Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/N9EVrYjXEYkOUtGiVWG-PNTgTMU.roa
File: N9EVrYjXEYkOUtGiVWG-PNTgTMU.roa (raw, json)
Hash identifier: hX/s64P86jCcCknMLmwRLC1IKp0JAkeMrSRwKo/Lp6E=
Subject key identifier: 37:D1:15:AD:88:D7:11:89:0E:52:D1:A2:55:61:BE:3C:D4:E0:4C:C5
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018E394F58B89E5DAF8E41DD1C138B0EF0F1
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/N9EVrYjXEYkOUtGiVWG-PNTgTMU.roa
Signing time: Wed 13 Mar 2024 19:34:45 +0000
ROA not before: Wed 13 Mar 2024 19:34:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 81.180.112.0/20 maxlen: 24
81.181.54.0/24 maxlen: 24
81.181.55.0/24 maxlen: 24
81.181.56.0/24 maxlen: 24
81.181.57.0/24 maxlen: 24
81.181.58.0/24 maxlen: 24
81.181.59.0/24 maxlen: 24
81.181.60.0/24 maxlen: 24
81.181.61.0/24 maxlen: 24
81.181.62.0/24 maxlen: 24
81.181.63.0/24 maxlen: 24
85.122.160.0/20 maxlen: 24
85.122.192.0/19 maxlen: 24
85.122.224.0/22 maxlen: 24
85.122.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:39:4f:58:b8:9e:5d:af:8e:41:dd:1c:13:8b:0e:f0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Mar 13 19:34:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37d115ad88d711890e52d1a25561be3cd4e04cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:39:9a:4a:7b:1b:b8:36:72:0f:0f:17:7c:24:
c7:66:4f:46:04:17:69:59:41:81:86:22:a9:ab:01:
8b:41:fb:b3:4e:5e:bc:d9:c9:b2:04:bc:63:35:b6:
66:f8:e6:8c:77:2d:d5:64:5e:02:5e:14:c6:b1:4e:
b4:0e:5a:ce:fa:1a:f5:82:06:be:7c:87:86:18:d3:
f8:aa:55:7e:3d:f6:27:1c:eb:f3:2f:7d:aa:b2:a6:
47:a8:9d:e7:d9:fe:c5:1c:87:af:f2:f9:d2:63:72:
fc:0c:de:dd:4d:f0:c0:eb:29:12:fd:3b:59:8d:ab:
0b:7a:d5:99:25:94:3c:f8:e2:64:db:29:88:9f:6b:
29:39:83:96:db:96:bd:28:7a:02:d1:fa:24:d2:63:
6a:a2:6f:68:46:4e:7b:84:6d:5a:7e:21:62:a4:57:
6c:38:8f:0b:6e:28:85:ba:9d:73:d5:1d:aa:12:e4:
4e:7e:46:43:c2:47:96:cd:aa:98:0b:20:06:c2:70:
cb:1e:ee:72:5a:df:1c:af:b8:93:37:a9:63:10:9f:
c2:3e:82:05:83:75:c3:3b:21:89:ce:fb:a3:e1:07:
a2:26:f1:7b:f0:d9:f9:dc:88:fb:03:9b:3f:43:44:
e7:e7:09:4a:33:80:f4:7d:37:48:c9:43:ff:db:33:
71:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D1:15:AD:88:D7:11:89:0E:52:D1:A2:55:61:BE:3C:D4:E0:4C:C5
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/N9EVrYjXEYkOUtGiVWG-PNTgTMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.112.0/20
