Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/RNVubAzaEFjTweliZnLphHguFE4.roa
File: RNVubAzaEFjTweliZnLphHguFE4.roa (raw, json)
Hash identifier: zb3RT06K5NVf6/uz4zR+3BusK4DbK/puqQg99xIYOk4=
Subject key identifier: 44:D5:6E:6C:0C:DA:10:58:D3:C1:E9:62:66:72:E9:84:78:2E:14:4E
Certificate issuer: /CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
Certificate serial: 018CC7276D9AC4A20B88616B497608A0EF54
Authority key identifier: 65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/RNVubAzaEFjTweliZnLphHguFE4.roa
Signing time: Mon 01 Jan 2024 22:31:39 +0000
ROA not before: Mon 01 Jan 2024 22:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210021
IP address blocks: 185.100.23.0/24 maxlen: 24
185.100.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:6d:9a:c4:a2:0b:88:61:6b:49:76:08:a0:ef:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
Validity
Not Before: Jan 1 22:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44d56e6c0cda1058d3c1e9626672e984782e144e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0b:61:cb:84:18:32:5a:3c:28:91:3f:ec:70:
f2:aa:38:00:d1:57:2f:b3:f7:a8:50:3f:17:37:ff:
62:70:d5:2f:66:d6:f0:e8:5c:13:70:ed:fc:75:33:
21:39:b9:fb:37:89:2b:26:60:39:ed:ab:dd:3f:7a:
7b:cf:23:13:87:71:49:72:9c:2a:8e:f6:aa:0d:3b:
2e:95:17:8e:46:12:59:a1:f4:a8:54:bb:6a:2a:82:
e6:3e:80:62:ea:04:29:89:15:3d:79:99:1e:7d:40:
e4:28:b1:d4:90:a6:f4:44:6e:81:29:35:ba:28:16:
3d:85:79:ac:be:7f:e1:a5:34:0f:06:6f:41:19:21:
06:1b:d6:54:9e:6d:cf:7a:07:04:df:e7:5a:5e:87:
81:c7:fb:2f:d6:b4:8b:34:d6:50:65:83:d0:f8:b4:
7c:6e:ac:c2:17:32:6c:d3:3a:fa:3a:ec:13:10:db:
57:5d:a9:75:61:82:60:70:25:5d:84:5a:91:12:af:
05:a2:d3:b7:9c:63:9f:32:9e:f7:8e:a6:0b:0f:58:
40:71:34:ac:d5:b2:fe:36:93:43:81:fb:d2:1f:c5:
fb:66:c1:72:4b:32:03:3f:13:4a:9a:40:99:58:e4:
3e:c5:a6:6d:27:1f:aa:c0:72:59:fd:23:06:ff:df:
d7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D5:6E:6C:0C:DA:10:58:D3:C1:E9:62:66:72:E9:84:78:2E:14:4E
X509v3 Authority Key Identifier:
keyid:65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/RNVubAzaEFjTweliZnLphHguFE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.22.0/23
Signature Algorithm: sha256WithRSAEncryption
09:f8:82:85:9d:56:68:c7:78:dd:27:04:a1:8c:56:3e:5e:b3:
b3:60:30:62:77:e4:73:cb:84:d0:89:63:9c:c0:65:7c:d1:40:
1b:5f:0a:e7:ff:32:d4:31:e9:0e:79:17:fc:b9:52:00:c4:f2:
1a:4d:3e:0b:43:6f:43:3f:d8:ef:f9:19:0c:ea:71:18:96:25:
d6:47:1d:f0:38:5f:1d:28:9f:cc:32:a6:d9:19:24:ff:56:dd:
fb:24:7a:08:5a:c3:bd:17:a3:cd:38:22:3b:d1:69:75:45:d2:
7a:c1:45:7f:5c:21:a3:43:b8:cf:0b:30:04:06:28:db:ef:be:
f0:1d:38:73:38:76:14:14:0c:31:2d:0c:dc:2f:bc:18:28:38:
6f:c4:5f:d3:f7:f8:dc:78:20:76:0d:0b:5b:d5:4a:a3:0d:b7:
1a:b8:8e:99:2f:57:63:d0:68:1d:4e:c5:a8:1b:0f:b6:73:c7:
9d:e7:93:1c:38:4d:78:96:bb:ba:21:e0:94:90:86:87:4b:e3:
c0:1e:de:ca:f7:56:6e:44:d2:9f:0c:38:19:cc:c5:5e:90:8c:
13:5e:83:81:d9:52:d8:bb:ed:46:dc:70:7b:75:b6:e7:ae:db:
b8:43:8d:77:94:c7:99:a5:e9:10:0a:39:14:12:92:4c:2f:50:
7c:35:42:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJ22axKILiGFrSXYIoO9UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NWFlZjNjZWYzZDlhZmEwMjdkYjMzNTc5ZjRhMWZlOGFk
OTFjNmYwHhcNMjQwMTAxMjIzMTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGQ1NmU2YzBjZGExMDU4ZDNjMWU5NjI2NjcyZTk4NDc4MmUxNDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAthy4QYMlo8KJE/7HDyqjgA0Vcv
s/eoUD8XN/9icNUvZtbw6FwTcO38dTMhObn7N4krJmA57avdP3p7zyMTh3FJcpwq
jvaqDTsulReORhJZofSoVLtqKoLmPoBi6gQpiRU9eZkefUDkKLHUkKb0RG6BKTW6
KBY9hXmsvn/hpTQPBm9BGSEGG9ZUnm3PegcE3+daXoeBx/sv1rSLNNZQZYPQ+LR8
bqzCFzJs0zr6OuwTENtXXal1YYJgcCVdhFqREq8FotO3nGOfMp73jqYLD1hAcTSs
1bL+NpNDgfvSH8X7ZsFySzIDPxNKmkCZWOQ+xaZtJx+qwHJZ/SMG/9/X9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFETVbmwM2hBY08HpYmZy6YR4LhROMB8GA1UdIwQY
MBaAFGVa7zzvPZr6An2zNXn0of6K2RxvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlZydlBPODltdm9DZmJNMWVmU2hfb3JaSEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lMmVlNTEtMTUyMy00MzZlLWFjNzUt
ZWY2YmQyNmEwMzA1LzEvUk5WdWJBemFFRmpUd2VsaVpuTHBoSGd1RkU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lMmVlNTEtMTUyMy00MzZlLWFjNzUtZWY2YmQyNmEwMzA1
LzEvWlZydlBPODltdm9DZmJNMWVmU2hfb3JaSEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuWQWMA0G
CSqGSIb3DQEBCwUAA4IBAQAJ+IKFnVZox3jdJwShjFY+XrOzYDBid+Rzy4TQiWOc
wGV80UAbXwrn/zLUMekOeRf8uVIAxPIaTT4LQ29DP9jv+RkM6nEYliXWRx3wOF8d
KJ/MMqbZGST/Vt37JHoIWsO9F6PNOCI70Wl1RdJ6wUV/XCGjQ7jPCzAEBijb777w
HThzOHYUFAwxLQzcL7wYKDhvxF/T9/jceCB2DQtb1UqjDbcauI6ZL1dj0GgdTsWo
Gw+2c8ed55McOE14lru6IeCUkIaHS+PAHt7K91ZuRNKfDDgZzMVekIwTXoOB2VLY
u+1G3HB7dbbnrtu4Q413lMeZpekQCjkUEpJML1B8NUJL
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:38:25 2024 by rpki-client on console-fra.rpki-client.org