Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NjoiF7HM1o76U65L_HatsXm4cUw.roa
File: NjoiF7HM1o76U65L_HatsXm4cUw.roa (raw, json)
Hash identifier: /qeZtIkCBWAAASznRkvaKoLXbfyMEcsu/8AYsqxwjVE=
Subject key identifier: 36:3A:22:17:B1:CC:D6:8E:FA:53:AE:4B:FC:76:AD:B1:79:B8:71:4C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019344BDCF91D4FB6AE1EE57C3EE0EDE1E61
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NjoiF7HM1o76U65L_HatsXm4cUw.roa
Signing time: Tue 19 Nov 2024 14:05:10 +0000
ROA not before: Tue 19 Nov 2024 14:05:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215439
IP address blocks: 31.13.208.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.133.251.0/24 maxlen: 24
83.143.112.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
87.120.165.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.186.0/24 maxlen: 24
93.123.84.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:44:bd:cf:91:d4:fb:6a:e1:ee:57:c3:ee:0e:de:1e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 19 14:05:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=363a2217b1ccd68efa53ae4bfc76adb179b8714c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e8:e7:44:fd:9c:9d:b8:2b:38:42:39:3b:51:
b7:74:ed:9c:a3:8e:e1:af:13:f1:01:84:f1:df:fb:
7e:bb:b8:5e:65:50:8b:c3:ba:58:f6:c1:c5:91:7a:
74:7a:05:da:c3:02:38:12:ff:e6:c0:b8:95:45:25:
eb:91:7c:c2:fb:d8:44:cd:19:74:6c:07:4e:73:17:
31:f2:bc:2f:2c:ac:00:07:70:f9:bb:a7:75:c4:f6:
96:68:4e:73:03:45:b5:c0:af:35:5c:15:9c:ac:05:
ce:f7:e0:f3:fb:75:55:c8:ab:c8:69:a0:bd:39:20:
0d:fb:8d:98:55:6d:2e:fc:c1:b1:2f:2e:b6:8c:26:
7d:21:8e:7a:b4:82:d3:d2:3f:4a:92:aa:8a:cf:f3:
8c:fd:f2:5a:28:bb:6f:a1:10:06:69:fd:6b:47:90:
a5:05:40:51:81:74:d7:01:58:30:bb:f6:c2:8d:5a:
38:0a:b8:21:3d:f1:b1:9f:14:d0:48:e4:b9:b3:d5:
9a:3e:2f:6f:49:9c:8d:28:d2:fa:fe:8d:7b:ee:b0:
96:94:27:72:6c:37:67:d6:fa:7a:43:a4:12:cd:c2:
d2:08:f4:bf:1b:11:95:9f:89:1c:0d:b4:2b:dc:b2:
b4:20:6b:82:4a:23:24:59:c6:1c:e5:8a:c0:26:46:
a2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3A:22:17:B1:CC:D6:8E:FA:53:AE:4B:FC:76:AD:B1:79:B8:71:4C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NjoiF7HM1o76U65L_HatsXm4cUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.208.0/24
45.66.228.0/24
45.133.251.0/24
83.143.112.0/24
84.21.173.0/24
87.120.165.0-87.120.166.255
87.120.186.0/24
93.123.84.0/24
171.22.31.0/24
185.246.223.0/24
193.58.121.0/24
193.222.99.0/24
Signature Algorithm: sha256WithRSAEncryption
42:e6:31:99:52:52:7d:3f:8f:ca:f8:61:1f:0a:74:88:8c:3b:
26:6b:32:50:61:9e:f3:92:e6:2b:8c:99:51:c9:57:73:6a:ef:
3e:5c:8f:37:4d:90:4e:6f:46:59:18:3a:5f:d3:bb:b0:2d:4b:
90:a1:13:62:c3:48:36:45:24:c5:6b:6a:19:ca:fd:6d:17:f0:
da:b3:a8:a3:c5:73:57:50:84:6c:e9:d2:e6:f0:fa:0b:05:23:
3f:5d:e7:a1:8d:1d:c6:ab:02:ae:62:cb:33:be:7d:7a:84:d2:
98:73:cc:af:8a:c2:2b:f0:97:e4:9c:ef:15:98:0d:f5:48:f5:
0f:ff:33:37:9b:06:8e:bd:43:02:82:3a:fc:53:5d:2d:96:8c:
9c:9b:76:29:5b:cb:86:e8:3b:3a:28:c9:d3:d6:d6:9d:6a:05:
f0:38:a1:fb:41:9e:55:f3:ab:e5:f0:82:54:27:63:1a:5d:c9:
f0:44:01:0c:55:40:27:e3:77:b7:3f:ef:7a:1c:fb:b3:fd:db:
47:3a:60:ce:37:22:68:91:a3:96:50:28:fb:3f:25:42:f5:6c:
c6:5f:cd:8b:4a:70:11:ed:b5:99:3b:28:ea:4a:4c:83:cf:8d:
00:26:41:73:81:ed:c7:22:72:c6:2c:11:25:22:96:38:d4:45:
cd:75:44:ea
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAZNEvc+R1Ptq4e5Xw+4O3h5hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQxMTE5MTQwNTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjNhMjIxN2IxY2NkNjhlZmE1M2FlNGJmYzc2YWRiMTc5Yjg3MTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkujnRP2cnbgrOEI5O1G3dO2co47h
rxPxAYTx3/t+u7heZVCLw7pY9sHFkXp0egXawwI4Ev/mwLiVRSXrkXzC+9hEzRl0
bAdOcxcx8rwvLKwAB3D5u6d1xPaWaE5zA0W1wK81XBWcrAXO9+Dz+3VVyKvIaaC9
OSAN+42YVW0u/MGxLy62jCZ9IY56tILT0j9KkqqKz/OM/fJaKLtvoRAGaf1rR5Cl
BUBRgXTXAVgwu/bCjVo4CrghPfGxnxTQSOS5s9WaPi9vSZyNKNL6/o177rCWlCdy
bDdn1vp6Q6QSzcLSCPS/GxGVn4kcDbQr3LK0IGuCSiMkWcYc5YrAJkaiTwIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFDY6IhexzNaO+lOuS/x2rbF5uHFMMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvTmpvaUY3SE0xbzc2VTY1TF9IYXRzWG00Y1V3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQAHw3QAwQA
LULkAwQALYX7AwQAU49wAwQAVBWtMAwDBABXeKUDBABXeKYDBABXeLoDBABde1QD
BACrFh8DBAC59t8DBADBOnkDBADB3mMwDQYJKoZIhvcNAQELBQADggEBAELmMZlS
Un0/j8r4YR8KdIiMOyZrMlBhnvOS5iuMmVHJV3Nq7z5cjzdNkE5vRlkYOl/Tu7At
S5ChE2LDSDZFJMVrahnK/W0X8NqzqKPFc1dQhGzp0ubw+gsFIz9d56GNHcarAq5i
yzO+fXqE0phzzK+Kwivwl+Sc7xWYDfVI9Q//MzebBo69QwKCOvxTXS2WjJybdilb
y4boOzooydPW1p1qBfA4oftBnlXzq+XwglQnYxpdyfBEAQxVQCfjd7c/73oc+7P9
20c6YM43ImiRo5ZQKPs/JUL1bMZfzYtKcBHttZk7KOpKTIPPjQAmQXOB7ccicsYs
ESUiljjURc11ROo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:15:16 2024 by rpki-client on console-ams.rpki-client.org