Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/nx7cFKeTbr8gXZKTN4tUct3gmOY.roa
File: nx7cFKeTbr8gXZKTN4tUct3gmOY.roa (raw, json)
Hash identifier: mpvfbcDq8nZOsQCVh1gJuQhIDXO81JTJWxSj1bruTK8=
Subject key identifier: 9F:1E:DC:14:A7:93:6E:BF:20:5D:92:93:37:8B:54:72:DD:E0:98:E6
Certificate issuer: /CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
Certificate serial: 018F447740448CC9C83AF6E946515A1BECC6
Authority key identifier: D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/nx7cFKeTbr8gXZKTN4tUct3gmOY.roa
Signing time: Sat 04 May 2024 16:36:56 +0000
ROA not before: Sat 04 May 2024 16:36:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8360
IP address blocks: 193.58.218.0/23 maxlen: 23
193.58.220.0/23 maxlen: 23
193.58.220.0/24 maxlen: 24
193.194.8.0/23 maxlen: 23
193.194.10.0/24 maxlen: 24
193.194.11.0/24 maxlen: 24
194.127.21.0/24 maxlen: 24
194.127.30.0/24 maxlen: 24
194.127.31.0/24 maxlen: 24
194.127.68.0/24 maxlen: 24
194.127.69.0/24 maxlen: 24
194.127.70.0/24 maxlen: 24
194.127.71.0/24 maxlen: 24
194.127.72.0/24 maxlen: 24
194.127.73.0/24 maxlen: 24
194.127.74.0/24 maxlen: 24
194.127.75.0/24 maxlen: 24
194.127.77.0/24 maxlen: 24
194.127.78.0/24 maxlen: 24
194.127.79.0/24 maxlen: 24
194.127.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:44:77:40:44:8c:c9:c8:3a:f6:e9:46:51:5a:1b:ec:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
Validity
Not Before: May 4 16:36:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f1edc14a7936ebf205d9293378b5472dde098e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:6f:3b:e3:bb:6e:62:16:c5:aa:f7:51:43:
67:7b:67:44:83:a8:f4:84:07:4e:d8:cb:e4:2d:1a:
3f:b8:74:76:b6:7d:a8:af:b3:f9:eb:45:51:f1:e2:
fe:67:3e:c7:95:1b:bb:fe:a6:7f:ec:99:91:b8:05:
b7:99:f8:3c:01:60:d3:89:47:b4:43:69:55:6d:37:
9c:cf:a4:58:01:98:b8:5a:f7:24:17:ba:f3:97:e6:
6e:01:a6:b2:c1:09:f3:32:80:38:ec:73:09:f3:21:
65:76:78:bd:35:16:1f:22:ca:68:65:08:bb:51:dc:
dc:be:28:10:26:84:21:2c:f0:17:9d:19:d1:c6:6b:
ea:b7:ac:67:e5:e3:49:32:4c:25:95:d0:ae:ff:3b:
ad:d7:72:c9:1b:ad:95:36:4e:8c:12:2b:4a:90:6d:
5b:c8:2d:ad:5f:e0:b9:db:f5:d7:ec:8c:6b:e6:75:
aa:65:1a:92:b4:a6:ec:94:91:8d:32:7a:0a:d3:3c:
32:86:70:d5:a4:35:9d:07:bc:a3:0a:6e:17:36:0f:
47:2f:3d:12:ea:c8:cc:5d:34:03:b1:d7:90:bd:1c:
62:8e:91:3a:da:64:7b:0a:88:d2:17:2b:a0:c0:82:
f7:f3:12:cc:06:72:39:ae:d4:5b:9c:f3:0b:08:57:
20:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1E:DC:14:A7:93:6E:BF:20:5D:92:93:37:8B:54:72:DD:E0:98:E6
X509v3 Authority Key Identifier:
keyid:D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/nx7cFKeTbr8gXZKTN4tUct3gmOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.218.0-193.58.221.255
