Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/bNtwJGGAc-xgjXadqMEk1JsX0iU.roa
File: bNtwJGGAc-xgjXadqMEk1JsX0iU.roa (raw, json)
Hash identifier: KKY2EMLVTw/fwMALsTNPJML+tUtGUUXQEu2kC++6db8=
Subject key identifier: 6C:DB:70:24:61:80:73:EC:60:8D:76:9D:A8:C1:24:D4:9B:17:D2:25
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 018CC6B81784441FB80ECEB586103295A392
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/bNtwJGGAc-xgjXadqMEk1JsX0iU.roa
Signing time: Mon 01 Jan 2024 20:30:02 +0000
ROA not before: Mon 01 Jan 2024 20:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47899
IP address blocks: 94.102.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:17:84:44:1f:b8:0e:ce:b5:86:10:32:95:a3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 1 20:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cdb7024618073ec608d769da8c124d49b17d225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:92:46:db:1a:71:b7:12:48:7d:05:b1:13:47:
31:c4:f4:fb:e6:dc:0f:f7:ca:98:8e:0f:8d:8a:0a:
6b:b4:f1:fc:92:45:aa:16:2a:05:1d:85:c8:34:8b:
d8:c1:3d:46:2d:3b:42:f9:d2:4f:54:ca:7b:68:5e:
ff:1c:31:6f:7d:05:19:3a:4f:50:09:a8:2b:d1:cb:
a4:82:6a:2d:e2:86:e0:61:08:a7:9f:2d:7d:34:a7:
fb:2a:b3:62:bf:fd:6c:b1:97:0a:0e:a3:89:56:88:
42:7d:69:e8:66:b5:2e:29:aa:17:f5:f7:11:6c:42:
fb:01:72:b1:60:3b:ce:ce:ee:51:04:60:db:e3:22:
86:eb:75:5a:81:39:60:42:bf:50:01:21:1a:f7:1c:
22:f5:81:62:10:07:fb:42:77:b4:c4:dd:1a:06:f6:
d7:92:4f:35:3c:57:71:2d:66:4d:ec:7e:3f:b1:47:
e3:76:5b:ba:c4:23:07:5c:89:62:de:65:38:30:bb:
03:c7:3f:10:a2:d5:46:9b:37:a8:0c:0d:f1:d8:20:
3d:9d:60:c8:ba:70:97:7e:5b:05:44:03:f4:2f:db:
95:56:b2:a7:8d:81:95:91:cc:27:5b:83:a5:63:0f:
d3:5b:1d:9b:89:70:f4:ec:ee:c8:07:3f:29:5f:2e:
f1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DB:70:24:61:80:73:EC:60:8D:76:9D:A8:C1:24:D4:9B:17:D2:25
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/bNtwJGGAc-xgjXadqMEk1JsX0iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.102.176.0/20
Signature Algorithm: sha256WithRSAEncryption
73:aa:45:ad:d0:f8:a1:4c:80:2b:ec:97:47:55:da:78:d6:12:
83:c9:74:a7:6b:2d:9f:89:89:6b:ed:84:40:50:b2:86:ca:a2:
a5:3c:c6:86:4b:68:5b:9d:f6:34:f3:b5:83:fc:d4:79:9e:79:
51:36:fe:6d:d9:be:de:30:c8:54:a9:bd:6d:c8:c0:f4:43:34:
e9:49:2d:42:e9:a5:f6:27:9a:c3:9f:56:11:16:32:cc:6c:d1:
0f:22:a4:b7:cb:56:ec:b1:c8:10:a9:ca:fd:82:92:c3:25:0e:
1f:43:6b:56:34:40:55:4a:7b:68:8d:1a:7b:9b:9f:78:f4:73:
4e:e6:d0:12:0c:44:c0:9e:ca:05:c8:31:4d:43:7d:64:45:70:
08:bc:ae:31:23:f2:e3:3b:76:d0:ad:f4:e9:ed:08:d5:d6:ec:
eb:af:f2:d2:6c:75:e2:21:d3:4b:af:9f:de:6c:be:da:fe:d4:
54:47:56:17:07:19:c7:88:2b:0c:a1:5c:88:e4:35:ee:f6:07:
77:45:bd:89:d5:ff:b4:eb:6a:8b:92:46:1b:ec:42:ef:3a:fa:
78:53:ed:c9:75:26:e9:8a:90:43:f9:d6:2d:f1:56:65:5d:87:
d8:32:49:1d:b6:e5:8e:21:ca:b8:8b:31:13:ac:38:e4:08:49:
a0:96:d3:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuBeERB+4Ds61hhAylaOSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl
NmI3ZTUwHhcNMjQwMTAxMjAzMDAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2RiNzAyNDYxODA3M2VjNjA4ZDc2OWRhOGMxMjRkNDliMTdkMjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZJG2xpxtxJIfQWxE0cxxPT75twP
98qYjg+NigprtPH8kkWqFioFHYXINIvYwT1GLTtC+dJPVMp7aF7/HDFvfQUZOk9Q
Cagr0cukgmot4obgYQinny19NKf7KrNiv/1ssZcKDqOJVohCfWnoZrUuKaoX9fcR
bEL7AXKxYDvOzu5RBGDb4yKG63VagTlgQr9QASEa9xwi9YFiEAf7Qne0xN0aBvbX
kk81PFdxLWZN7H4/sUfjdlu6xCMHXIli3mU4MLsDxz8QotVGmzeoDA3x2CA9nWDI
unCXflsFRAP0L9uVVrKnjYGVkcwnW4OlYw/TWx2biXD07O7IBz8pXy7xuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGzbcCRhgHPsYI12najBJNSbF9IlMB8GA1UdIwQY
MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt
NDI4NDU4Njc5Y2U0LzEvYk50d0pHR0FjLXhnalhhZHFNRWsxSnNYMGlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0
LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEXmawMA0G
CSqGSIb3DQEBCwUAA4IBAQBzqkWt0PihTIAr7JdHVdp41hKDyXSnay2fiYlr7YRA
ULKGyqKlPMaGS2hbnfY087WD/NR5nnlRNv5t2b7eMMhUqb1tyMD0QzTpSS1C6aX2
J5rDn1YRFjLMbNEPIqS3y1bsscgQqcr9gpLDJQ4fQ2tWNEBVSntojRp7m5949HNO
5tASDETAnsoFyDFNQ31kRXAIvK4xI/LjO3bQrfTp7QjV1uzrr/LSbHXiIdNLr5/e
bL7a/tRUR1YXBxnHiCsMoVyI5DXu9gd3Rb2J1f+062qLkkYb7ELvOvp4U+3JdSbp
ipBD+dYt8VZlXYfYMkkdtuWOIcq4izETrDjkCEmgltP1
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:46:18 2024 by rpki-client on console-fra.rpki-client.org