Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/n3ME6MtmxhMIzZ3i_FiCjmxp3h0.roa
File: n3ME6MtmxhMIzZ3i_FiCjmxp3h0.roa (raw, json)
Hash identifier: 1tWdiLPcN+SGyC50nFcPRp8+LEW+yORNLatwjfFEkaQ=
Subject key identifier: 9F:73:04:E8:CB:66:C6:13:08:CD:9D:E2:FC:58:82:8E:6C:69:DE:1D
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018EEE6B3102D98C243E0AF9B6448B0DD02A
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/n3ME6MtmxhMIzZ3i_FiCjmxp3h0.roa
Signing time: Wed 17 Apr 2024 23:36:26 +0000
ROA not before: Wed 17 Apr 2024 23:36:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 176.221.20.0/22 maxlen: 24
185.65.60.0/24 maxlen: 24
185.65.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ee:6b:31:02:d9:8c:24:3e:0a:f9:b6:44:8b:0d:d0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Apr 17 23:36:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f7304e8cb66c61308cd9de2fc58828e6c69de1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d0:91:58:e0:46:9b:9e:ff:6d:17:61:ec:7a:
0c:96:51:44:16:0b:8c:21:4e:14:4c:5d:95:20:33:
ea:63:1a:07:e6:51:61:40:bd:89:a6:1c:7a:31:e1:
24:3f:48:4f:b1:0f:43:8b:7a:c4:05:d6:25:01:2f:
ad:78:cd:5b:30:03:b7:30:7b:42:e3:d8:cc:15:67:
1d:42:9c:c9:ce:96:d4:e9:06:ee:62:d7:64:b3:18:
98:ba:f0:15:5b:4b:eb:c7:9e:21:ce:01:fc:1c:51:
4e:48:c1:68:66:88:f0:f8:9b:f4:3a:8f:bd:bc:95:
2a:69:67:1d:7b:4c:53:d3:7b:af:94:15:20:1f:8b:
66:6a:f3:0e:c6:0f:96:9f:fe:b9:37:41:87:d1:1c:
df:e1:b0:9a:3a:2a:34:ea:1b:28:1c:f5:fc:6b:c2:
2d:c4:ea:39:55:ce:72:b6:08:71:b0:d3:ee:0d:d1:
e7:0e:e2:03:87:f8:89:90:86:82:f5:b4:d1:b7:d8:
d1:e4:6b:38:7b:86:14:38:eb:da:2f:48:3b:a3:15:
aa:0d:f2:02:6d:a1:ec:da:bd:81:0b:7d:1d:a1:41:
32:bf:92:52:41:f0:5d:8d:dc:db:25:1c:8b:f5:43:
70:7c:08:b0:1c:71:5a:56:48:20:dd:a0:93:cb:74:
47:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:73:04:E8:CB:66:C6:13:08:CD:9D:E2:FC:58:82:8E:6C:69:DE:1D
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/n3ME6MtmxhMIzZ3i_FiCjmxp3h0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.221.20.0/22
185.65.60.0/23
Signature Algorithm: sha256WithRSAEncryption
76:1a:0c:b4:47:aa:c8:09:1e:ba:51:9d:f8:63:e9:d3:50:47:
ba:a3:e3:28:28:56:b5:db:2e:24:5a:0d:cd:73:03:1d:f8:1c:
96:ba:fa:0a:77:01:46:19:51:24:08:ae:00:cd:20:ae:3b:3c:
fa:b1:f9:ee:27:23:4c:29:22:37:ef:25:0e:10:a4:8e:7c:99:
57:77:d6:1d:c6:81:57:07:d7:77:91:1d:b6:df:21:44:f5:d8:
41:66:76:c9:ca:67:de:81:2b:15:f0:f1:db:d1:c0:ee:01:c4:
09:f6:eb:98:21:66:d8:2b:87:ef:97:81:be:ef:a3:69:16:e9:
2c:e9:25:d7:94:4d:6b:09:85:8e:ad:67:ce:ba:69:da:9c:1d:
9d:cb:c6:86:17:fe:c8:69:da:73:d4:88:dd:43:90:fe:25:88:
b7:14:fe:fa:33:79:37:f7:24:ae:de:aa:e6:e3:27:a4:65:09:
d8:74:f3:94:d0:57:5d:57:c4:84:0f:06:e8:18:c4:f8:a5:7b:
ee:be:15:35:50:47:df:41:fa:0b:3f:87:50:c6:eb:86:32:c4:
08:01:ae:56:ed:cd:b4:3d:7b:0d:e5:5e:34:b5:4d:5e:87:3a:
d8:ad:53:60:e0:33:38:9b:f3:5a:50:ae:ee:d6:b9:d1:ce:72:
50:c1:81:85
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY7uazEC2YwkPgr5tkSLDdAqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl
ZWNkYjYwHhcNMjQwNDE3MjMzNjI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjczMDRlOGNiNjZjNjEzMDhjZDlkZTJmYzU4ODI4ZTZjNjlkZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNCRWOBGm57/bRdh7HoMllFEFguM
IU4UTF2VIDPqYxoH5lFhQL2Jphx6MeEkP0hPsQ9Di3rEBdYlAS+teM1bMAO3MHtC
49jMFWcdQpzJzpbU6QbuYtdksxiYuvAVW0vrx54hzgH8HFFOSMFoZojw+Jv0Oo+9
vJUqaWcde0xT03uvlBUgH4tmavMOxg+Wn/65N0GH0Rzf4bCaOio06hsoHPX8a8It
xOo5Vc5ytghxsNPuDdHnDuIDh/iJkIaC9bTRt9jR5Gs4e4YUOOvaL0g7oxWqDfIC
baHs2r2BC30doUEyv5JSQfBdjdzbJRyL9UNwfAiwHHFaVkgg3aCTy3RH1QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ9zBOjLZsYTCM2d4vxYgo5sad4dMB8GA1UdIwQY
MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt
NjY0NTc3MjRjMmQzLzEvbjNNRTZNdG14aE1JelozaV9GaUNqbXhwM2gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz
LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCsN0UAwQB
uUE8MA0GCSqGSIb3DQEBCwUAA4IBAQB2Ggy0R6rICR66UZ34Y+nTUEe6o+MoKFa1
2y4kWg3NcwMd+ByWuvoKdwFGGVEkCK4AzSCuOzz6sfnuJyNMKSI37yUOEKSOfJlX
d9YdxoFXB9d3kR223yFE9dhBZnbJymfegSsV8PHb0cDuAcQJ9uuYIWbYK4fvl4G+
76NpFuks6SXXlE1rCYWOrWfOumnanB2dy8aGF/7Iadpz1IjdQ5D+JYi3FP76M3k3
9ySu3qrm4yekZQnYdPOU0FddV8SEDwboGMT4pXvuvhU1UEffQfoLP4dQxuuGMsQI
Aa5W7c20PXsN5V40tU1ehzrYrVNg4DM4m/NaUK7u1rnRznJQwYGF
-----END CERTIFICATE-----
Generated at Sun May 5 06:21:36 2024 by rpki-client on console-fra.rpki-client.org