Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/nfjwFsYW83svV-6D0b-LeCFKPjY.roa
File: nfjwFsYW83svV-6D0b-LeCFKPjY.roa (raw, json)
Hash identifier: mCFK1chJbvwGibanHRGCuFnK7tTOA/tnGNCGa9vojgE=
Subject key identifier: 9D:F8:F0:16:C6:16:F3:7B:2F:57:EE:83:D1:BF:8B:78:21:4A:3E:36
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01922821FC1EF5C1739BCC141D54C03F0BD7
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/nfjwFsYW83svV-6D0b-LeCFKPjY.roa
Signing time: Wed 25 Sep 2024 07:42:48 +0000
ROA not before: Wed 25 Sep 2024 07:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 103.100.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:28:21:fc:1e:f5:c1:73:9b:cc:14:1d:54:c0:3f:0b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Sep 25 07:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9df8f016c616f37b2f57ee83d1bf8b78214a3e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4b:c7:18:46:81:6a:02:99:ff:d5:8a:90:14:
41:ba:41:22:83:09:ec:ae:5c:9d:64:04:6c:c8:74:
49:7a:47:74:83:4c:d6:a2:0b:0c:d2:e4:77:23:60:
07:6d:b4:d1:7d:4b:e5:cd:d1:46:d8:38:ee:4a:d0:
c4:7f:6e:35:16:cd:80:9f:d6:c4:9a:7c:f9:5e:4e:
00:89:af:ec:f8:37:f3:42:32:e7:e5:23:fb:ea:2c:
01:b8:e5:3c:50:6d:a1:c3:32:83:69:8d:24:d0:ba:
64:75:21:f4:73:b4:9b:c8:ba:d7:53:65:0f:ea:3f:
74:58:68:17:a9:1a:6a:44:4f:c7:b8:79:ca:02:09:
e1:d2:e7:05:11:0d:39:01:77:08:ac:1a:2d:47:54:
6d:9f:7d:34:ee:21:58:7d:d3:fc:b4:a9:ce:c6:09:
14:6b:be:12:34:90:65:a4:6a:a8:4f:30:47:d5:3a:
2b:1e:f9:36:4f:2a:34:99:cc:cc:b8:e8:f7:3c:56:
73:b7:cc:72:6f:ec:25:3a:92:d5:b9:ab:e9:ed:63:
d7:97:a9:bc:e1:f7:75:68:cb:68:85:e5:bc:1f:23:
38:8c:34:6b:95:70:37:af:dc:96:ef:5b:a8:bf:f1:
b4:7e:e1:24:04:47:f6:61:5d:eb:bd:00:34:ee:b0:
e8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F8:F0:16:C6:16:F3:7B:2F:57:EE:83:D1:BF:8B:78:21:4A:3E:36
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/nfjwFsYW83svV-6D0b-LeCFKPjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.100.171.0/24
Signature Algorithm: sha256WithRSAEncryption
63:15:4c:d8:82:81:16:ca:80:56:f9:e4:8d:77:4b:8f:46:23:
7a:e4:bb:cd:72:0c:84:f1:19:8c:1a:cd:32:b9:22:aa:54:e4:
96:4c:35:20:92:33:b3:e7:61:39:3f:9b:05:dc:b8:a5:9e:a2:
c7:5c:4f:b2:01:35:de:47:1b:c2:4d:5c:af:fc:d1:95:ab:0a:
b9:0a:92:76:c7:f0:e4:7e:79:bc:9a:c1:25:b5:0a:d0:f0:87:
b7:bc:4e:56:71:3c:59:10:cd:d1:c7:17:2d:7e:41:94:ec:a4:
a8:42:56:65:01:3d:e5:6c:93:99:b6:45:76:56:9c:6a:d8:a5:
3c:21:47:21:ad:2d:0b:a0:2d:0b:c1:37:7e:3e:38:44:94:28:
95:51:c7:03:fd:6c:8e:19:99:9c:5f:fc:93:d1:1f:0f:00:19:
e3:5d:e5:9a:15:2d:0b:16:f8:fc:92:2e:26:a3:d4:3c:27:f7:
e3:f6:cf:50:4a:77:15:28:7b:fa:14:1c:a0:ab:cc:cd:bc:cd:
b1:bc:18:f8:18:20:11:bc:64:08:62:d6:d1:72:83:80:ae:1b:
38:c9:ea:a6:a3:b9:dc:3d:19:a8:a8:c2:73:71:47:49:e0:37:
da:78:9a:7d:37:30:99:86:ee:a8:ab:4e:e8:59:7e:d0:78:64:
9e:36:6b:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZIoIfwe9cFzm8wUHVTAPwvXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjQwOTI1MDc0MjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGY4ZjAxNmM2MTZmMzdiMmY1N2VlODNkMWJmOGI3ODIxNGEzZTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0vHGEaBagKZ/9WKkBRBukEigwns
rlydZARsyHRJekd0g0zWogsM0uR3I2AHbbTRfUvlzdFG2DjuStDEf241Fs2An9bE
mnz5Xk4Aia/s+DfzQjLn5SP76iwBuOU8UG2hwzKDaY0k0LpkdSH0c7SbyLrXU2UP
6j90WGgXqRpqRE/HuHnKAgnh0ucFEQ05AXcIrBotR1Rtn3007iFYfdP8tKnOxgkU
a74SNJBlpGqoTzBH1TorHvk2Tyo0mczMuOj3PFZzt8xyb+wlOpLVuavp7WPXl6m8
4fd1aMtoheW8HyM4jDRrlXA3r9yW71uov/G0fuEkBEf2YV3rvQA07rDo7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ348BbGFvN7L1fug9G/i3ghSj42MB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvbmZqd0ZzWVc4M3N2Vi02RDBiLUxlQ0ZLUGpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2SrMA0G
CSqGSIb3DQEBCwUAA4IBAQBjFUzYgoEWyoBW+eSNd0uPRiN65LvNcgyE8RmMGs0y
uSKqVOSWTDUgkjOz52E5P5sF3LilnqLHXE+yATXeRxvCTVyv/NGVqwq5CpJ2x/Dk
fnm8msEltQrQ8Ie3vE5WcTxZEM3RxxctfkGU7KSoQlZlAT3lbJOZtkV2Vpxq2KU8
IUchrS0LoC0LwTd+PjhElCiVUccD/WyOGZmcX/yT0R8PABnjXeWaFS0LFvj8ki4m
o9Q8J/fj9s9QSncVKHv6FBygq8zNvM2xvBj4GCARvGQIYtbRcoOArhs4yeqmo7nc
PRmoqMJzcUdJ4DfaeJp9NzCZhu6oq07oWX7QeGSeNmtI
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:48:59 2024 by rpki-client on console-ams.rpki-client.org