Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9nZUtRk6ltQ-TvdcbAYWwxPobi4.roa
File: 9nZUtRk6ltQ-TvdcbAYWwxPobi4.roa (raw, json)
Hash identifier: f5m7dTn3zthaW9dA2TtH2y4jhxA5HHGThwiqpMjF6mM=
Subject key identifier: F6:76:54:B5:19:3A:96:D4:3E:4E:F7:5C:6C:06:16:C3:13:E8:6E:2E
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64AEDE6A13AC9FFF46C726B9C19209E
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9nZUtRk6ltQ-TvdcbAYWwxPobi4.roa
Signing time: Mon 01 Jan 2024 18:30:48 +0000
ROA not before: Mon 01 Jan 2024 18:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56951
IP address blocks: 85.120.31.0/24 maxlen: 24
85.120.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:ed:e6:a1:3a:c9:ff:f4:6c:72:6b:9c:19:20:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f67654b5193a96d43e4ef75c6c0616c313e86e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:29:af:d7:48:5f:c9:8a:54:9f:e6:70:e0:ad:
56:08:1f:2e:67:6e:24:f7:9f:1e:81:ae:93:13:d7:
70:f6:18:bd:2d:8d:d9:73:e9:38:68:80:1a:8a:03:
07:01:e5:9b:30:df:d6:b7:77:e6:9f:8c:74:be:74:
35:ab:cf:dd:2d:d7:f4:93:ff:7e:1e:b9:0d:a3:91:
43:db:24:89:53:43:90:4c:8a:7e:80:a8:11:e1:20:
32:a3:ac:52:e8:bd:85:ea:a1:c5:37:af:47:c0:d4:
3e:92:ac:ae:f6:82:9d:9b:60:8f:2a:37:c0:30:65:
c8:01:50:1b:f8:b3:ed:94:5b:0e:28:50:e9:65:e2:
70:f3:1a:22:20:7a:f7:da:08:19:95:d3:54:92:dd:
20:e6:2c:58:a9:2d:ca:58:2b:00:3e:50:28:ef:bb:
b8:ef:03:1c:26:25:2b:4a:8e:c1:55:4d:62:ae:ae:
32:3f:83:eb:dc:b5:38:a3:b8:30:f2:e8:a5:a7:8e:
8d:d1:ec:92:45:dc:9a:72:f3:74:5b:3b:d8:c4:1f:
7a:db:f3:94:57:d6:83:86:75:9e:1f:e2:34:75:aa:
c0:df:76:b0:81:8b:5a:d2:3d:d3:d2:67:c9:c6:fb:
68:d2:04:0c:a4:8f:bb:1b:32:fc:c1:70:db:01:a6:
d4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:76:54:B5:19:3A:96:D4:3E:4E:F7:5C:6C:06:16:C3:13:E8:6E:2E
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9nZUtRk6ltQ-TvdcbAYWwxPobi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.31.0-85.120.32.255
Signature Algorithm: sha256WithRSAEncryption
97:19:12:62:bc:7e:2a:cb:5f:30:60:a1:6a:ba:09:bf:0f:64:
ae:f4:09:1f:15:99:63:d2:9c:45:af:12:ad:4b:cb:5a:92:5c:
b5:8a:ff:61:0b:cc:b5:9c:2d:64:99:04:6b:1e:c3:30:fd:84:
a7:5a:18:15:c9:dd:65:12:91:45:2c:2e:17:99:43:98:17:75:
15:6d:32:45:b5:fe:73:49:e6:8e:e2:de:55:d2:10:60:e6:af:
53:e9:20:d6:a6:f5:94:14:2c:d1:e0:bf:ec:3e:48:c1:10:80:
1f:1a:24:84:7e:6d:88:d7:57:30:9a:79:ba:e6:e8:a3:ba:30:
c9:8d:e6:d5:13:44:9d:ee:0d:61:31:0b:9e:b4:6e:04:df:4a:
0d:ad:41:ff:59:e8:e8:e4:bc:2a:7d:88:60:3c:c2:c1:f1:69:
21:dd:e5:13:0e:77:3d:1c:b0:93:35:47:54:95:53:dd:43:a8:
2d:79:94:d8:dc:b0:15:26:49:24:f5:fc:9a:26:1e:1d:30:8b:
99:9f:38:b5:11:46:75:75:20:86:94:d6:b1:61:86:64:1f:bf:
1a:a4:33:e0:f9:9a:be:7c:bb:15:d9:d3:6c:01:90:b4:c3:08:
b9:9f:d6:81:90:c7:b5:65:6d:b9:7d:d7:71:91:b1:5a:29:bb:
14:87:59:cb
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzGSu3moTrJ//RscmucGSCeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjQwMTAxMTgzMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjc2NTRiNTE5M2E5NmQ0M2U0ZWY3NWM2YzA2MTZjMzEzZTg2ZTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCmv10hfyYpUn+Zw4K1WCB8uZ24k
958ega6TE9dw9hi9LY3Zc+k4aIAaigMHAeWbMN/Wt3fmn4x0vnQ1q8/dLdf0k/9+
HrkNo5FD2ySJU0OQTIp+gKgR4SAyo6xS6L2F6qHFN69HwNQ+kqyu9oKdm2CPKjfA
MGXIAVAb+LPtlFsOKFDpZeJw8xoiIHr32ggZldNUkt0g5ixYqS3KWCsAPlAo77u4
7wMcJiUrSo7BVU1irq4yP4Pr3LU4o7gw8uilp46N0eySRdyacvN0WzvYxB962/OU
V9aDhnWeH+I0darA33awgYta0j3T0mfJxvto0gQMpI+7GzL8wXDbAabUeQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFPZ2VLUZOpbUPk73XGwGFsMT6G4uMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvOW5aVXRSazZsdFEtVHZkY2JBWVd3eFBvYmk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABVeB8D
BABVeCAwDQYJKoZIhvcNAQELBQADggEBAJcZEmK8firLXzBgoWq6Cb8PZK70CR8V
mWPSnEWvEq1Ly1qSXLWK/2ELzLWcLWSZBGsewzD9hKdaGBXJ3WUSkUUsLheZQ5gX
dRVtMkW1/nNJ5o7i3lXSEGDmr1PpINam9ZQULNHgv+w+SMEQgB8aJIR+bYjXVzCa
ebrm6KO6MMmN5tUTRJ3uDWExC560bgTfSg2tQf9Z6OjkvCp9iGA8wsHxaSHd5RMO
dz0csJM1R1SVU91DqC15lNjcsBUmSST1/JomHh0wi5mfOLURRnV1IIaU1rFhhmQf
vxqkM+D5mr58uxXZ02wBkLTDCLmf1oGQx7Vlbbl913GRsVopuxSHWcs=
-----END CERTIFICATE-----
Generated at Sun Jun 2 18:01:21 2024 by rpki-client on console-fra.rpki-client.org