Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/NwDpJBiano0opNHdd8QhR9293KY.roa
File: NwDpJBiano0opNHdd8QhR9293KY.roa (raw, json)
Hash identifier: vniuADuE3EZrEK72TUAYwh6JQ4lV3zKYMIWY0nffXt0=
Subject key identifier: 37:00:E9:24:18:9A:9E:8D:28:A4:D1:DD:77:C4:21:47:DD:BD:DC:A6
Certificate issuer: /CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Certificate serial: 018CC348A4E232BD23D1614954F216B558D3
Authority key identifier: CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/NwDpJBiano0opNHdd8QhR9293KY.roa
Signing time: Mon 01 Jan 2024 04:29:27 +0000
ROA not before: Mon 01 Jan 2024 04:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 195.68.242.0/24 maxlen: 24
195.68.243.0/24 maxlen: 24
195.68.242.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:a4:e2:32:bd:23:d1:61:49:54:f2:16:b5:58:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Validity
Not Before: Jan 1 04:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3700e924189a9e8d28a4d1dd77c42147ddbddca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7b:8e:fc:03:f9:2c:52:48:3e:fd:30:a7:d7:
7a:a4:b2:72:6f:41:1b:1a:af:62:a4:a9:04:33:a2:
e6:09:2c:7b:7d:d5:dd:b0:99:dd:5d:d4:18:50:37:
fa:fc:77:12:b6:d3:99:70:86:96:ef:01:ba:ad:0d:
43:33:d6:8b:a4:96:2e:ef:a6:de:ff:06:df:22:a3:
e2:02:e0:d8:ce:7f:bc:8d:5c:9d:ae:00:22:f9:be:
72:f0:e4:4d:15:cc:51:43:81:47:2d:fa:81:10:a3:
4d:e7:db:e8:fd:4a:4f:60:0c:57:f3:b3:8e:3a:53:
ec:51:cc:3b:1a:57:09:65:88:49:1f:5d:9c:02:71:
e9:c3:23:5f:8f:c5:ec:66:be:2f:d8:03:70:dd:29:
d8:c3:e9:07:d9:da:84:9c:99:4d:e5:0f:6f:63:fa:
95:2c:d2:c3:70:53:60:bf:a8:06:ff:d2:04:6e:c1:
b0:38:77:98:70:90:e6:ac:8e:87:d7:d9:8b:05:a2:
d8:d1:f9:57:fe:ce:9b:97:be:b8:e1:de:37:db:2a:
06:f2:df:1b:ee:92:d9:fb:83:e5:98:32:3b:74:fe:
24:d0:82:5d:c2:f7:ce:cc:39:1f:3d:c6:66:00:48:
82:2f:3a:9e:9c:7c:fc:4a:b4:1e:d7:2a:b3:02:6f:
71:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:00:E9:24:18:9A:9E:8D:28:A4:D1:DD:77:C4:21:47:DD:BD:DC:A6
X509v3 Authority Key Identifier:
keyid:CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/NwDpJBiano0opNHdd8QhR9293KY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.68.242.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:10:a5:1d:1f:6a:ec:e3:33:16:70:55:f9:e4:26:d4:d1:7d:
62:0a:03:3c:94:49:6f:a8:c3:1a:5d:13:76:02:a2:dd:a3:e8:
0e:0e:12:4f:4f:8b:bb:3e:c9:5c:13:4f:b6:c9:01:49:d8:46:
63:da:e4:ec:d2:db:fb:a4:66:bf:19:b3:b6:73:02:7a:7c:e8:
88:63:8f:b7:d2:22:c3:15:6e:09:e2:00:ff:4c:60:fc:6b:b0:
26:b1:37:85:63:36:db:b9:e7:43:72:7c:61:63:cb:a5:b3:c3:
0f:8c:61:08:ea:81:95:9e:3e:8a:8d:cd:b0:9c:01:58:2b:ef:
f5:74:3f:2c:f7:00:47:2c:21:d6:33:ee:53:0e:d6:a0:cc:0f:
08:41:d7:72:23:c5:bb:54:3c:7d:87:ed:2f:42:b1:49:5f:95:
39:ac:e8:4d:08:3d:94:56:a6:9f:2a:9e:47:d7:1f:c4:f7:d0:
cf:1a:28:de:dd:b1:3b:db:c3:4f:68:90:00:40:55:82:6f:a0:
03:bc:e1:4d:0b:6d:6a:b6:ec:04:3a:47:7e:5b:5c:f2:46:54:
d4:4b:99:0d:65:18:13:a5:f9:c8:36:7d:aa:aa:33:23:79:dc:
50:5f:65:4e:85:4d:a0:03:7f:1b:ac:63:0d:06:c4:2b:9d:70:
9b:81:5c:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSKTiMr0j0WFJVPIWtVjTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNWQ0NTYwNDQ4Zjc4YTRkY2RjYjc5MWEwN2RhZDIxNjNh
MDhjZGYwHhcNMjQwMTAxMDQyOTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzAwZTkyNDE4OWE5ZThkMjhhNGQxZGQ3N2M0MjE0N2RkYmRkY2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHuO/AP5LFJIPv0wp9d6pLJyb0Eb
Gq9ipKkEM6LmCSx7fdXdsJndXdQYUDf6/HcSttOZcIaW7wG6rQ1DM9aLpJYu76be
/wbfIqPiAuDYzn+8jVydrgAi+b5y8ORNFcxRQ4FHLfqBEKNN59vo/UpPYAxX87OO
OlPsUcw7GlcJZYhJH12cAnHpwyNfj8XsZr4v2ANw3SnYw+kH2dqEnJlN5Q9vY/qV
LNLDcFNgv6gG/9IEbsGwOHeYcJDmrI6H19mLBaLY0flX/s6bl7644d432yoG8t8b
7pLZ+4PlmDI7dP4k0IJdwvfOzDkfPcZmAEiCLzqenHz8SrQe1yqzAm9xXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDcA6SQYmp6NKKTR3XfEIUfdvdymMB8GA1UdIwQY
MBaAFM5dRWBEj3ik3Ny3kaB9rSFjoIzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemwxRllFU1BlS1RjM0xlUm9IMnRJV09nak44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yN2NiZDAtYTdiOS00NWZiLTk5NTQt
NzhkMTE0NGFkOTY3LzEvTndEcEpCaWFubzBvcE5IZGQ4UWhSOTI5M0tZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yN2NiZDAtYTdiOS00NWZiLTk5NTQtNzhkMTE0NGFkOTY3
LzEvemwxRllFU1BlS1RjM0xlUm9IMnRJV09nak44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw0TyMA0G
CSqGSIb3DQEBCwUAA4IBAQALEKUdH2rs4zMWcFX55CbU0X1iCgM8lElvqMMaXRN2
AqLdo+gODhJPT4u7PslcE0+2yQFJ2EZj2uTs0tv7pGa/GbO2cwJ6fOiIY4+30iLD
FW4J4gD/TGD8a7AmsTeFYzbbuedDcnxhY8uls8MPjGEI6oGVnj6Kjc2wnAFYK+/1
dD8s9wBHLCHWM+5TDtagzA8IQddyI8W7VDx9h+0vQrFJX5U5rOhNCD2UVqafKp5H
1x/E99DPGije3bE728NPaJAAQFWCb6ADvOFNC21qtuwEOkd+W1zyRlTUS5kNZRgT
pfnINn2qqjMjedxQX2VOhU2gA38brGMNBsQrnXCbgVzq
-----END CERTIFICATE-----
Generated at Fri May 3 06:33:51 2024 by rpki-client on console-fra.rpki-client.org