Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/nZGe5qayB0dLk7PxXcLhKZFDFbk.roa
File: nZGe5qayB0dLk7PxXcLhKZFDFbk.roa (raw, json)
Hash identifier: HlbIaGhai59zR6eUvXesd3Hhr3+p9dPR2N6HvsSR0jo=
Subject key identifier: 9D:91:9E:E6:A6:B2:07:47:4B:93:B3:F1:5D:C2:E1:29:91:43:15:B9
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 018E7A9A20E2AA7EB23E074B2E7415661F5F
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/nZGe5qayB0dLk7PxXcLhKZFDFbk.roa
Signing time: Tue 26 Mar 2024 11:51:45 +0000
ROA not before: Tue 26 Mar 2024 11:51:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 10111
IP address blocks: 77.93.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7a:9a:20:e2:aa:7e:b2:3e:07:4b:2e:74:15:66:1f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Mar 26 11:51:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d919ee6a6b207474b93b3f15dc2e129914315b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:92:f0:b2:e8:9b:1e:59:c0:2d:9f:44:1a:fc:
61:63:fc:d5:2e:f0:65:cb:60:5b:75:3b:b6:64:db:
71:69:12:c4:b8:ff:59:39:e3:93:6c:2a:db:1a:fb:
73:7a:41:2c:5b:16:c5:41:2a:e7:a1:60:8e:76:05:
e2:65:55:2d:e0:7c:c2:b8:c5:29:4e:11:27:dd:a7:
8c:b3:42:6c:2d:62:fa:d4:e5:1b:e5:dc:4b:5e:4a:
23:f7:03:ff:c7:67:7e:a5:45:9a:56:63:0f:32:36:
00:e3:8f:4c:2d:72:0d:9c:a9:ee:7b:ab:40:56:87:
eb:6b:42:51:58:69:60:ec:cb:70:13:11:a4:b8:8b:
d3:75:9a:ad:85:9e:d2:3b:48:5f:72:64:67:4d:2e:
19:16:2f:e5:cd:59:66:79:e1:aa:a1:a2:f3:39:e8:
27:74:c5:63:c6:a4:5a:95:e4:95:99:13:42:1e:49:
e5:c2:5f:9d:df:88:63:35:f4:93:97:25:01:cf:2a:
53:03:f3:79:46:3f:8c:4c:1b:bc:24:f7:5d:ca:1a:
8e:30:56:e3:3b:9e:ce:72:6c:65:5b:49:81:71:a9:
c9:fd:be:5d:6d:9d:b0:68:38:27:51:7e:19:1b:e6:
0b:2e:0d:eb:67:3f:ee:66:4c:fd:fa:82:17:ac:12:
84:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:91:9E:E6:A6:B2:07:47:4B:93:B3:F1:5D:C2:E1:29:91:43:15:B9
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/nZGe5qayB0dLk7PxXcLhKZFDFbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.148.0/24
Signature Algorithm: sha256WithRSAEncryption
24:c8:7d:2b:25:9a:1f:76:4a:91:18:50:5c:e3:ed:dc:c7:e6:
7b:82:b9:a0:b2:54:3f:80:69:ba:39:41:27:d6:3f:f3:8c:92:
7f:af:d0:4a:c7:9b:a7:e0:05:0c:fe:b3:ea:36:52:bb:88:e3:
b9:b3:99:76:64:e0:00:b6:37:16:b4:a4:7f:6e:38:cb:9b:79:
ec:0e:1d:05:44:cb:d7:07:f9:c8:f7:62:96:f5:c8:ef:e0:75:
09:e8:f9:8c:87:19:ed:44:47:d7:45:61:bd:fa:68:de:92:af:
ce:09:08:07:2c:cf:cd:91:5b:24:1c:03:e1:10:46:42:25:7d:
ed:dd:a0:fd:f9:d1:75:8d:e1:4a:2d:86:4a:3f:ab:1c:b1:57:
d6:75:b8:d0:19:e7:de:48:6b:ec:ec:dc:dd:d2:2f:ee:aa:53:
d8:00:4a:21:e9:1f:80:78:12:0d:bb:27:1d:0a:d1:46:5f:a3:
aa:14:ac:0c:d5:0b:20:13:c7:9d:77:7c:e9:cf:d2:7c:86:a5:
ff:35:a9:81:30:06:e5:49:6b:e6:c5:69:d0:42:4c:54:d5:fb:
f1:fb:12:a3:70:b7:b7:5d:df:62:15:9f:e3:d7:84:a7:10:78:
6a:c9:1d:60:32:07:79:92:ab:7c:da:16:48:4c:38:47:d6:6e:
75:75:83:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY56miDiqn6yPgdLLnQVZh9fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNWEzNDE3ZmJlMjVjMmU0NjdjMTg0ODVjMTgxYTc3NzZm
OTZmZjQwHhcNMjQwMzI2MTE1MTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDkxOWVlNmE2YjIwNzQ3NGI5M2IzZjE1ZGMyZTEyOTkxNDMxNWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5LwsuibHlnALZ9EGvxhY/zVLvBl
y2BbdTu2ZNtxaRLEuP9ZOeOTbCrbGvtzekEsWxbFQSrnoWCOdgXiZVUt4HzCuMUp
ThEn3aeMs0JsLWL61OUb5dxLXkoj9wP/x2d+pUWaVmMPMjYA449MLXINnKnue6tA
Vofra0JRWGlg7MtwExGkuIvTdZqthZ7SO0hfcmRnTS4ZFi/lzVlmeeGqoaLzOegn
dMVjxqRaleSVmRNCHknlwl+d34hjNfSTlyUBzypTA/N5Rj+MTBu8JPddyhqOMFbj
O57OcmxlW0mBcanJ/b5dbZ2waDgnUX4ZG+YLLg3rZz/uZkz9+oIXrBKEfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ2RnuamsgdHS5Oz8V3C4SmRQxW5MB8GA1UdIwQY
MBaAFIpaNBf74lwuRnwYSFwYGnd2+W/0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWxvMEZfdmlYQzVHZkJoSVhCZ2FkM2I1Yl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85YzZlMDctNjkzZi00NmNlLTg2NDYt
ZDdhYmNkMGVmNjRhLzEvblpHZTVxYXlCMGRMazdQeFhjTGhLWkZERmJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85YzZlMDctNjkzZi00NmNlLTg2NDYtZDdhYmNkMGVmNjRh
LzEvaWxvMEZfdmlYQzVHZkJoSVhCZ2FkM2I1Yl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATV2UMA0G
CSqGSIb3DQEBCwUAA4IBAQAkyH0rJZofdkqRGFBc4+3cx+Z7grmgslQ/gGm6OUEn
1j/zjJJ/r9BKx5un4AUM/rPqNlK7iOO5s5l2ZOAAtjcWtKR/bjjLm3nsDh0FRMvX
B/nI92KW9cjv4HUJ6PmMhxntREfXRWG9+mjekq/OCQgHLM/NkVskHAPhEEZCJX3t
3aD9+dF1jeFKLYZKP6scsVfWdbjQGefeSGvs7Nzd0i/uqlPYAEoh6R+AeBINuycd
CtFGX6OqFKwM1QsgE8edd3zpz9J8hqX/NamBMAblSWvmxWnQQkxU1fvx+xKjcLe3
Xd9iFZ/j14SnEHhqyR1gMgd5kqt82hZITDhH1m51dYM7
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:17:24 2024 by rpki-client on console-fra.rpki-client.org