Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/Nfw07JHShu6D_lVpZGKOvNP3WL4.roa
File: Nfw07JHShu6D_lVpZGKOvNP3WL4.roa (raw, json)
Hash identifier: xho594mgMuWia9gxyV76ICCeDLoL/kTrTFT6lEh0JA4=
Subject key identifier: 35:FC:34:EC:91:D2:86:EE:83:FE:55:69:64:62:8E:BC:D3:F7:58:BE
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 018E5BFFF5BD5398A88CB2D6AE275E243D54
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/Nfw07JHShu6D_lVpZGKOvNP3WL4.roa
Signing time: Wed 20 Mar 2024 13:14:45 +0000
ROA not before: Wed 20 Mar 2024 13:14:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58128
IP address blocks: 185.155.204.0/24 maxlen: 24
185.155.205.0/24 maxlen: 24
185.155.206.0/24 maxlen: 24
185.186.180.0/24 maxlen: 24
185.186.181.0/24 maxlen: 24
185.186.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5b:ff:f5:bd:53:98:a8:8c:b2:d6:ae:27:5e:24:3d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Mar 20 13:14:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35fc34ec91d286ee83fe556964628ebcd3f758be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ac:a1:42:7e:9a:75:af:2d:8c:8c:47:ba:5b:
cb:ca:45:c2:4c:ae:33:85:74:5b:71:55:0a:c1:8b:
7a:1d:d9:e8:20:10:c2:a6:2b:06:12:46:d2:f7:83:
e9:3d:bc:fd:dc:48:69:e2:25:c9:8a:74:5a:d1:a4:
cf:41:7e:1d:b2:67:00:fd:fa:6d:9a:5b:4c:af:3d:
05:f7:d0:b3:35:d6:02:49:5c:51:2b:10:36:61:bc:
c0:bc:3e:98:78:3a:43:c1:b2:4b:0c:93:5d:60:71:
94:26:3e:04:06:c3:ed:d6:95:3d:be:57:51:4a:b8:
2b:87:2e:e7:61:2a:f8:dc:0a:66:79:f6:7d:3d:d3:
74:20:d0:45:37:17:cc:f8:27:66:bb:58:44:df:78:
24:bd:f4:62:df:c7:ec:7e:52:96:27:5b:2c:69:a9:
70:d9:70:66:22:b0:9b:47:cd:c6:7b:47:35:b0:d9:
bd:d5:89:9a:9c:a0:f3:81:ff:e5:54:c6:80:b3:78:
44:21:4f:9f:47:14:ea:69:5f:34:d2:81:4d:32:3c:
ea:77:a2:33:78:31:f2:1f:a1:6d:fa:e0:56:2c:48:
7d:5b:a5:8f:8c:5d:04:fa:c0:ad:ad:52:34:3f:a0:
b2:09:c8:79:72:19:7c:a9:af:61:96:78:20:03:ad:
cc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FC:34:EC:91:D2:86:EE:83:FE:55:69:64:62:8E:BC:D3:F7:58:BE
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/Nfw07JHShu6D_lVpZGKOvNP3WL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.204.0-185.155.206.255
185.186.180.0-185.186.182.255
Signature Algorithm: sha256WithRSAEncryption
1f:19:15:6b:10:70:0d:5b:ec:17:68:2d:89:ee:b3:80:f5:df:
31:c1:8c:f6:f3:c4:46:ba:79:42:7b:5e:07:63:cf:fa:48:8e:
ce:6f:2e:15:6a:3c:13:80:ec:8a:ad:fe:5a:75:fa:09:7c:db:
fc:35:53:55:03:55:ac:c2:1b:c4:f3:9f:44:76:cf:88:78:04:
99:2a:8b:8a:e9:1a:a5:c3:b6:ad:86:01:8b:07:36:f3:21:08:
c4:e2:24:14:01:19:e2:c6:fa:d9:e1:97:00:53:c2:e8:3b:87:
3e:71:61:16:0e:18:71:99:0a:ae:ec:73:52:b2:8a:8f:9c:52:
3e:eb:94:1a:80:1d:35:53:29:4b:18:5e:aa:5d:a0:4e:f8:8f:
ba:60:cb:c3:95:21:11:ed:c7:ac:2f:6d:49:b7:48:01:4c:ee:
8c:1f:3e:d2:a2:fd:3c:83:3a:0b:96:46:b8:c5:52:38:40:19:
df:8b:13:a0:b3:da:b6:81:73:4a:7b:03:76:4d:9c:ee:36:e9:
69:fe:34:75:1f:10:eb:17:de:ad:a6:a9:09:f1:8b:39:89:35:
fe:73:2b:fd:fc:46:56:41:c5:01:33:06:f7:20:06:e4:6f:c1:
90:c7:c0:bf:b2:a9:77:f8:2e:22:8a:cc:99:28:fa:c1:81:7c:
86:31:bc:45
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAY5b//W9U5iojLLWrideJD1UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNmQ2MTgzNTViZDg5MzdmNzViYjQ2NTBiYjVjMWFmNzBm
OWExMmUwHhcNMjQwMzIwMTMxNDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWZjMzRlYzkxZDI4NmVlODNmZTU1Njk2NDYyOGViY2QzZjc1OGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6yhQn6ada8tjIxHulvLykXCTK4z
hXRbcVUKwYt6HdnoIBDCpisGEkbS94PpPbz93Ehp4iXJinRa0aTPQX4dsmcA/fpt
mltMrz0F99CzNdYCSVxRKxA2YbzAvD6YeDpDwbJLDJNdYHGUJj4EBsPt1pU9vldR
Srgrhy7nYSr43ApmefZ9PdN0INBFNxfM+Cdmu1hE33gkvfRi38fsflKWJ1ssaalw
2XBmIrCbR83Ge0c1sNm91YmanKDzgf/lVMaAs3hEIU+fRxTqaV800oFNMjzqd6Iz
eDHyH6Ft+uBWLEh9W6WPjF0E+sCtrVI0P6CyCch5chl8qa9hlnggA63MTQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFDX8NOyR0obug/5VaWRijrzT91i+MB8GA1UdIwQY
MBaAFDBtYYNVvYk391u0ZQu1wa9w+aEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8zY2RlOWItMzcwNS00ZGMzLThkN2Ut
NTE2ZmZkODczNzZjLzEvTmZ3MDdKSFNodTZEX2xWcFpHS092TlAzV0w0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8zY2RlOWItMzcwNS00ZGMzLThkN2UtNTE2ZmZkODczNzZj
LzEvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAK5m8wD
BAC5m84wDAMEArm6tAMEALm6tjANBgkqhkiG9w0BAQsFAAOCAQEAHxkVaxBwDVvs
F2gtie6zgPXfMcGM9vPERrp5QnteB2PP+kiOzm8uFWo8E4Dsiq3+WnX6CXzb/DVT
VQNVrMIbxPOfRHbPiHgEmSqLiukapcO2rYYBiwc28yEIxOIkFAEZ4sb62eGXAFPC
6DuHPnFhFg4YcZkKruxzUrKKj5xSPuuUGoAdNVMpSxheql2gTviPumDLw5UhEe3H
rC9tSbdIAUzujB8+0qL9PIM6C5ZGuMVSOEAZ34sToLPatoFzSnsDdk2c7jbpaf40
dR8Q6xferaapCfGLOYk1/nMr/fxGVkHFATMG9yAG5G/BkMfAv7Kpd/guIorMmSj6
wYF8hjG8RQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:33:32 2024 by rpki-client on console-ams.rpki-client.org