Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/noz8uXaDBDXBa4e0420MBrzOc28.roa
File: noz8uXaDBDXBa4e0420MBrzOc28.roa (raw, json)
Hash identifier: re4x9284RrgrtR8WZP0LIE+GQRkNSAzziMjJycatMzA=
Subject key identifier: 9E:8C:FC:B9:76:83:04:35:C1:6B:87:B4:E3:6D:0C:06:BC:CE:73:6F
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DAE9A8BB08CEE4DBB785210736E24A
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/noz8uXaDBDXBa4e0420MBrzOc28.roa
Signing time: Mon 01 Jan 2024 02:29:35 +0000
ROA not before: Mon 01 Jan 2024 02:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212305
IP address blocks: 88.220.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e9:a8:bb:08:ce:e4:db:b7:85:21:07:36:e2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e8cfcb976830435c16b87b4e36d0c06bcce736f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9c:4e:62:1c:d0:1c:81:7f:46:e5:79:32:4d:
1a:ce:48:62:3f:2c:aa:b1:93:ba:18:14:97:0b:89:
3e:ae:34:bd:8e:87:4d:97:9a:06:9f:65:65:3c:26:
db:fe:45:ad:c0:11:83:37:07:3a:0f:18:2f:c4:8e:
bc:31:f2:9a:b1:9f:a1:0d:4d:b7:6a:aa:96:68:2e:
99:e8:28:d7:f3:89:45:8b:d8:8c:77:fd:fd:34:a1:
b3:8d:b0:bf:60:38:89:68:ca:90:ef:61:52:cf:b7:
1d:64:9e:2e:5e:53:19:f3:ce:72:27:f7:7d:7b:b2:
bd:aa:6d:c1:d9:8b:f8:81:43:fb:b6:3a:5f:6d:36:
b5:59:be:22:1f:6e:08:27:16:e8:2b:61:3d:f4:57:
ad:cf:aa:dd:8a:a4:57:e7:23:20:7d:b3:3c:10:06:
6d:1e:dd:f0:40:42:57:62:66:83:7f:24:e4:55:b7:
1c:23:7f:73:ab:ec:e6:3a:79:52:64:26:6b:79:1c:
74:67:0b:c8:a9:53:b5:0f:3d:bb:91:d7:57:21:70:
e9:ab:80:d5:6b:3c:df:50:73:1a:9b:fb:42:da:24:
bf:66:a9:7c:3c:ea:bd:36:8b:a6:dc:7f:67:29:d3:
98:82:d4:fd:ab:d1:f1:41:96:f0:aa:0d:ba:e5:99:
b4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8C:FC:B9:76:83:04:35:C1:6B:87:B4:E3:6D:0C:06:BC:CE:73:6F
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/noz8uXaDBDXBa4e0420MBrzOc28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.90.0/24
Signature Algorithm: sha256WithRSAEncryption
91:7a:32:48:a3:89:75:34:29:06:a7:b9:fb:56:b3:a0:73:1f:
e0:c3:3e:02:db:d9:df:fc:49:9a:13:eb:89:fa:3c:b8:5d:95:
c0:ba:6d:96:15:fe:38:0a:bf:8a:35:35:46:a3:af:1c:21:6d:
7a:87:af:ab:f7:0e:2e:ed:40:0d:e1:fa:a6:2b:52:f4:a6:35:
50:0a:f9:1f:4b:6d:7f:25:08:39:9a:8a:4a:e2:97:0e:17:55:
65:9b:4d:e0:73:2f:0f:d6:c7:57:68:75:82:83:a0:fe:46:61:
78:d8:60:3d:c4:79:2e:74:2d:88:b9:95:3b:ed:02:8c:3c:3f:
57:a1:ca:7b:83:17:43:a4:b0:1a:65:da:ca:72:8a:4c:fa:3a:
58:bf:35:14:81:ca:f0:40:3b:e4:b5:d8:f6:90:c5:ce:45:36:
12:f0:a2:46:a5:93:86:6d:e3:12:52:3a:e0:64:c0:79:3d:8a:
f1:d2:a9:64:7b:33:f2:9a:4f:00:c2:7a:17:c0:13:a8:05:7a:
2f:11:81:5c:1d:93:47:7d:6f:5b:c8:0c:0f:18:f0:92:f9:17:
85:71:b0:9b:17:de:5a:f0:fb:c8:f5:ba:ef:17:1e:04:52:79:
9c:7f:af:55:c5:8d:fd:f1:e9:1a:09:4c:0b:d1:09:29:e0:77:
04:cf:b6:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2umouwjO5Nu3hSEHNuJKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjQwMTAxMDIyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZThjZmNiOTc2ODMwNDM1YzE2Yjg3YjRlMzZkMGMwNmJjY2U3MzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5xOYhzQHIF/RuV5Mk0azkhiPyyq
sZO6GBSXC4k+rjS9jodNl5oGn2VlPCbb/kWtwBGDNwc6DxgvxI68MfKasZ+hDU23
aqqWaC6Z6CjX84lFi9iMd/39NKGzjbC/YDiJaMqQ72FSz7cdZJ4uXlMZ885yJ/d9
e7K9qm3B2Yv4gUP7tjpfbTa1Wb4iH24IJxboK2E99Fetz6rdiqRX5yMgfbM8EAZt
Ht3wQEJXYmaDfyTkVbccI39zq+zmOnlSZCZreRx0ZwvIqVO1Dz27kddXIXDpq4DV
azzfUHMam/tC2iS/Zql8POq9Noum3H9nKdOYgtT9q9HxQZbwqg265Zm0vwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ6M/Ll2gwQ1wWuHtONtDAa8znNvMB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvbm96OHVYYURCRFhCYTRlMDQyME1CcnpPYzI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNxaMA0G
CSqGSIb3DQEBCwUAA4IBAQCRejJIo4l1NCkGp7n7VrOgcx/gwz4C29nf/EmaE+uJ
+jy4XZXAum2WFf44Cr+KNTVGo68cIW16h6+r9w4u7UAN4fqmK1L0pjVQCvkfS21/
JQg5mopK4pcOF1Vlm03gcy8P1sdXaHWCg6D+RmF42GA9xHkudC2IuZU77QKMPD9X
ocp7gxdDpLAaZdrKcopM+jpYvzUUgcrwQDvktdj2kMXORTYS8KJGpZOGbeMSUjrg
ZMB5PYrx0qlkezPymk8AwnoXwBOoBXovEYFcHZNHfW9byAwPGPCS+ReFcbCbF95a
8PvI9brvFx4EUnmcf69VxY398ekaCUwL0Qkp4HcEz7bb
-----END CERTIFICATE-----
Generated at Sat Jun 1 08:51:59 2024 by rpki-client on console-ams.rpki-client.org