Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/n92K3tBjYXFblQmDMty-rgdYRT4.roa
File: n92K3tBjYXFblQmDMty-rgdYRT4.roa (raw, json)
Hash identifier: HMyztyd4TbGG4K4DHbgAQLNvMb4S7gFlfUR2KeVtKW4=
Subject key identifier: 9F:DD:8A:DE:D0:63:61:71:5B:95:09:83:32:DC:BE:AE:07:58:45:3E
Certificate issuer: /CN=f8ad543624f8d3281ec970458ee752f10a424529
Certificate serial: 018CC7953090D3B4BB13347B2B400B61DDB1
Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/n92K3tBjYXFblQmDMty-rgdYRT4.roa
Signing time: Tue 02 Jan 2024 00:31:32 +0000
ROA not before: Tue 02 Jan 2024 00:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197412
IP address blocks: 185.230.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:30:90:d3:b4:bb:13:34:7b:2b:40:0b:61:dd:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529
Validity
Not Before: Jan 2 00:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fdd8aded06361715b95098332dcbeae0758453e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f1:11:4d:f2:bc:a3:5c:dc:8e:b0:c2:6d:a8:
51:dc:3e:34:a7:ca:92:cf:d7:ed:e5:75:47:67:bc:
67:cc:f5:ea:c2:97:22:eb:ee:0b:7d:40:45:e0:cd:
6d:83:9d:76:3e:a4:12:97:e0:b7:86:b8:e7:f6:a8:
ed:1d:a2:d6:65:b1:46:64:25:b3:47:91:e5:4a:7c:
25:7e:6a:cc:1f:f5:27:07:f4:30:f4:29:51:59:24:
3d:ca:80:dc:ee:ee:f5:24:a2:4c:6e:2b:5a:0e:6c:
7f:83:5f:fd:80:1c:d4:40:23:6f:bf:d3:8b:64:e6:
fb:5b:77:d1:67:42:aa:56:e8:35:55:a3:f2:a0:0a:
2a:3c:b5:a9:05:c9:b6:22:c1:6a:bb:6e:11:df:b8:
e3:34:96:be:85:84:4a:0b:30:d3:23:a5:20:df:ed:
e3:28:01:f3:9c:05:34:f3:3e:20:e8:88:c2:41:ee:
2f:a7:21:51:36:f2:2e:e5:a3:01:0d:d4:c1:bc:55:
81:44:06:8f:a8:d9:00:b8:40:9e:bc:7a:6d:5c:9b:
7d:16:ac:37:73:e0:9b:7c:db:cf:2e:cf:4f:08:68:
af:00:48:44:a6:98:35:6a:32:0c:a3:78:22:97:26:
77:d1:e3:83:51:09:2e:92:1a:80:4c:f2:4e:d3:b3:
1b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DD:8A:DE:D0:63:61:71:5B:95:09:83:32:DC:BE:AE:07:58:45:3E
X509v3 Authority Key Identifier:
keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/n92K3tBjYXFblQmDMty-rgdYRT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.172.0/22
Signature Algorithm: sha256WithRSAEncryption
80:0f:89:38:54:b6:93:d6:ca:0b:9f:8c:d0:97:50:c9:10:fe:
50:27:b0:58:e7:20:7c:b5:37:23:ba:70:45:5c:99:d1:16:bd:
96:19:2b:c7:03:5f:bb:70:77:4d:21:2c:30:49:e5:3a:d6:e6:
c4:b9:41:62:f6:24:d6:a1:5a:6c:3b:83:5a:d8:30:81:7b:73:
b7:eb:af:f3:12:c4:ba:68:d8:7a:6e:c4:56:29:8f:fe:cb:71:
79:d9:de:17:77:3a:e3:1e:6c:ed:94:fc:63:0a:78:59:04:9f:
43:da:84:a5:7a:36:21:e0:36:44:23:a8:28:f5:a4:13:ab:9d:
6e:ab:59:40:3b:5d:00:7d:b7:4d:3e:f8:7d:95:ed:ce:6d:fe:
7c:a7:e6:dd:7d:41:b7:56:b5:7a:40:a5:a4:74:97:c7:91:6c:
2c:af:27:61:e6:4d:81:cd:72:b8:fe:b2:cc:87:79:a0:1c:a7:
bb:e1:58:8f:8a:e6:1e:08:39:76:a6:13:b7:54:d5:ac:c4:6f:
dd:e5:db:d5:7f:12:6a:c6:31:19:f1:a9:74:81:93:48:ba:18:
10:bf:42:db:07:c6:b6:ae:cf:50:58:e5:25:7e:4a:59:0d:73:
71:45:e1:dd:af:33:84:70:ad:68:eb:21:57:ac:f4:08:18:74:
62:4d:87:5d
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzHlTCQ07S7EzR7K0ALYd2xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YWQ1NDM2MjRmOGQzMjgxZWM5NzA0NThlZTc1MmYxMGE0
MjQ1MjkwHhcNMjQwMTAyMDAzMTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmRkOGFkZWQwNjM2MTcxNWI5NTA5ODMzMmRjYmVhZTA3NTg0NTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPERTfK8o1zcjrDCbahR3D40p8qS
z9ft5XVHZ7xnzPXqwpci6+4LfUBF4M1tg512PqQSl+C3hrjn9qjtHaLWZbFGZCWz
R5HlSnwlfmrMH/UnB/Qw9ClRWSQ9yoDc7u71JKJMbitaDmx/g1/9gBzUQCNvv9OL
ZOb7W3fRZ0KqVug1VaPyoAoqPLWpBcm2IsFqu24R37jjNJa+hYRKCzDTI6Ug3+3j
KAHznAU08z4g6IjCQe4vpyFRNvIu5aMBDdTBvFWBRAaPqNkAuECevHptXJt9Fqw3
c+CbfNvPLs9PCGivAEhEppg1ajIMo3gilyZ30eODUQkukhqATPJO07MbhQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFJ/dit7QY2FxW5UJgzLcvq4HWEU+MB8GA1UdIwQY
MBaAFPitVDYk+NMoHslwRY7nUvEKQkUpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LMVVOaVQ0MHlnZXlYQkZqdWRTOFFwQ1JTay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvYWYxZjY0LWMzNWYtNDdlOC04N2M5
LThhMTFiNDcxOWQ4Mi8xL245MkszdEJqWVhGYmxRbURNdHktcmdkWVJUNC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMjAvYWYxZjY0LWMzNWYtNDdlOC04N2M5LThhMTFiNDcxOWQ4
Mi8xLzEtSzFVTmlUNDB5Z2V5WEJGanVkUzhRcENSU2suY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK55qww
DQYJKoZIhvcNAQELBQADggEBAIAPiThUtpPWygufjNCXUMkQ/lAnsFjnIHy1NyO6
cEVcmdEWvZYZK8cDX7twd00hLDBJ5TrW5sS5QWL2JNahWmw7g1rYMIF7c7frr/MS
xLpo2HpuxFYpj/7LcXnZ3hd3OuMebO2U/GMKeFkEn0PahKV6NiHgNkQjqCj1pBOr
nW6rWUA7XQB9t00++H2V7c5t/nyn5t19QbdWtXpApaR0l8eRbCyvJ2HmTYHNcrj+
ssyHeaAcp7vhWI+K5h4IOXamE7dU1azEb93l29V/EmrGMRnxqXSBk0i6GBC/QtsH
xrauz1BY5SV+SlkNc3FF4d2vM4RwrWjrIVes9AgYdGJNh10=
-----END CERTIFICATE-----
Generated at Sun May 19 00:40:45 2024 by rpki-client on console-ams.rpki-client.org