WP
Q1YsJqlsQHqwAzjVkM8x9MWVpWzbcrAk/7Ekz6miiugFSWK/oE4EB00xpZhbB/cb
7no3OuFCOXVmTjK8tvQfIElupORHkEP3i1I2ME/tVpGqn0FkEvr52fCPN+slXtMg
dbRPgHS9HtBNdMKdnRm7/z6qg52upNB3EqxjP5X1z1YghzjYB7Y1Q+9iMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ2P1j+N/eUq0t+xQVAuh0ZmbdgUMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvbllfV1A0Mzk1U3JTMzdGQlVDNkhSbVp0MkJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbXCMA0G
CSqGSIb3DQEBCwUAA4IBAQDJcsFGOJIJ9/s7LrRGFFZe69x0qGSLkgBtwD14wlFQ
m2nT8B5ACMi54EcuXdhxeynu1yjQVx4HZ6KZxXt7JFuX1xh6PAcKNvDypGwoBfGz
sRxf9JGCwY+37eQvwloM7VAgjC5lB9EKW0p0IORV08nD35sGNwI8Lp4LZDbpdtHQ
5mNwZAXF5/7KAF1gEhZpU+mrqidgsMpulBTLiAFnNmTKpL7zB+L9YnxRXkgnf2uS
tDgpRFRwOkXHZHw1zE2NUKGvlmSdaCyuKJuhu1k8pBMkVwIYWUAkcVAEvUG1yHVH
EgzsUaUPtDqB3hq1rwWP+ndw3vSJf2IiumqvWH4A5O9l
-----END CERTIFICATE-----
Generated at Mon Jun 3 22:39:11 2024 by rpki-client on console-ams.rpki-client.org