Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/nW9yy_bVOrUBQmBe1tvllk4z7NM.roa
File: nW9yy_bVOrUBQmBe1tvllk4z7NM.roa (raw, json)
Hash identifier: WWHtD1E3Oy1QRwB1BCH/D6JbgtzV7XVfTK8fdWavpl0=
Subject key identifier: 9D:6F:72:CB:F6:D5:3A:B5:01:42:60:5E:D6:DB:E5:96:4E:33:EC:D3
Certificate issuer: /CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Certificate serial: 018CC424A3490ACE3F74D3D6EDFB910904F1
Authority key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/nW9yy_bVOrUBQmBe1tvllk4z7NM.roa
Signing time: Mon 01 Jan 2024 08:29:44 +0000
ROA not before: Mon 01 Jan 2024 08:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 680
IP address blocks: 139.20.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:a3:49:0a:ce:3f:74:d3:d6:ed:fb:91:09:04:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Validity
Not Before: Jan 1 08:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d6f72cbf6d53ab50142605ed6dbe5964e33ecd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:73:f9:c6:3c:92:61:85:d7:76:7c:4a:b7:5c:
25:27:9c:6b:19:5f:7c:b8:f8:98:c0:4d:4a:b2:43:
8a:54:85:fa:40:10:b3:34:b7:28:85:7d:91:1f:9e:
20:97:7c:89:d3:50:bf:b0:03:ff:8e:17:35:84:cc:
c8:96:22:09:68:10:08:57:2e:08:0e:e3:a7:d5:34:
55:48:54:4a:00:e9:1a:c0:f3:d1:1b:ae:84:79:ab:
64:aa:7f:0b:67:e0:4a:8b:b1:03:dd:61:de:08:80:
0f:20:41:fe:48:53:0a:50:b2:51:f2:57:d8:eb:50:
c4:ca:a4:fa:76:8f:48:d4:61:51:6d:c2:67:0f:52:
fa:22:60:c3:a0:3f:a9:20:da:66:70:e9:49:88:5b:
a5:ad:b8:e6:5f:fe:8c:ce:ad:b3:fa:5f:0f:45:d8:
7f:9e:9b:dc:8e:95:b0:09:e1:ca:a5:75:12:68:4f:
d4:41:cf:21:ec:58:40:f0:f4:0b:91:f9:3a:e9:5d:
24:86:9b:02:e0:b8:6b:6b:ad:df:80:1f:d8:20:be:
92:f4:05:19:ce:82:17:14:af:fe:8a:b8:f4:3c:ab:
29:c0:66:8d:01:a5:21:7a:3c:36:60:f3:f6:81:a5:
04:36:9b:07:91:c3:a2:0e:b5:85:19:f3:84:d5:6f:
b6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6F:72:CB:F6:D5:3A:B5:01:42:60:5E:D6:DB:E5:96:4E:33:EC:D3
X509v3 Authority Key Identifier:
keyid:DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/nW9yy_bVOrUBQmBe1tvllk4z7NM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.20.0.0/16
Signature Algorithm: sha256WithRSAEncryption
19:ef:e1:29:88:0f:16:1c:f3:ac:c8:ab:7a:13:7a:40:8b:e4:
a5:a8:05:ca:ee:e2:0f:c3:31:1e:5d:90:50:ef:2e:c5:f3:d9:
0b:5f:ff:53:fd:c2:59:df:e0:2d:3e:8b:14:c4:2e:79:07:65:
e8:15:8c:36:31:77:27:70:9c:51:39:e8:e9:39:22:8c:24:88:
fb:c4:fb:f4:e7:b0:bf:05:a7:be:69:b1:c8:ce:60:02:26:ef:
ca:67:b5:af:0c:15:b1:c0:f6:ef:7c:5c:2d:7a:1d:8f:80:d6:
97:db:39:26:3e:81:54:e3:bc:4b:e0:61:16:75:a3:d5:55:ea:
86:58:7e:75:50:ea:ac:a0:17:d2:d9:2d:92:60:d9:f4:2a:13:
03:c8:12:96:a0:41:cd:0b:f2:db:2c:90:d0:cc:c3:bd:ee:7f:
09:8c:ae:39:32:48:a7:08:6d:1f:f6:96:af:a2:7e:c8:9f:92:
bc:0a:00:61:08:37:78:6b:94:3d:2d:5c:b8:79:39:e2:78:3e:
7b:9d:5a:49:b6:4f:39:fa:e1:b3:06:09:14:d8:78:f7:4a:26:
21:be:72:de:02:c4:9b:88:35:81:22:75:05:c7:e5:73:52:8d:
27:07:70:95:89:89:c0:d8:7c:9b:d6:21:16:1d:d8:c1:9d:d6:
3e:64:d1:e1
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYzEJKNJCs4/dNPW7fuRCQTxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMGRlYTRlYTI1NDZkN2EwMTlhNGVmODI0M2I1ZWI2MzU2
NWM4NDcwHhcNMjQwMTAxMDgyOTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDZmNzJjYmY2ZDUzYWI1MDE0MjYwNWVkNmRiZTU5NjRlMzNlY2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHP5xjySYYXXdnxKt1wlJ5xrGV98
uPiYwE1KskOKVIX6QBCzNLcohX2RH54gl3yJ01C/sAP/jhc1hMzIliIJaBAIVy4I
DuOn1TRVSFRKAOkawPPRG66Eeatkqn8LZ+BKi7ED3WHeCIAPIEH+SFMKULJR8lfY
61DEyqT6do9I1GFRbcJnD1L6ImDDoD+pINpmcOlJiFulrbjmX/6Mzq2z+l8PRdh/
npvcjpWwCeHKpXUSaE/UQc8h7FhA8PQLkfk66V0khpsC4Lhra63fgB/YIL6S9AUZ
zoIXFK/+irj0PKspwGaNAaUhejw2YPP2gaUENpsHkcOiDrWFGfOE1W+2EQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFJ1vcsv21Tq1AUJgXtbb5ZZOM+zTMB8GA1UdIwQY
MBaAFNwN6k6iVG16AZpO+CQ7XrY1ZchHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0EzcVRxSlViWG9CbWs3NEpEdGV0alZseUVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zNWE2ZTUtMzM2NC00YTc0LTk2NGMt
M2Q0YjI4M2YzMjJkLzEvblc5eXlfYlZPclVCUW1CZTF0dmxsazR6N05NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zNWE2ZTUtMzM2NC00YTc0LTk2NGMtM2Q0YjI4M2YzMjJk
LzEvM0EzcVRxSlViWG9CbWs3NEpEdGV0alZseUVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAixQwDQYJ
KoZIhvcNAQELBQADggEBABnv4SmIDxYc86zIq3oTekCL5KWoBcru4g/DMR5dkFDv
LsXz2Qtf/1P9wlnf4C0+ixTELnkHZegVjDYxdydwnFE56Ok5IowkiPvE+/TnsL8F
p75pscjOYAIm78pnta8MFbHA9u98XC16HY+A1pfbOSY+gVTjvEvgYRZ1o9VV6oZY
fnVQ6qygF9LZLZJg2fQqEwPIEpagQc0L8tsskNDMw73ufwmMrjkySKcIbR/2lq+i
fsifkrwKAGEIN3hrlD0tXLh5OeJ4PnudWkm2Tzn64bMGCRTYePdKJiG+ct4CxJuI
NYEidQXH5XNSjScHcJWJicDYfJvWIRYd2MGd1j5k0eE=
-----END CERTIFICATE-----
Generated at Sun May 19 21:07:36 2024 by rpki-client on console-ams.rpki-client.org