81.181.54.0-81.181.63.255
85.122.160.0/20
85.122.192.0-85.122.228.255
Signature Algorithm: sha256WithRSAEncryption
8b:22:61:dc:31:f7:8a:33:83:8b:d8:1c:69:4d:72:f4:7d:32:
e7:9b:53:3d:5d:2a:b2:6d:9e:21:26:02:51:b0:5a:ab:08:ec:
62:b1:5e:14:1d:06:c3:25:e9:4b:66:41:e1:ff:5f:18:2d:7a:
65:a7:3b:4c:3a:8d:48:a2:f9:32:32:69:bc:a4:18:cf:fa:46:
6c:4d:d5:73:1d:f3:5b:0e:ba:40:54:73:66:1e:8b:f9:4b:c0:
72:d7:f3:77:4f:c0:04:77:bf:7c:c4:0a:e4:9f:97:32:92:52:
be:6e:95:95:84:23:f3:4b:ac:b4:63:9e:ea:d3:85:90:a4:27:
ae:b4:12:f6:50:0a:50:2e:79:61:5b:4f:d6:5c:a6:b1:c8:cf:
cd:ad:8a:c2:4a:65:d7:8d:9b:32:2f:5b:52:ff:8c:ca:35:14:
6d:f4:99:4b:49:31:98:f9:8d:55:0a:53:7b:a4:5f:2a:f7:e3:
62:6b:98:d5:63:ce:e2:4b:38:f5:e1:e8:17:60:c1:26:61:ef:
5e:9f:bd:12:65:22:4c:a0:37:92:22:a9:21:1c:9e:d1:ed:f6:
52:7a:f4:07:34:f0:24:75:41:1b:9e:64:98:4a:3f:8f:14:fb:
06:55:6c:1b:fc:83:8f:42:c1:a2:4a:1c:62:7a:a8:46:9b:16:
f1:82:bc:ac
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAY45T1i4nl2vjkHdHBOLDvDxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjQwMzEzMTkzNDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2QxMTVhZDg4ZDcxMTg5MGU1MmQxYTI1NTYxYmUzY2Q0ZTA0Y2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jmaSnsbuDZyDw8XfCTHZk9GBBdp
WUGBhiKpqwGLQfuzTl682cmyBLxjNbZm+OaMdy3VZF4CXhTGsU60DlrO+hr1gga+
fIeGGNP4qlV+PfYnHOvzL32qsqZHqJ3n2f7FHIev8vnSY3L8DN7dTfDA6ykS/TtZ
jasLetWZJZQ8+OJk2ymIn2spOYOW25a9KHoC0fok0mNqom9oRk57hG1afiFipFds
OI8LbiiFup1z1R2qEuROfkZDwkeWzaqYCyAGwnDLHu5yWt8cr7iTN6ljEJ/CPoIF
g3XDOyGJzvuj4QeiJvF78Nn53Ij7A5s/Q0Tn5wlKM4D0fTdIyUP/2zNxoQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFDfRFa2I1xGJDlLRolVhvjzU4EzFMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvTjlFVnJZalhFWWtPVXRHaVZXRy1QTlRnVE1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQEUbRwMAwD
BAFRtTYDBAZRtQADBARVeqAwDAMEBlV6wAMEAFV65DANBgkqhkiG9w0BAQsFAAOC
AQEAiyJh3DH3ijODi9gcaU1y9H0y55tTPV0qsm2eISYCUbBaqwjsYrFeFB0GwyXp
S2ZB4f9fGC16Zac7TDqNSKL5MjJpvKQYz/pGbE3Vcx3zWw66QFRzZh6L+UvActfz
d0/ABHe/fMQK5J+XMpJSvm6VlYQj80ustGOe6tOFkKQnrrQS9lAKUC55YVtP1lym
scjPza2Kwkpl142bMi9bUv+MyjUUbfSZS0kxmPmNVQpTe6RfKvfjYmuY1WPO4ks4
9eHoF2DBJmHvXp+9EmUiTKA3kiKpIRye0e32Unr0BzTwJHVBG55kmEo/jxT7BlVs
G/yDj0LBokocYnqoRpsW8YK8rA==
-----END CERTIFICATE-----
Generated at Sat Apr 27 18:02:29 2024 by rpki-client on console-ams.rpki-client.org