Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/nYfg1vgVg-5qlhSrx4bug70j7SY.roa
File: nYfg1vgVg-5qlhSrx4bug70j7SY.roa (raw, json)
Hash identifier: JY3f1T2dYQgt/DTxQbtcNSjpb4PUF1wU0IHADbacKn4=
Subject key identifier: 9D:87:E0:D6:F8:15:83:EE:6A:96:14:AB:C7:86:EE:83:BD:23:ED:26
Certificate issuer: /CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8
Certificate serial: 018CC2DB4A0761F879603FA97E07F2AF6591
Authority key identifier: 43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/nYfg1vgVg-5qlhSrx4bug70j7SY.roa
Signing time: Mon 01 Jan 2024 02:30:00 +0000
ROA not before: Mon 01 Jan 2024 02:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39842
IP address blocks: 185.35.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:4a:07:61:f8:79:60:3f:a9:7e:07:f2:af:65:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8
Validity
Not Before: Jan 1 02:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d87e0d6f81583ee6a9614abc786ee83bd23ed26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fd:ff:26:e0:7b:96:c5:aa:f3:c8:24:28:07:
25:50:b2:78:cc:a2:94:40:e3:0e:86:9b:61:b4:b8:
b4:7d:d6:dc:11:8c:11:ae:de:25:9a:29:72:20:be:
7b:5c:45:bd:44:77:94:af:61:37:e2:4a:37:a7:a0:
17:da:21:71:fc:10:59:35:1d:a0:1f:97:98:de:76:
e1:c3:c6:b3:fd:66:f4:71:d2:1b:ca:da:af:92:75:
64:cf:97:34:bd:59:6e:4f:8e:1c:28:ca:3e:5f:ab:
32:a3:62:07:52:db:4b:10:3c:9a:88:8f:8c:10:e7:
1c:b9:65:14:80:67:d6:bf:f3:fd:16:2f:a0:9d:85:
7c:04:5e:61:09:8c:f4:f1:a7:7d:72:b4:87:26:85:
16:c3:c2:40:63:c2:9c:42:43:29:ce:ec:bb:82:fa:
cf:46:60:5a:6a:13:e1:bd:4c:51:9e:17:90:f6:fe:
c2:24:7e:43:b9:87:e2:71:cf:1d:cf:f4:7a:47:4b:
ee:72:18:80:c2:01:75:48:00:1a:e5:6b:ea:3f:59:
a4:e6:aa:51:e2:09:70:c5:35:e9:dd:7a:a2:27:ca:
34:1e:c3:e8:54:c9:df:e1:a4:5f:3a:8b:c5:61:51:
cd:b5:46:19:43:da:a9:fa:9f:32:45:0d:95:6c:3a:
74:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:87:E0:D6:F8:15:83:EE:6A:96:14:AB:C7:86:EE:83:BD:23:ED:26
X509v3 Authority Key Identifier:
keyid:43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/nYfg1vgVg-5qlhSrx4bug70j7SY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.224.0/22
Signature Algorithm: sha256WithRSAEncryption
30:1c:e0:7c:87:1f:e9:3a:24:c8:2e:2d:c6:b9:b7:14:5b:a9:
48:f5:97:76:56:32:c2:63:7a:e5:7a:10:7f:3f:4e:99:ea:e0:
eb:b3:72:94:f5:b1:4e:94:83:43:94:1c:3d:f4:d6:44:77:b0:
19:a7:f4:d3:a0:f4:02:75:81:de:c8:22:1e:a9:78:c5:85:bc:
5c:8d:48:59:58:79:98:23:da:3a:a5:f6:b5:6e:d2:1e:93:85:
98:f8:85:06:88:ad:b0:a1:55:78:bd:0f:65:8e:b3:17:68:39:
72:1d:09:26:bb:91:b5:27:67:80:96:f1:52:69:c5:d4:2d:3c:
be:48:d4:4d:7f:c2:a8:df:30:8e:13:d3:d7:95:47:4c:70:f8:
6b:1b:1a:0a:13:db:08:91:2a:a9:b1:f4:0e:9a:2f:47:71:f2:
10:64:b5:01:3d:4e:92:bc:0d:bc:ca:3d:d8:53:a3:eb:ea:21:
39:43:6d:54:03:79:f6:be:da:5c:b5:e2:8c:42:7a:a4:4c:22:
e0:9a:51:82:d3:b3:0a:fb:ab:d8:86:f3:76:73:c8:e9:a8:06:
93:6a:11:4a:84:b0:2b:1b:b1:44:d5:9e:c0:e7:b4:00:ed:59:
5b:7a:8f:e6:15:75:ad:fb:b7:9d:96:c6:04:26:59:d3:5d:4c:
96:59:01:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC20oHYfh5YD+pfgfyr2WRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDRkODY4YjBiOWQxZDQzNjc4ZWI0NjdhZTdjM2ZhM2Jm
ZmUyZjgwHhcNMjQwMTAxMDIzMDAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDg3ZTBkNmY4MTU4M2VlNmE5NjE0YWJjNzg2ZWU4M2JkMjNlZDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP3/JuB7lsWq88gkKAclULJ4zKKU
QOMOhpthtLi0fdbcEYwRrt4lmilyIL57XEW9RHeUr2E34ko3p6AX2iFx/BBZNR2g
H5eY3nbhw8az/Wb0cdIbytqvknVkz5c0vVluT44cKMo+X6syo2IHUttLEDyaiI+M
EOccuWUUgGfWv/P9Fi+gnYV8BF5hCYz08ad9crSHJoUWw8JAY8KcQkMpzuy7gvrP
RmBaahPhvUxRnheQ9v7CJH5DuYficc8dz/R6R0vuchiAwgF1SAAa5WvqP1mk5qpR
4glwxTXp3XqiJ8o0HsPoVMnf4aRfOovFYVHNtUYZQ9qp+p8yRQ2VbDp0/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ2H4Nb4FYPuapYUq8eG7oO9I+0mMB8GA1UdIwQY
MBaAFEME2GiwudHUNnjrRnrnw/o7/+L4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdUWWFMQzUwZFEyZU90R2V1ZkQtanZfNHZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mYmRlMjktYjk0Ni00M2YzLWI4NDct
MWEyMGNkZDU2MGMyLzEvbllmZzF2Z1ZnLTVxbGhTcng0YnVnNzBqN1NZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mYmRlMjktYjk0Ni00M2YzLWI4NDctMWEyMGNkZDU2MGMy
LzEvUXdUWWFMQzUwZFEyZU90R2V1ZkQtanZfNHZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSPgMA0G
CSqGSIb3DQEBCwUAA4IBAQAwHOB8hx/pOiTILi3GubcUW6lI9Zd2VjLCY3rlehB/
P06Z6uDrs3KU9bFOlINDlBw99NZEd7AZp/TToPQCdYHeyCIeqXjFhbxcjUhZWHmY
I9o6pfa1btIek4WY+IUGiK2woVV4vQ9ljrMXaDlyHQkmu5G1J2eAlvFSacXULTy+
SNRNf8Ko3zCOE9PXlUdMcPhrGxoKE9sIkSqpsfQOmi9HcfIQZLUBPU6SvA28yj3Y
U6Pr6iE5Q21UA3n2vtpcteKMQnqkTCLgmlGC07MK+6vYhvN2c8jpqAaTahFKhLAr
G7FE1Z7A57QA7Vlbeo/mFXWt+7edlsYEJlnTXUyWWQHt
-----END CERTIFICATE-----
Generated at Sat Jun 8 05:14:12 2024 by rpki-client on console-fra.rpki-client.org