Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/6RNDY4xUvHsZt1zjUs5MZ7Xu8qM.roa
File: 6RNDY4xUvHsZt1zjUs5MZ7Xu8qM.roa (raw, json)
Hash identifier: sjOfx9PNWDtmZEXIak1+1yAhzwqeHs6Tw7Ww4QPjCpM=
Subject key identifier: E9:13:43:63:8C:54:BC:7B:19:B7:5C:E3:52:CE:4C:67:B5:EE:F2:A3
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018CC86F3DB68025FB73E3EB95023579C96D
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/6RNDY4xUvHsZt1zjUs5MZ7Xu8qM.roa
Signing time: Tue 02 Jan 2024 04:29:42 +0000
ROA not before: Tue 02 Jan 2024 04:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2601
IP address blocks: 45.9.31.0/24 maxlen: 24
193.28.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:3d:b6:80:25:fb:73:e3:eb:95:02:35:79:c9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 04:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e91343638c54bc7b19b75ce352ce4c67b5eef2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f4:f4:36:83:6c:a0:83:a4:16:04:f1:64:1b:
de:fc:2a:3a:7b:f1:33:b8:f2:57:f5:67:1f:83:35:
7f:22:27:e4:f6:30:3c:c1:c7:d2:5e:14:39:8e:14:
86:c8:79:e0:cf:2a:51:ac:d3:b9:c7:b8:2a:6b:34:
f6:e4:8d:38:6c:18:8f:10:a7:09:df:11:81:df:4b:
d7:2c:68:46:2d:8e:85:98:a6:15:b8:0f:a9:80:3a:
2e:ad:1d:ff:a6:4c:e8:87:d3:7b:87:8a:25:99:b8:
ea:54:85:e6:24:b0:a1:9e:72:67:fa:0e:37:74:9f:
85:fc:3d:c4:cc:3f:67:96:e7:91:59:fd:41:7b:97:
a4:b8:c3:e0:2d:b5:24:79:45:d3:47:2e:9e:e4:52:
3c:74:32:89:b3:ed:aa:90:e7:50:16:8b:e1:17:93:
07:e9:dd:ac:63:5f:5d:a4:e9:da:87:49:97:02:3e:
89:78:20:af:2a:ff:55:9a:f8:19:24:c2:03:39:c3:
ce:c6:ff:a3:44:41:a5:e1:d6:a8:ca:0c:72:62:51:
5c:2a:8a:7f:68:9d:01:0a:37:80:19:0d:ed:be:34:
4b:67:cb:0e:2d:cb:a8:43:39:81:fd:1e:b4:83:1c:
02:39:0f:35:e7:a9:7e:bd:19:66:30:20:0b:68:08:
cd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:13:43:63:8C:54:BC:7B:19:B7:5C:E3:52:CE:4C:67:B5:EE:F2:A3
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/6RNDY4xUvHsZt1zjUs5MZ7Xu8qM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.31.0/24
193.28.177.0/24
Signature Algorithm: sha256WithRSAEncryption
17:c7:81:b4:e6:e4:0a:70:2a:68:b6:a5:55:0c:8f:7c:ff:54:
ca:f6:b9:16:38:1e:2c:40:9b:0e:6a:05:b8:7a:ae:66:b7:69:
92:01:32:d3:90:bf:e3:25:1e:38:98:ae:c8:cc:fb:3e:69:60:
0a:01:e7:bf:45:4d:d8:ff:e7:60:dd:12:f5:1f:c6:c2:81:17:
b4:88:9d:fa:26:28:ad:d2:1c:f2:fa:99:c5:4b:a2:7d:84:6f:
ff:24:21:ac:c9:c9:fd:c9:60:0c:7c:af:8d:4f:e4:4e:3d:7b:
f2:ab:36:ae:00:b8:bf:f7:87:32:fe:ba:61:a0:32:73:34:66:
c4:7f:23:51:e2:2f:22:be:7c:d0:09:d1:df:4b:6b:c4:56:40:
df:31:71:0c:ff:99:d8:fd:5b:68:01:9e:b9:37:dc:39:53:ab:
f8:c9:c8:eb:06:74:a7:e3:03:7e:68:e9:f2:f4:99:e5:23:0c:
23:04:58:d1:b7:aa:4d:83:ce:4e:31:e4:c6:48:84:65:cc:b1:
18:f8:91:b5:d3:73:e0:03:f9:88:cf:c7:00:b2:4c:df:9b:8c:
59:33:e8:59:eb:ff:5f:c8:6e:23:a7:79:5c:29:a8:12:b5:c1:
06:6b:2b:2b:61:22:11:08:2c:d4:d8:ae:ff:4f:3a:39:e4:eb:
7b:40:cb:63
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzIbz22gCX7c+PrlQI1ecltMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjQwMTAyMDQyOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTEzNDM2MzhjNTRiYzdiMTliNzVjZTM1MmNlNGM2N2I1ZWVmMmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfT0NoNsoIOkFgTxZBve/Co6e/Ez
uPJX9WcfgzV/Iifk9jA8wcfSXhQ5jhSGyHngzypRrNO5x7gqazT25I04bBiPEKcJ
3xGB30vXLGhGLY6FmKYVuA+pgDourR3/pkzoh9N7h4olmbjqVIXmJLChnnJn+g43
dJ+F/D3EzD9nlueRWf1Be5ekuMPgLbUkeUXTRy6e5FI8dDKJs+2qkOdQFovhF5MH
6d2sY19dpOnah0mXAj6JeCCvKv9VmvgZJMIDOcPOxv+jREGl4daoygxyYlFcKop/
aJ0BCjeAGQ3tvjRLZ8sOLcuoQzmB/R60gxwCOQ8156l+vRlmMCALaAjNVQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOkTQ2OMVLx7Gbdc41LOTGe17vKjMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvNlJORFk0eFV2SHNadDF6alVzNU1aN1h1OHFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQkfAwQA
wRyxMA0GCSqGSIb3DQEBCwUAA4IBAQAXx4G05uQKcCpotqVVDI98/1TK9rkWOB4s
QJsOagW4eq5mt2mSATLTkL/jJR44mK7IzPs+aWAKAee/RU3Y/+dg3RL1H8bCgRe0
iJ36Jiit0hzy+pnFS6J9hG//JCGsycn9yWAMfK+NT+ROPXvyqzauALi/94cy/rph
oDJzNGbEfyNR4i8ivnzQCdHfS2vEVkDfMXEM/5nY/VtoAZ65N9w5U6v4ycjrBnSn
4wN+aOny9JnlIwwjBFjRt6pNg85OMeTGSIRlzLEY+JG103PgA/mIz8cAskzfm4xZ
M+hZ6/9fyG4jp3lcKagStcEGaysrYSIRCCzU2K7/Tzo55Ot7QMtj
-----END CERTIFICATE-----
Generated at Fri May 17 23:38:47 2024 by rpki-client on console-fra.rpki-client.org