Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/nMPVSGB92D5hdHTLvr-Y6WMCesM.roa
File: nMPVSGB92D5hdHTLvr-Y6WMCesM.roa (raw, json)
Hash identifier: XRWDbL13fyNJSc46rbSbjW+J9x1iBADhq6NSUCHXlwA=
Subject key identifier: 9C:C3:D5:48:60:7D:D8:3E:61:74:74:CB:BE:BF:98:E9:63:02:7A:C3
Certificate issuer: /CN=f73cdc6751d7c59073e4b706402d3691af09086f
Certificate serial: 018CC3B6EE232423CB80ADC722D2B5BFFB6B
Authority key identifier: F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/nMPVSGB92D5hdHTLvr-Y6WMCesM.roa
Signing time: Mon 01 Jan 2024 06:29:54 +0000
ROA not before: Mon 01 Jan 2024 06:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49826
IP address blocks: 87.236.224.0/21 maxlen: 21
82.116.224.0/19 maxlen: 19
80.247.240.0/20 maxlen: 20
185.136.36.0/22 maxlen: 22
2a00:14b8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ee:23:24:23:cb:80:ad:c7:22:d2:b5:bf:fb:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73cdc6751d7c59073e4b706402d3691af09086f
Validity
Not Before: Jan 1 06:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9cc3d548607dd83e617474cbbebf98e963027ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:33:bc:c0:ca:a5:33:4b:01:b7:ba:43:c5:d4:
fe:3b:7c:a6:4c:c9:5f:e0:d4:a9:9a:e3:d5:57:b0:
e6:5d:95:cd:1d:f0:b2:39:17:96:bf:f2:bc:44:c2:
ba:ed:74:e7:4d:9b:53:91:fd:fd:df:cb:32:20:1d:
36:70:95:22:7a:cd:99:07:5d:ae:93:eb:ac:7e:b0:
ce:6e:dd:c2:cd:37:f5:c7:7f:f3:c5:c8:5b:08:8f:
48:dc:ac:2f:76:0a:87:9d:b0:b9:2c:f6:d3:4e:7b:
ed:6d:9f:4b:b8:f6:46:43:91:0c:61:f8:73:6b:b6:
7b:2e:40:34:15:61:68:63:b5:7f:f3:de:09:19:51:
01:01:84:6d:4f:69:9e:2e:28:8b:3b:2b:9f:43:f0:
c6:65:c2:7e:5f:29:42:07:e7:54:85:46:cc:e7:3f:
e3:82:45:7b:24:bb:01:d5:a8:8f:8a:80:74:42:5c:
3b:02:ca:b9:1a:bd:ee:0c:c3:b9:ce:68:a3:36:06:
c2:62:63:22:5e:63:8a:52:3d:f4:b2:67:da:e6:8b:
16:94:50:bf:ac:0f:50:03:07:8a:e7:65:65:9b:4f:
dd:5f:21:55:0c:e8:83:7e:56:96:6e:dc:61:ca:97:
c2:a3:0d:43:85:58:fe:17:24:00:3b:cc:77:e3:02:
64:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C3:D5:48:60:7D:D8:3E:61:74:74:CB:BE:BF:98:E9:63:02:7A:C3
X509v3 Authority Key Identifier:
keyid:F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/nMPVSGB92D5hdHTLvr-Y6WMCesM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.240.0/20
82.116.224.0/19
87.236.224.0/21
185.136.36.0/22
IPv6:
2a00:14b8::/32
Signature Algorithm: sha256WithRSAEncryption
3e:f9:33:6f:de:a2:41:b6:ef:98:25:3c:cc:57:3a:a8:78:b6:
d4:1d:bb:99:9d:0a:76:e7:2a:6c:41:0d:93:2e:62:0d:4c:14:
