Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/NSVv4jZ1pI5VKR5HZLctv_VaKBc.roa
File: NSVv4jZ1pI5VKR5HZLctv_VaKBc.roa (raw, json)
Hash identifier: lyTUcBEJWmNf9lMpr2Qj8R7mnI0ECWyFa54DBv1CerI=
Subject key identifier: 35:25:6F:E2:36:75:A4:8E:55:29:1E:47:64:B7:2D:BF:F5:5A:28:17
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 01922CF6DCCC659823D3366B1D5F58D391E7
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/NSVv4jZ1pI5VKR5HZLctv_VaKBc.roa
Signing time: Thu 26 Sep 2024 06:13:48 +0000
ROA not before: Thu 26 Sep 2024 06:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211138
IP address blocks: 212.22.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2c:f6:dc:cc:65:98:23:d3:36:6b:1d:5f:58:d3:91:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Sep 26 06:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35256fe23675a48e55291e4764b72dbff55a2817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0f:f1:4d:5e:d7:58:f9:f0:b0:a4:b6:76:7f:
e8:e8:40:0b:2d:ce:b8:c3:b4:58:3f:85:a1:75:95:
10:f3:5b:a3:7c:28:8b:c2:38:d3:76:58:87:a4:82:
24:c6:aa:bc:f1:48:4c:ee:7e:56:00:6b:2f:02:1c:
65:27:db:2b:04:f4:af:cf:74:b1:64:bf:e3:6a:49:
73:59:d1:96:fe:f5:bb:ea:92:8d:b9:8a:b0:40:c1:
bf:ef:f3:6f:80:bd:22:f4:e3:43:1d:0f:1d:63:23:
49:e5:bc:29:78:00:41:8b:32:4c:c2:8d:3b:a7:e2:
fe:98:9e:54:bd:ed:de:eb:39:6e:1f:dc:c9:d7:08:
65:52:75:30:3b:4d:b3:d4:99:f3:21:4c:9d:54:ed:
9f:06:49:f9:d3:a4:ed:8a:95:89:53:43:1f:f2:49:
ef:c5:7c:f2:26:2a:00:f1:5d:0b:47:35:c2:96:1a:
a7:c1:23:a3:97:ad:cd:c0:6d:50:a7:5a:2b:66:7a:
ab:a5:77:53:b3:43:64:30:1e:a2:69:b1:f6:d1:69:
7e:11:0f:19:96:35:f7:2e:26:6f:ef:80:7b:f1:ed:
e6:48:c0:f7:45:e1:ea:35:d6:67:dd:0e:2b:d7:c7:
2c:a9:6f:65:e7:66:5a:25:51:9b:3f:81:01:01:3e:
b0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:25:6F:E2:36:75:A4:8E:55:29:1E:47:64:B7:2D:BF:F5:5A:28:17
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/NSVv4jZ1pI5VKR5HZLctv_VaKBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.82.0/24
Signature Algorithm: sha256WithRSAEncryption
91:7c:72:4f:fb:6b:74:e6:ac:db:77:56:1d:f7:59:d4:bc:a9:
33:aa:a9:e3:db:50:c9:9e:a0:07:93:01:7c:96:d0:19:b7:05:
b1:be:ea:f6:de:3d:bf:63:d1:6f:b6:06:63:f0:6f:3b:8a:73:
f4:91:09:04:15:d0:d1:b8:64:0b:72:0c:ea:2e:10:86:b8:f4:
15:07:75:f8:fb:2e:71:12:3b:01:47:fc:50:93:db:f6:f3:37:
e6:c5:3a:89:32:07:26:92:0d:4c:06:99:11:37:22:aa:84:34:
41:98:1e:18:02:c5:eb:d7:de:98:bf:7e:3f:24:f0:30:f7:f4:
cd:a9:f2:0f:90:56:2a:2a:d9:a9:e6:25:55:2e:cb:87:5c:9c:
18:a2:08:40:90:62:cb:1e:32:44:e6:f4:1f:da:7e:d0:9b:af:
af:2c:ef:47:34:cf:5e:1c:b1:fd:12:7d:c6:c9:25:c1:ed:c2:
57:2a:1a:3e:6e:01:c6:7f:09:47:e0:af:4a:1e:38:90:96:24:
0d:c4:7e:4d:4b:e3:c6:be:89:e6:13:22:2e:33:b9:12:ca:50:
21:54:c4:f3:40:50:f8:dc:4d:0f:73:93:d0:bb:38:a5:8d:5f:
c0:f4:f2:6b:1a:4c:6c:ef:92:b9:30:21:10:18:17:f1:ca:6b:
4a:6b:5d:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZIs9tzMZZgj0zZrHV9Y05HnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm
YmViOWEwHhcNMjQwOTI2MDYxMzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTI1NmZlMjM2NzVhNDhlNTUyOTFlNDc2NGI3MmRiZmY1NWEyODE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Q/xTV7XWPnwsKS2dn/o6EALLc64
w7RYP4WhdZUQ81ujfCiLwjjTdliHpIIkxqq88UhM7n5WAGsvAhxlJ9srBPSvz3Sx
ZL/jaklzWdGW/vW76pKNuYqwQMG/7/NvgL0i9ONDHQ8dYyNJ5bwpeABBizJMwo07
p+L+mJ5Uve3e6zluH9zJ1whlUnUwO02z1JnzIUydVO2fBkn506TtipWJU0Mf8knv
xXzyJioA8V0LRzXClhqnwSOjl63NwG1Qp1orZnqrpXdTs0NkMB6iabH20Wl+EQ8Z
ljX3LiZv74B78e3mSMD3ReHqNdZn3Q4r18csqW9l52ZaJVGbP4EBAT6wowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDUlb+I2daSOVSkeR2S3Lb/1WigXMB8GA1UdIwQY
MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt
NmE0ZWNhZjhiM2IxLzEvTlNWdjRqWjFwSTVWS1I1SFpMY3R2X1ZhS0JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix
LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BZSMA0G
CSqGSIb3DQEBCwUAA4IBAQCRfHJP+2t05qzbd1Yd91nUvKkzqqnj21DJnqAHkwF8
ltAZtwWxvur23j2/Y9FvtgZj8G87inP0kQkEFdDRuGQLcgzqLhCGuPQVB3X4+y5x
EjsBR/xQk9v28zfmxTqJMgcmkg1MBpkRNyKqhDRBmB4YAsXr196Yv34/JPAw9/TN
qfIPkFYqKtmp5iVVLsuHXJwYoghAkGLLHjJE5vQf2n7Qm6+vLO9HNM9eHLH9En3G
ySXB7cJXKho+bgHGfwlH4K9KHjiQliQNxH5NS+PGvonmEyIuM7kSylAhVMTzQFD4
3E0Pc5PQuziljV/A9PJrGkxs75K5MCEQGBfxymtKa13J
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:26:46 2024 by rpki-client on console-ams.rpki-client.org