Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/n3_k8agOH5MINHyqWIzvVkTgwSI.roa
File: n3_k8agOH5MINHyqWIzvVkTgwSI.roa (raw, json)
Hash identifier: K7y3JE14AGeUpK54EfwffyPsu6xPRvE+8GIAMKW3DTI=
Subject key identifier: 9F:7F:E4:F1:A8:0E:1F:93:08:34:7C:AA:58:8C:EF:56:44:E0:C1:22
Certificate issuer: /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial: 018CC6B8D3F48D6C6E07C3A1457D1946DA80
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/n3_k8agOH5MINHyqWIzvVkTgwSI.roa
Signing time: Mon 01 Jan 2024 20:30:50 +0000
ROA not before: Mon 01 Jan 2024 20:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34002
IP address blocks: 209.222.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:d3:f4:8d:6c:6e:07:c3:a1:45:7d:19:46:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Validity
Not Before: Jan 1 20:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f7fe4f1a80e1f9308347caa588cef5644e0c122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ac:e8:fa:09:e4:4a:ec:5d:aa:9b:f6:22:5d:
c0:96:51:26:7d:06:8c:bc:36:40:5b:08:9d:b5:32:
00:57:55:d5:8e:e7:13:cb:bc:d8:5a:63:a1:5a:4c:
0f:a9:57:27:16:03:27:f6:8b:8d:26:1a:ba:81:7e:
5c:4b:ae:bc:03:8d:13:e2:68:54:07:03:1d:38:49:
9d:0e:45:33:50:0f:90:b5:b1:00:f5:37:12:33:66:
4a:70:98:d2:28:a8:2a:03:fc:94:5b:d0:b0:38:af:
9c:16:d8:5c:21:f4:e3:9b:5f:d0:12:b8:46:1c:3a:
4f:d5:8c:7b:a2:3b:e3:85:64:ec:ec:5f:a6:f5:4e:
73:a4:05:ec:97:54:00:21:f8:9e:0e:b9:6d:e2:3f:
1a:b1:06:d7:1e:f3:0f:03:36:6c:f8:2f:a6:86:37:
8d:2f:37:65:1c:be:81:89:71:ea:de:fd:ab:a7:b7:
bf:9e:94:5a:9f:1c:10:57:98:79:43:73:46:85:c9:
3d:52:4f:ac:4b:80:9b:9c:7d:fb:8c:36:b1:d3:dc:
b8:eb:97:dc:46:de:d1:c9:31:c5:da:4f:a9:81:68:
06:9e:2f:79:b1:36:85:46:68:30:5d:22:2f:04:58:
b5:8f:b8:60:a3:5d:f9:94:a7:a1:fa:ae:ac:7c:8f:
db:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7F:E4:F1:A8:0E:1F:93:08:34:7C:AA:58:8C:EF:56:44:E0:C1:22
X509v3 Authority Key Identifier:
keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/n3_k8agOH5MINHyqWIzvVkTgwSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.222.77.0/24
Signature Algorithm: sha256WithRSAEncryption
16:29:a9:e5:98:79:c8:9c:8b:7f:cf:07:50:21:ec:cf:df:8c:
67:8b:f6:50:97:eb:4a:68:72:a8:fa:99:1f:ea:85:99:d2:fd:
30:06:f1:bd:d3:9f:bd:d8:7e:f3:f4:93:e1:bd:9a:8d:68:fa:
d8:2f:ed:71:23:d6:3b:cb:51:65:00:90:18:0b:3d:10:81:c0:
9c:4a:15:da:4b:cd:d3:e1:a4:3a:2b:bc:15:19:12:4d:a0:88:
95:6d:61:a2:2b:9b:07:08:f8:5c:4f:5d:04:40:4e:8a:76:bd:
25:dd:01:db:b2:6a:12:84:59:53:a6:99:be:c7:2f:9d:70:3f:
e4:e6:a9:57:05:00:f2:14:8a:77:c2:fe:cd:80:11:8d:fc:1d:
d4:c6:2c:3c:3b:f2:6f:46:e0:a5:a8:01:8e:40:73:93:49:b3:
01:66:78:f8:06:9b:0f:57:f8:bb:21:2d:6f:1b:ee:a4:e6:68:
73:6d:ab:58:e5:57:fb:b7:bf:8c:c3:bb:00:7b:9f:c1:5f:11:
4c:b7:c0:08:f4:7c:9b:39:88:31:aa:c3:02:9c:8b:ae:71:a1:
bd:a7:25:c7:bf:6c:5e:fe:80:6a:c3:4b:ef:a8:09:48:71:72:
ed:0b:cb:06:10:ae:41:6b:20:4e:54:c7:ca:d7:ba:39:13:fb:
dd:dc:a8:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuNP0jWxuB8OhRX0ZRtqAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OTE0NTZlZGE1OWZiMGZkMmQxNzNmOTU0MTJiZTM1ZjZj
ZmJmYWYwHhcNMjQwMTAxMjAzMDUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjdmZTRmMWE4MGUxZjkzMDgzNDdjYWE1ODhjZWY1NjQ0ZTBjMTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKzo+gnkSuxdqpv2Il3AllEmfQaM
vDZAWwidtTIAV1XVjucTy7zYWmOhWkwPqVcnFgMn9ouNJhq6gX5cS668A40T4mhU
BwMdOEmdDkUzUA+QtbEA9TcSM2ZKcJjSKKgqA/yUW9CwOK+cFthcIfTjm1/QErhG
HDpP1Yx7ojvjhWTs7F+m9U5zpAXsl1QAIfieDrlt4j8asQbXHvMPAzZs+C+mhjeN
LzdlHL6BiXHq3v2rp7e/npRanxwQV5h5Q3NGhck9Uk+sS4CbnH37jDax09y465fc
Rt7RyTHF2k+pgWgGni95sTaFRmgwXSIvBFi1j7hgo135lKeh+q6sfI/b8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ9/5PGoDh+TCDR8qliM71ZE4MEiMB8GA1UdIwQY
MBaAFMSRRW7aWfsP0tFz+VQSvjX2z7+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni80ZjQwOGQtYmRhNS00YTk0LWI4M2Et
YTczMGNjZmRhZGM1LzEvbjNfazhhZ09INU1JTkh5cVdJenZWa1Rnd1NJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni80ZjQwOGQtYmRhNS00YTk0LWI4M2EtYTczMGNjZmRhZGM1
LzEveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d5NMA0G
CSqGSIb3DQEBCwUAA4IBAQAWKanlmHnInIt/zwdQIezP34xni/ZQl+tKaHKo+pkf
6oWZ0v0wBvG905+92H7z9JPhvZqNaPrYL+1xI9Y7y1FlAJAYCz0QgcCcShXaS83T
4aQ6K7wVGRJNoIiVbWGiK5sHCPhcT10EQE6Kdr0l3QHbsmoShFlTppm+xy+dcD/k
5qlXBQDyFIp3wv7NgBGN/B3Uxiw8O/JvRuClqAGOQHOTSbMBZnj4BpsPV/i7IS1v
G+6k5mhzbatY5Vf7t7+Mw7sAe5/BXxFMt8AI9HybOYgxqsMCnIuucaG9pyXHv2xe
/oBqw0vvqAlIcXLtC8sGEK5BayBOVMfK17o5E/vd3Kgb
-----END CERTIFICATE-----
Generated at Sat Jun 8 09:33:55 2024 by rpki-client on console-fra.rpki-client.org