ba:66:56:9d:a9:1f:fe:89:cf:7f:1b:ec:cd:a5:3a:c3:6d:e6:
33:ca:83:29:3f:2f:f6:57:e4:d4:8b:b4:51:3d:f3:ce:14:c0:
cc:35:a7:4c:f4:a7:15:99:d9:de:83:30:d4:21:91:54:38:d0:
8d:5f:ef:94:6b:45:37:fa:e9:4b:f7:22:44:5c:f7:f5:4a:74:
62:61:f9:a6:5b:39:b8:da:f2:83:08:6c:12:70:49:d0:73:f9:
98:ce:d2:be:da:c4:c2:e9:44:e6:1c:99:83:a3:20:0e:02:db:
e3:bf:60:25:e0:cb:47:86:90:66:a1:e7:87:f1:23:f5:af:28:
cf:16:fe:fd:c7:c9:22:36:ab:44:da:e6:4f:62:1a:62:b7:16:
07:23:56:b2:60:eb:15:6e:0f:8e:5a:60:3b:d4:01:c4:9f:d7:
b4:c1:11:8f:bf:e9:be:fa:1b:c5:b7:f4:58:2e:e6:2c:23:0b:
46:50:ef:59:8c:4c:e7:0a:50:8a:c1:74:0c:3b:34:d1:0b:16:
15:38:29:f5:67:1d:3e:dd:58:2d:d0:f1:e9:21:69:73:ae:cb:
9d:23:7d:0c
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYzDtu4jJCPLgK3HItK1v/trMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3M2NkYzY3NTFkN2M1OTA3M2U0YjcwNjQwMmQzNjkxYWYw
OTA4NmYwHhcNMjQwMTAxMDYyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2MzZDU0ODYwN2RkODNlNjE3NDc0Y2JiZWJmOThlOTYzMDI3YWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzO8wMqlM0sBt7pDxdT+O3ymTMlf
4NSpmuPVV7DmXZXNHfCyOReWv/K8RMK67XTnTZtTkf3938syIB02cJUies2ZB12u
k+usfrDObt3CzTf1x3/zxchbCI9I3KwvdgqHnbC5LPbTTnvtbZ9LuPZGQ5EMYfhz
a7Z7LkA0FWFoY7V/894JGVEBAYRtT2meLiiLOyufQ/DGZcJ+XylCB+dUhUbM5z/j
gkV7JLsB1aiPioB0Qlw7Asq5Gr3uDMO5zmijNgbCYmMiXmOKUj30smfa5osWlFC/
rA9QAweK52Vlm0/dXyFVDOiDflaWbtxhypfCow1DhVj+FyQAO8x34wJkKwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFJzD1Uhgfdg+YXR0y76/mOljAnrDMB8GA1UdIwQY
MBaAFPc83GdR18WQc+S3BkAtNpGvCQhvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXp6Y1oxSFh4WkJ6NUxjR1FDMDJrYThKQ0c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS84NTUwMDItZDgyMy00MWZlLThmOWEt
NzE4ZmQxOTVjNWViLzEvbk1QVlNHQjkyRDVoZEhUTHZyLVk2V01DZXNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS84NTUwMDItZDgyMy00MWZlLThmOWEtNzE4ZmQxOTVjNWVi
LzEvOXp6Y1oxSFh4WkJ6NUxjR1FDMDJrYThKQ0c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEUPfwAwQF
UnTgAwQDV+zgAwQCuYgkMA0EAgACMAcDBQAqABS4MA0GCSqGSIb3DQEBCwUAA4IB
AQA++TNv3qJBtu+YJTzMVzqoeLbUHbuZnQp25ypsQQ2TLmINTBS6ZladqR/+ic9/
G+zNpTrDbeYzyoMpPy/2V+TUi7RRPfPOFMDMNadM9KcVmdnegzDUIZFUONCNX++U
a0U3+ulL9yJEXPf1SnRiYfmmWzm42vKDCGwScEnQc/mYztK+2sTC6UTmHJmDoyAO
Atvjv2Al4MtHhpBmoeeH8SP1ryjPFv79x8kiNqtE2uZPYhpitxYHI1ayYOsVbg+O
WmA71AHEn9e0wRGPv+m++hvFt/RYLuYsIwtGUO9ZjEznClCKwXQMOzTRCxYVOCn1
Zx0+3Vgt0PHpIWlzrsudI30M
-----END CERTIFICATE-----
Generated at Sun May 19 10:30:21 2024 by rpki-client on console-ams.rpki-client.org