Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0NLDiSBkStRoiIp0kGbj7pK8U6M.roa
File: 0NLDiSBkStRoiIp0kGbj7pK8U6M.roa (raw, json)
Hash identifier: XOonw0c8lvH7ZUJvlPG2JcffnJTv6kLDQYS/49hUYC0=
Subject key identifier: D0:D2:C3:89:20:64:4A:D4:68:88:8A:74:90:66:E3:EE:92:BC:53:A3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E5A136B001D4C66FAF1DF5CC091BECED5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0NLDiSBkStRoiIp0kGbj7pK8U6M.roa
Signing time: Wed 20 Mar 2024 04:16:45 +0000
ROA not before: Wed 20 Mar 2024 04:16:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16125
IP address blocks: 87.120.192.0/23 maxlen: 23
87.121.62.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5a:13:6b:00:1d:4c:66:fa:f1:df:5c:c0:91:be:ce:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 20 04:16:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0d2c38920644ad468888a749066e3ee92bc53a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3a:ca:fe:5c:89:bf:13:47:af:c3:7f:e1:68:
9e:5b:ce:62:a8:c2:85:cb:09:48:34:22:63:58:c4:
2f:fe:b9:2f:17:cb:ae:30:d5:b6:3d:df:e8:05:d6:
d7:9b:e4:35:a7:d6:26:27:73:12:6f:84:38:16:d0:
07:55:1d:6f:1b:18:f0:b1:b9:33:5a:2b:2a:5d:5f:
15:a1:6a:94:1a:12:37:40:15:fa:f8:95:64:62:29:
f5:4c:15:b5:b2:5d:0b:1c:16:d2:b9:b7:18:5a:9b:
70:1f:43:f8:4a:7e:95:cf:ba:5e:91:08:dc:04:ea:
36:96:9b:bd:44:af:fc:ff:46:27:5b:ed:06:7f:dd:
ab:f8:b2:e1:d2:6f:cc:3a:57:e6:e4:e2:81:7f:2e:
1d:e4:53:09:06:da:0f:b6:e5:47:c1:0c:1f:e1:04:
63:6e:e3:1e:63:54:1a:4a:15:0b:27:c4:05:96:f1:
f2:fa:f1:3a:d3:39:6e:f6:d7:3b:c3:aa:e3:23:35:
20:73:fb:4a:fe:db:27:9a:02:30:76:02:d7:90:d1:
b9:3b:8c:ad:6c:ca:90:84:88:9a:c0:14:ea:d8:31:
a4:11:ff:b8:23:0b:6b:11:a0:2a:bc:b4:c2:b6:8b:
07:82:a0:6d:b4:07:94:35:69:a2:93:ea:78:c7:ab:
2d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D2:C3:89:20:64:4A:D4:68:88:8A:74:90:66:E3:EE:92:BC:53:A3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0NLDiSBkStRoiIp0kGbj7pK8U6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.192.0/23
87.121.62.0/23
Signature Algorithm: sha256WithRSAEncryption
48:4d:8d:cd:f4:8a:91:9c:b3:0d:31:6f:fb:a2:7e:3c:c5:a1:
86:d0:8f:25:84:1c:1b:92:32:69:2f:58:29:51:7a:a5:04:c4:
e5:15:51:50:1d:99:eb:f3:54:a6:6c:da:dd:27:cf:37:7b:36:
3f:6e:d5:01:50:cc:f2:ef:a1:d2:d2:f4:55:40:05:8e:37:4a:
e0:e2:16:41:44:c5:f2:62:7c:c1:a6:a8:f1:97:05:a3:d1:82:
51:da:f6:52:f6:d9:18:f2:06:b9:3d:82:2b:29:87:68:80:38:
60:20:4c:65:40:a8:4a:b9:ca:c8:93:1f:27:14:92:5b:d3:fe:
2b:22:a5:34:a6:7a:f7:36:51:cf:f2:40:61:41:cc:20:dd:86:
fa:db:cc:69:73:e9:69:e1:e5:99:e7:66:b1:85:07:7d:76:6f:
65:db:e5:10:ff:f8:b5:1c:b7:d2:cc:42:dd:31:4f:03:e1:42:
51:6d:23:a5:50:7b:37:6f:2e:84:75:ed:eb:c7:28:63:94:ee:
df:46:99:38:6b:32:ab:3a:b4:0d:db:86:fb:a1:ed:0d:a6:bc:
ce:5e:1a:bb:80:fb:78:b7:cb:89:ca:96:46:e1:f9:eb:cf:2f:
43:80:a3:68:e7:be:1b:b6:ca:c8:9b:47:6f:3b:a3:0d:c7:b9:
bc:62:3a:bf
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY5aE2sAHUxm+vHfXMCRvs7VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMzIwMDQxNjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGQyYzM4OTIwNjQ0YWQ0Njg4ODhhNzQ5MDY2ZTNlZTkyYmM1M2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTrK/lyJvxNHr8N/4WieW85iqMKF
ywlINCJjWMQv/rkvF8uuMNW2Pd/oBdbXm+Q1p9YmJ3MSb4Q4FtAHVR1vGxjwsbkz
WisqXV8VoWqUGhI3QBX6+JVkYin1TBW1sl0LHBbSubcYWptwH0P4Sn6Vz7pekQjc
BOo2lpu9RK/8/0YnW+0Gf92r+LLh0m/MOlfm5OKBfy4d5FMJBtoPtuVHwQwf4QRj
buMeY1QaShULJ8QFlvHy+vE60zlu9tc7w6rjIzUgc/tK/tsnmgIwdgLXkNG5O4yt
bMqQhIiawBTq2DGkEf+4IwtrEaAqvLTCtosHgqBttAeUNWmik+p4x6stYwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNDSw4kgZErUaIiKdJBm4+6SvFOjMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvME5MRGlTQmtTdFJvaUlwMGtHYmo3cEs4VTZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBV3jAAwQB
V3k+MA0GCSqGSIb3DQEBCwUAA4IBAQBITY3N9IqRnLMNMW/7on48xaGG0I8lhBwb
kjJpL1gpUXqlBMTlFVFQHZnr81SmbNrdJ883ezY/btUBUMzy76HS0vRVQAWON0rg
4hZBRMXyYnzBpqjxlwWj0YJR2vZS9tkY8ga5PYIrKYdogDhgIExlQKhKucrIkx8n
FJJb0/4rIqU0pnr3NlHP8kBhQcwg3Yb628xpc+lp4eWZ52axhQd9dm9l2+UQ//i1
HLfSzELdMU8D4UJRbSOlUHs3by6Ede3rxyhjlO7fRpk4azKrOrQN24b7oe0NprzO
Xhq7gPt4t8uJypZG4fnrzy9DgKNo574btsrIm0dvO6MNx7m8Yjq/
-----END CERTIFICATE-----
Generated at Sat Apr 27 17:58:05 2024 by rpki-client on console-ams.rpki-client.org