193.194.8.0/22
194.127.21.0/24
194.127.30.0/23
194.127.68.0-194.127.75.255
194.127.77.0-194.127.80.255
Signature Algorithm: sha256WithRSAEncryption
67:3b:b5:0b:f4:bd:1d:03:73:29:8c:5a:f3:3a:d4:68:22:39:
a7:06:eb:1f:95:83:ef:b4:f2:23:d2:91:29:a9:1a:96:5b:ee:
5b:5a:76:b6:a0:9c:d5:74:3e:b4:85:ea:74:89:05:99:37:23:
de:84:05:80:ec:14:ad:68:bc:ec:e0:6b:28:bc:8f:0b:c6:92:
8e:08:ce:60:44:16:57:da:2d:31:ae:d9:5b:f8:10:a9:6e:e7:
e2:1e:b8:5c:f6:cc:e7:c9:6b:06:8b:dc:e0:52:67:41:84:41:
73:68:0f:10:65:78:6f:39:e0:81:67:67:4c:95:6a:56:5c:b4:
1e:b3:04:7a:09:a6:1b:10:9e:07:0b:e8:70:a1:3f:98:53:bd:
ec:39:b6:41:6d:45:d0:93:52:c8:53:47:37:07:7d:e4:09:93:
c9:3d:04:cb:54:cc:a4:f7:17:71:e0:5a:7a:87:79:41:eb:d7:
ae:37:3f:df:c4:cd:d6:51:da:08:9d:a3:e5:f2:cf:b6:bf:b7:
2f:f2:e2:8c:29:c2:fa:31:10:6b:e9:10:69:05:89:1e:08:75:
3e:54:8c:bc:97:e2:30:b6:da:88:ee:6b:cc:a2:5b:f4:91:da:
a5:35:72:06:55:82:78:91:dc:66:81:28:36:75:b0:ea:b5:60:
f1:af:73:42
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAY9Ed0BEjMnIOvbpRlFaG+zGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMWRkMWE1MTRkM2E3ZTNkZmRiOGJmYjc1ZDdkMjRlZDk4
ZDQ3OWYwHhcNMjQwNTA0MTYzNjU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjFlZGMxNGE3OTM2ZWJmMjA1ZDkyOTMzNzhiNTQ3MmRkZTA5OGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDZvO+O7bmIWxar3UUNne2dEg6j0
hAdO2MvkLRo/uHR2tn2or7P560VR8eL+Zz7HlRu7/qZ/7JmRuAW3mfg8AWDTiUe0
Q2lVbTecz6RYAZi4WvckF7rzl+ZuAaaywQnzMoA47HMJ8yFldni9NRYfIspoZQi7
UdzcvigQJoQhLPAXnRnRxmvqt6xn5eNJMkwlldCu/zut13LJG62VNk6MEitKkG1b
yC2tX+C52/XX7Ixr5nWqZRqStKbslJGNMnoK0zwyhnDVpDWdB7yjCm4XNg9HLz0S
6sjMXTQDsdeQvRxijpE62mR7CojSFyugwIL38xLMBnI5rtRbnPMLCFcgHQIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFJ8e3BSnk26/IF2SkzeLVHLd4JjmMB8GA1UdIwQY
MBaAFNMd0aUU06fj39uL+3XX0k7ZjUefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9mMjQ3OGYtYzUwMy00MmMyLTk0YjIt
YjE2NmFlMmVmMjg3LzEvbng3Y0ZLZVRicjhnWFpLVE40dFVjdDNnbU9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9mMjQ3OGYtYzUwMy00MmMyLTk0YjItYjE2NmFlMmVmMjg3
LzEvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8MAwDBAHBOtoD
BAHBOtwDBALBwggDBADCfxUDBAHCfx4wDAMEAsJ/RAMEAsJ/SDAMAwQAwn9NAwQA
wn9QMA0GCSqGSIb3DQEBCwUAA4IBAQBnO7UL9L0dA3MpjFrzOtRoIjmnBusflYPv
tPIj0pEpqRqWW+5bWna2oJzVdD60hep0iQWZNyPehAWA7BStaLzs4GsovI8LxpKO
CM5gRBZX2i0xrtlb+BCpbufiHrhc9sznyWsGi9zgUmdBhEFzaA8QZXhvOeCBZ2dM
lWpWXLQeswR6CaYbEJ4HC+hwoT+YU73sObZBbUXQk1LIU0c3B33kCZPJPQTLVMyk
9xdx4Fp6h3lB69euNz/fxM3WUdoInaPl8s+2v7cv8uKMKcL6MRBr6RBpBYkeCHU+
VIy8l+IwttqI7mvMolv0kdqlNXIGVYJ4kdxmgSg2dbDqtWDxr3NC
-----END CERTIFICATE-----
Generated at Sun Jun 23 15:08:53 2024 by rpki-client on console-ams.rpki-client.org