Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/m5ejYZVBxckTygdx8tqaue-4vaY.roa
File: m5ejYZVBxckTygdx8tqaue-4vaY.roa (raw, json)
Hash identifier: ugrSRoiMEWVZAWsEKDbk12cwAi1QG4LAfmNGi8S6ngA=
Subject key identifier: 9B:97:A3:61:95:41:C5:C9:13:CA:07:71:F2:DA:9A:B9:EF:B8:BD:A6
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018CC86F3EC5627118189DAC0AB854F2CE24
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/m5ejYZVBxckTygdx8tqaue-4vaY.roa
Signing time: Tue 02 Jan 2024 04:29:42 +0000
ROA not before: Tue 02 Jan 2024 04:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35042
IP address blocks: 77.83.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:3e:c5:62:71:18:18:9d:ac:0a:b8:54:f2:ce:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 04:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b97a3619541c5c913ca0771f2da9ab9efb8bda6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d3:ae:e9:9f:4a:d4:e2:42:00:99:2f:df:e3:
ba:51:ee:85:3f:47:88:e6:2a:54:01:3b:99:0b:eb:
65:4e:b0:85:86:3c:d9:da:eb:f3:6a:fd:eb:8a:87:
e5:5a:7c:ec:6f:06:f7:3b:e1:3a:d6:db:ab:89:73:
bd:91:a7:3e:95:94:88:06:f2:29:9f:3d:d2:18:78:
1c:8e:15:75:9f:16:a6:ed:21:f2:7f:1c:9a:75:27:
67:68:d5:1a:f4:47:da:cc:a2:61:f7:24:66:73:80:
cb:6a:6d:6d:1a:bf:11:07:58:59:18:00:56:88:ff:
a4:13:e1:b2:73:c7:b2:54:4f:c5:64:39:82:1f:71:
c3:2a:11:a1:c2:f2:b4:13:88:ba:7e:af:e9:c8:03:
14:74:6c:cd:41:7d:ab:b8:b0:85:18:24:55:71:12:
ec:ff:66:17:86:fb:16:57:7d:71:d3:32:3b:61:97:
6d:3d:2d:59:cb:f3:e4:ff:89:be:62:ab:62:6c:7a:
43:a9:ea:7f:cf:cd:44:05:13:54:c7:53:09:9f:4a:
68:0b:82:b1:43:6d:aa:6a:c9:a5:42:fb:c4:9b:ee:
07:cc:61:12:17:b0:0e:64:10:f4:25:cf:5d:c8:e1:
b5:62:da:85:08:f9:fd:6c:c6:95:c4:55:2a:e8:3d:
51:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:97:A3:61:95:41:C5:C9:13:CA:07:71:F2:DA:9A:B9:EF:B8:BD:A6
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/m5ejYZVBxckTygdx8tqaue-4vaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.36.0/24
Signature Algorithm: sha256WithRSAEncryption
04:25:8e:0e:28:b0:1a:37:58:3c:e8:9d:41:74:b1:0b:ea:e2:
c0:e9:f8:b4:c6:b7:fa:b5:f0:f9:e5:d6:11:f1:02:01:f6:aa:
9c:1d:ff:3a:05:a8:86:68:f2:84:48:54:d3:f1:e9:95:42:40:
af:a3:f2:d0:db:32:49:44:6b:c2:a7:0d:b7:1a:89:7b:19:d2:
6e:5a:77:a0:10:fe:8a:15:34:e0:c6:b4:e4:69:68:dd:2c:e6:
87:ec:1a:c4:6e:a2:13:82:16:a1:07:21:05:b1:4a:66:68:2f:
73:71:63:b1:8a:41:76:d5:15:c9:1f:63:fd:fe:f7:7d:ea:98:
33:8f:74:85:02:8a:5e:9c:a7:09:1e:fe:cd:5c:f8:5e:04:d4:
a8:11:a1:83:6a:58:c7:4e:5d:01:00:2a:d3:84:3c:89:1f:2a:
9d:a7:5b:5d:30:b5:e4:b4:07:e0:29:c0:d2:5a:0f:38:70:2f:
f1:24:08:8d:28:c1:ef:86:b6:5b:9f:89:92:d2:fe:fc:5a:7c:
4e:df:74:93:ac:35:12:7b:39:2d:18:83:cc:84:4e:84:2f:f6:
cc:f7:d3:a3:ca:8a:c4:b8:39:35:c7:c6:30:f1:88:a2:84:ed:
d2:d6:b1:5c:18:d9:c9:f2:ea:20:20:78:96:32:38:8d:bd:1c:
7f:9c:6c:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIbz7FYnEYGJ2sCrhU8s4kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjQwMTAyMDQyOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Yjk3YTM2MTk1NDFjNWM5MTNjYTA3NzFmMmRhOWFiOWVmYjhiZGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtOu6Z9K1OJCAJkv3+O6Ue6FP0eI
5ipUATuZC+tlTrCFhjzZ2uvzav3rioflWnzsbwb3O+E61turiXO9kac+lZSIBvIp
nz3SGHgcjhV1nxam7SHyfxyadSdnaNUa9EfazKJh9yRmc4DLam1tGr8RB1hZGABW
iP+kE+Gyc8eyVE/FZDmCH3HDKhGhwvK0E4i6fq/pyAMUdGzNQX2ruLCFGCRVcRLs
/2YXhvsWV31x0zI7YZdtPS1Zy/Pk/4m+YqtibHpDqep/z81EBRNUx1MJn0poC4Kx
Q22qasmlQvvEm+4HzGESF7AOZBD0Jc9dyOG1YtqFCPn9bMaVxFUq6D1RMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJuXo2GVQcXJE8oHcfLamrnvuL2mMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvbTVlallaVkJ4Y2tUeWdkeDh0cWF1ZS00dmFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVMkMA0G
CSqGSIb3DQEBCwUAA4IBAQAEJY4OKLAaN1g86J1BdLEL6uLA6fi0xrf6tfD55dYR
8QIB9qqcHf86BaiGaPKESFTT8emVQkCvo/LQ2zJJRGvCpw23Gol7GdJuWnegEP6K
FTTgxrTkaWjdLOaH7BrEbqITghahByEFsUpmaC9zcWOxikF21RXJH2P9/vd96pgz
j3SFAopenKcJHv7NXPheBNSoEaGDaljHTl0BACrThDyJHyqdp1tdMLXktAfgKcDS
Wg84cC/xJAiNKMHvhrZbn4mS0v78WnxO33STrDUSezktGIPMhE6EL/bM99OjyorE
uDk1x8Yw8YiihO3S1rFcGNnJ8uogIHiWMjiNvRx/nGy9
-----END CERTIFICATE-----
Generated at Fri May 17 23:38:47 2024 by rpki-client on console-fra.rpki-client.org