Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/NNYWLyRpZTeDWtVDyLJ3rTIgkoI.roa
File: NNYWLyRpZTeDWtVDyLJ3rTIgkoI.roa (raw, json)
Hash identifier: g5h6UVdapFGQj5Ui9if7ATpNCpDIzagMCrE5p6N3w7Y=
Subject key identifier: 34:D6:16:2F:24:69:65:37:83:5A:D5:43:C8:B2:77:AD:32:20:92:82
Certificate issuer: /CN=ab6c80080637facb16f519c5d97ec27b3d85097d
Certificate serial: 018CC86F27379AECFC13D4D319A99F505230
Authority key identifier: AB:6C:80:08:06:37:FA:CB:16:F5:19:C5:D9:7E:C2:7B:3D:85:09:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/NNYWLyRpZTeDWtVDyLJ3rTIgkoI.roa
Signing time: Tue 02 Jan 2024 04:29:36 +0000
ROA not before: Tue 02 Jan 2024 04:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28925
IP address blocks: 195.222.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:27:37:9a:ec:fc:13:d4:d3:19:a9:9f:50:52:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6c80080637facb16f519c5d97ec27b3d85097d
Validity
Not Before: Jan 2 04:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34d6162f24696537835ad543c8b277ad32209282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ea:d4:fb:9d:9e:04:93:b2:37:5b:63:9f:d4:
8f:98:5d:99:9d:6c:dd:71:a1:95:76:f0:f9:42:a1:
c6:f4:25:2d:9c:1a:bb:52:ed:12:3a:24:55:19:f8:
c4:a2:08:cd:1e:c8:49:8d:c2:07:d0:31:93:fc:b7:
a3:26:b6:62:55:39:75:46:8c:85:93:8e:3d:c0:58:
fd:4d:af:ec:9d:eb:aa:d4:53:b8:53:00:38:33:4c:
64:50:62:81:ed:f8:4d:6f:52:c0:11:a9:a9:3e:4c:
1b:d0:c6:47:a6:b7:1f:23:9d:ac:84:a0:2d:6d:28:
33:7b:2d:71:65:07:ee:a2:bb:06:73:ef:0d:f7:a0:
d4:9c:4c:b7:9c:87:97:9a:7a:02:2d:1b:34:98:b5:
fb:a1:83:84:2c:5d:87:84:4f:79:ac:0c:0c:ca:e2:
3c:86:ec:85:90:09:e5:b2:61:bf:b8:a8:5c:3e:f1:
f4:2b:a0:80:ae:51:d0:49:8c:7d:4d:81:92:52:cb:
bd:40:0f:7f:25:9f:bc:64:3d:72:3c:28:61:9c:8b:
31:90:cb:9b:41:89:4a:f0:7c:c8:e4:9d:9d:b2:47:
9a:07:ef:1f:0d:b4:5a:86:6d:7f:a1:4b:a2:91:85:
71:56:ad:68:e1:b6:b6:b6:0c:b3:ff:4a:b4:e7:0f:
f7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D6:16:2F:24:69:65:37:83:5A:D5:43:C8:B2:77:AD:32:20:92:82
X509v3 Authority Key Identifier:
keyid:AB:6C:80:08:06:37:FA:CB:16:F5:19:C5:D9:7E:C2:7B:3D:85:09:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/NNYWLyRpZTeDWtVDyLJ3rTIgkoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.222.104.0/22
Signature Algorithm: sha256WithRSAEncryption
84:ae:65:1c:bf:fc:13:51:88:a5:a7:26:65:51:0d:df:59:02:
8d:da:f7:ce:23:d5:10:58:3e:5f:d7:62:a1:a0:92:5d:d8:e6:
29:8d:02:34:38:9a:74:ae:44:74:45:e0:f4:15:d7:dc:84:0c:
6f:eb:e2:21:d6:4f:a3:c8:31:9b:25:9c:fc:1a:7e:18:59:1d:
6d:9a:aa:66:d8:9b:86:b0:7a:18:8f:f9:0c:f7:b3:3e:64:20:
ce:f3:6b:8b:94:b1:2e:77:fe:57:b8:c9:4b:fd:e3:8c:b9:63:
72:97:82:5d:25:de:fa:1a:a6:11:81:25:50:f1:37:bc:06:07:
29:49:80:70:25:e7:70:1a:43:5a:9e:93:46:7b:27:54:82:e6:
0f:22:77:f3:01:c8:cc:cb:08:e2:3c:5f:42:d1:9e:03:95:0e:
6f:0e:55:de:d8:66:eb:f2:ec:6c:27:38:7e:3d:b9:40:d5:3f:
ee:37:fc:bf:2e:5c:a5:99:56:37:84:e1:eb:7c:53:97:7f:45:
ae:d1:23:f1:4f:d1:bc:e9:4b:de:ec:72:30:e3:c3:e3:a1:a3:
e5:ea:af:98:74:2b:a2:61:d8:fa:01:7f:0a:8a:a9:b6:e0:a7:
d6:85:8c:99:9f:f7:7d:a1:74:e8:23:af:28:37:ba:8f:75:cb:
91:74:b0:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIbyc3muz8E9TTGamfUFIwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNmM4MDA4MDYzN2ZhY2IxNmY1MTljNWQ5N2VjMjdiM2Q4
NTA5N2QwHhcNMjQwMTAyMDQyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGQ2MTYyZjI0Njk2NTM3ODM1YWQ1NDNjOGIyNzdhZDMyMjA5MjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgerU+52eBJOyN1tjn9SPmF2ZnWzd
caGVdvD5QqHG9CUtnBq7Uu0SOiRVGfjEogjNHshJjcIH0DGT/LejJrZiVTl1RoyF
k449wFj9Ta/sneuq1FO4UwA4M0xkUGKB7fhNb1LAEampPkwb0MZHprcfI52shKAt
bSgzey1xZQfuorsGc+8N96DUnEy3nIeXmnoCLRs0mLX7oYOELF2HhE95rAwMyuI8
huyFkAnlsmG/uKhcPvH0K6CArlHQSYx9TYGSUsu9QA9/JZ+8ZD1yPChhnIsxkMub
QYlK8HzI5J2dskeaB+8fDbRahm1/oUuikYVxVq1o4ba2tgyz/0q05w/35wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDTWFi8kaWU3g1rVQ8iyd60yIJKCMB8GA1UdIwQY
MBaAFKtsgAgGN/rLFvUZxdl+wns9hQl9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTJ5QUNBWTMtc3NXOVJuRjJYN0NlejJGQ1gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82YTJjNWMtOWUxYi00NTYxLWE0ZTkt
ZTllMWQ5MWE5ODE2LzEvTk5ZV0x5UnBaVGVEV3RWRHlMSjNyVElna29JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC82YTJjNWMtOWUxYi00NTYxLWE0ZTktZTllMWQ5MWE5ODE2
LzEvcTJ5QUNBWTMtc3NXOVJuRjJYN0NlejJGQ1gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw95oMA0G
CSqGSIb3DQEBCwUAA4IBAQCErmUcv/wTUYilpyZlUQ3fWQKN2vfOI9UQWD5f12Kh
oJJd2OYpjQI0OJp0rkR0ReD0FdfchAxv6+Ih1k+jyDGbJZz8Gn4YWR1tmqpm2JuG
sHoYj/kM97M+ZCDO82uLlLEud/5XuMlL/eOMuWNyl4JdJd76GqYRgSVQ8Te8Bgcp
SYBwJedwGkNanpNGeydUguYPInfzAcjMywjiPF9C0Z4DlQ5vDlXe2Gbr8uxsJzh+
PblA1T/uN/y/LlylmVY3hOHrfFOXf0Wu0SPxT9G86Uve7HIw48PjoaPl6q+YdCui
Ydj6AX8Kiqm24KfWhYyZn/d9oXToI68oN7qPdcuRdLAa
-----END CERTIFICATE-----
Generated at Sat Jun 1 17:11:24 2024 by rpki-client on console-fra.rpki-client.org