Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/NCXGMvqR9IQHKfmDFn49zwvAOsQ.roa
File: NCXGMvqR9IQHKfmDFn49zwvAOsQ.roa (raw, json)
Hash identifier: vcVV8e0KREOOz/rC7HWKOalIwbj9jgJelzk/7M4+hyk=
Subject key identifier: 34:25:C6:32:FA:91:F4:84:07:29:F9:83:16:7E:3D:CF:0B:C0:3A:C4
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 019246A36E840D5BB96AA8FC5B99B1408B98
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/NCXGMvqR9IQHKfmDFn49zwvAOsQ.roa
Signing time: Tue 01 Oct 2024 05:52:48 +0000
ROA not before: Tue 01 Oct 2024 05:52:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43352
IP address blocks: 91.93.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:46:a3:6e:84:0d:5b:b9:6a:a8:fc:5b:99:b1:40:8b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Oct 1 05:52:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3425c632fa91f4840729f983167e3dcf0bc03ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b2:94:f2:10:7c:50:cb:00:24:c5:78:6a:e8:
6d:9c:49:5d:6f:4b:0d:44:73:74:db:8b:92:38:0b:
a5:ac:eb:6f:07:8a:89:1a:d8:4e:72:5b:15:f7:85:
ee:20:b3:5f:e8:a9:aa:98:65:f3:0b:58:9d:41:3d:
50:66:06:e4:45:9a:ad:aa:76:2b:14:5d:60:71:9d:
d6:0b:05:ac:c3:39:60:6d:42:60:d4:c9:30:06:8e:
7e:59:ba:86:2c:a3:21:14:9f:4a:27:6f:25:fe:08:
f1:46:3c:2d:8e:d2:26:89:4b:aa:04:a7:e2:cb:ca:
b8:99:bc:11:3b:e2:05:03:e3:27:a5:85:d4:91:e7:
ff:a2:e9:41:5c:bf:d5:3c:e8:77:cb:0d:fa:74:14:
05:6f:4b:8e:7e:ec:96:fa:5a:37:62:0d:6a:20:a1:
6a:c9:40:77:e1:f0:19:f3:e0:55:31:37:0c:a7:7f:
57:e2:bd:8d:71:ef:e3:1c:9f:1c:ed:f7:a4:13:62:
72:af:9e:d4:b8:37:1f:af:c4:08:6b:7e:55:2b:53:
16:ae:57:e8:c1:52:3d:79:ec:e8:c5:67:6b:86:a0:
ca:e1:93:ab:91:f6:5f:7c:0e:30:c9:28:d9:94:13:
70:45:3c:8a:cc:78:a0:ec:82:eb:ae:13:90:0f:1c:
59:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:25:C6:32:FA:91:F4:84:07:29:F9:83:16:7E:3D:CF:0B:C0:3A:C4
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/NCXGMvqR9IQHKfmDFn49zwvAOsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.93.139.0/24
Signature Algorithm: sha256WithRSAEncryption
58:40:be:d1:31:4c:15:9d:60:00:1d:bf:e9:4b:59:ab:ae:17:
6e:4b:5b:81:98:8b:70:0c:dd:a6:7f:a7:7a:66:1c:28:d6:93:
15:da:82:0d:98:fc:9a:5c:26:9e:5a:d9:e9:15:0d:7a:d6:fd:
04:78:e8:a3:e9:21:a9:9c:27:3d:d0:5d:e0:a9:6a:12:51:98:
02:5e:b2:d3:87:62:85:35:b6:36:b9:7e:86:29:ff:33:75:4d:
95:71:cb:65:8a:0c:64:2c:c0:61:18:9d:b3:2a:4a:61:85:b0:
45:6f:cb:61:82:0c:4c:15:4d:72:e3:5e:91:33:dd:14:69:53:
65:ba:99:ca:2f:ed:14:74:85:ab:24:75:84:e7:e3:76:ce:88:
c6:23:d8:e5:a8:13:89:91:c0:7d:44:48:45:6f:24:fc:29:7a:
09:d9:e1:23:94:cc:f0:45:80:d3:dc:64:ce:78:4a:9e:9e:68:
31:94:c5:fa:85:10:92:bd:83:29:ec:4e:a4:e4:f0:46:44:a9:
55:e4:22:72:e7:0f:51:23:7b:19:79:54:b8:21:6d:94:d6:e8:
93:c1:dd:1b:b7:8e:7c:45:b9:a7:14:13:2a:89:53:9f:3d:a3:
4a:d2:f7:c5:eb:4c:ac:6d:3c:98:40:d5:17:11:d4:55:da:67:
22:47:98:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJGo26EDVu5aqj8W5mxQIuYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm
YmQzZTkwHhcNMjQxMDAxMDU1MjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDI1YzYzMmZhOTFmNDg0MDcyOWY5ODMxNjdlM2RjZjBiYzAzYWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bKU8hB8UMsAJMV4auhtnEldb0sN
RHN024uSOAulrOtvB4qJGthOclsV94XuILNf6KmqmGXzC1idQT1QZgbkRZqtqnYr
FF1gcZ3WCwWswzlgbUJg1MkwBo5+WbqGLKMhFJ9KJ28l/gjxRjwtjtImiUuqBKfi
y8q4mbwRO+IFA+MnpYXUkef/oulBXL/VPOh3yw36dBQFb0uOfuyW+lo3Yg1qIKFq
yUB34fAZ8+BVMTcMp39X4r2Nce/jHJ8c7fekE2Jyr57UuDcfr8QIa35VK1MWrlfo
wVI9eezoxWdrhqDK4ZOrkfZffA4wySjZlBNwRTyKzHig7ILrrhOQDxxZiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDQlxjL6kfSEByn5gxZ+Pc8LwDrEMB8GA1UdIwQY
MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt
ZjJiZTlmNmM2NjRjLzEvTkNYR012cVI5SVFIS2ZtREZuNDl6d3ZBT3NRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj
LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW12LMA0G
CSqGSIb3DQEBCwUAA4IBAQBYQL7RMUwVnWAAHb/pS1mrrhduS1uBmItwDN2mf6d6
Zhwo1pMV2oINmPyaXCaeWtnpFQ161v0EeOij6SGpnCc90F3gqWoSUZgCXrLTh2KF
NbY2uX6GKf8zdU2VcctligxkLMBhGJ2zKkphhbBFb8thggxMFU1y416RM90UaVNl
upnKL+0UdIWrJHWE5+N2zojGI9jlqBOJkcB9REhFbyT8KXoJ2eEjlMzwRYDT3GTO
eEqenmgxlMX6hRCSvYMp7E6k5PBGRKlV5CJy5w9RI3sZeVS4IW2U1uiTwd0bt458
RbmnFBMqiVOfPaNK0vfF60ysbTyYQNUXEdRV2mciR5if
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:42:03 2024 by rpki-client on console-ams.rpki-client.org