Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/nnfKzFjuayeWVX0R4afQKe02SNI.roa
File: nnfKzFjuayeWVX0R4afQKe02SNI.roa (raw, json)
Hash identifier: pz2QXz+J7Zh87iJT3LJvKHTJAF1aP919m7VYj0ndx2U=
Subject key identifier: 9E:77:CA:CC:58:EE:6B:27:96:55:7D:11:E1:A7:D0:29:ED:36:48:D2
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 018CC5010B1A8A9EDA982E1EEE94C27B51E9
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/nnfKzFjuayeWVX0R4afQKe02SNI.roa
Signing time: Mon 01 Jan 2024 12:30:29 +0000
ROA not before: Mon 01 Jan 2024 12:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212790
IP address blocks: 195.114.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:0b:1a:8a:9e:da:98:2e:1e:ee:94:c2:7b:51:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 12:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e77cacc58ee6b2796557d11e1a7d029ed3648d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f8:1d:91:85:a9:fa:2a:4d:f1:7a:41:1a:02:
55:3c:1d:43:de:56:4c:d1:6d:86:bd:61:30:69:80:
03:1c:95:30:6a:2b:c8:b5:d4:42:19:87:30:52:a3:
ad:c0:6e:69:49:bc:77:7d:d5:ba:32:f4:33:a8:22:
83:27:4f:1a:ee:60:9f:0c:6d:e1:81:b6:82:ff:fc:
b7:b8:07:23:d3:8b:41:19:46:58:25:14:86:d8:16:
78:40:97:05:5a:9b:70:b7:e6:99:b3:c2:d4:01:7c:
40:7e:fe:e0:28:86:d6:9f:6f:53:58:24:f1:73:31:
3a:46:41:f2:13:0e:c7:52:f6:39:50:72:e6:35:bf:
36:7f:4c:c9:d5:fb:68:f9:4d:e6:2a:bc:c7:86:6f:
b4:a8:3b:ab:55:6c:a4:e5:a0:2e:1b:b2:5a:20:6e:
f6:eb:04:76:cb:24:df:a5:68:cd:08:d6:24:40:71:
7e:18:3a:c7:b2:a8:e8:56:d2:3f:fa:a1:f2:8f:28:
bb:80:15:d4:ce:35:54:fb:00:68:a3:81:d2:a8:43:
b6:83:7e:8f:b7:95:f9:2a:27:0b:dc:95:b0:27:3c:
b6:b8:42:31:b7:f6:6a:05:6b:87:91:f2:34:0f:65:
51:f2:d8:1d:5a:15:e9:ed:16:69:71:ec:1a:87:0d:
ca:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:77:CA:CC:58:EE:6B:27:96:55:7D:11:E1:A7:D0:29:ED:36:48:D2
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/nnfKzFjuayeWVX0R4afQKe02SNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.136.0/24
Signature Algorithm: sha256WithRSAEncryption
87:af:2a:df:9a:69:3e:6a:43:6c:36:ba:18:98:2a:f8:0e:7b:
4b:77:59:41:d8:d2:ff:07:8a:16:c3:99:fa:63:9d:55:bf:69:
27:dc:83:2f:98:98:63:97:eb:bd:07:99:e5:a1:af:4d:f7:4b:
8a:2d:d6:01:5f:cb:0e:e3:ce:b8:06:54:f1:1c:da:03:ab:e3:
ee:b4:4d:43:dc:36:f7:f9:19:0e:e8:d4:e7:91:c7:00:48:e1:
12:41:c4:0f:64:df:2d:6a:a1:a1:96:6a:d4:76:54:1f:1d:d4:
25:aa:64:96:9a:e7:49:7d:ba:0a:e6:eb:d9:f3:fb:12:26:47:
2f:19:03:3a:04:f1:e3:bc:da:10:22:f1:13:9c:90:d0:eb:da:
54:21:3f:e8:aa:7c:b4:26:f2:eb:cb:72:34:2c:c9:a9:b1:43:
94:a6:9a:8a:bb:73:51:45:05:75:ba:08:23:5f:ed:b9:c9:b3:
2c:f8:3b:b6:5c:5d:57:3b:62:57:9b:ec:72:58:c2:88:73:55:
2e:6c:87:a9:81:62:e4:1d:6f:9e:39:7b:4d:e0:8e:8b:8a:e0:
cc:54:fc:90:f9:ac:cd:21:6d:5b:c2:cf:7d:98:92:a0:7a:b0:
d2:6d:55:f6:6e:16:b6:52:28:84:da:c0:e5:a0:08:2e:69:9d:
c3:f3:a6:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAQsaip7amC4e7pTCe1HpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky
OTMxNDAwHhcNMjQwMTAxMTIzMDI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTc3Y2FjYzU4ZWU2YjI3OTY1NTdkMTFlMWE3ZDAyOWVkMzY0OGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPgdkYWp+ipN8XpBGgJVPB1D3lZM
0W2GvWEwaYADHJUwaivItdRCGYcwUqOtwG5pSbx3fdW6MvQzqCKDJ08a7mCfDG3h
gbaC//y3uAcj04tBGUZYJRSG2BZ4QJcFWptwt+aZs8LUAXxAfv7gKIbWn29TWCTx
czE6RkHyEw7HUvY5UHLmNb82f0zJ1fto+U3mKrzHhm+0qDurVWyk5aAuG7JaIG72
6wR2yyTfpWjNCNYkQHF+GDrHsqjoVtI/+qHyjyi7gBXUzjVU+wBoo4HSqEO2g36P
t5X5KicL3JWwJzy2uEIxt/ZqBWuHkfI0D2VR8tgdWhXp7RZpcewahw3KTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ53ysxY7msnllV9EeGn0CntNkjSMB8GA1UdIwQY
MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt
MzA1NmFmOWEzMzVlLzEvbm5mS3pGanVheWVXVlgwUjRhZlFLZTAyU05JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl
LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw3KIMA0G
CSqGSIb3DQEBCwUAA4IBAQCHryrfmmk+akNsNroYmCr4DntLd1lB2NL/B4oWw5n6
Y51Vv2kn3IMvmJhjl+u9B5nloa9N90uKLdYBX8sO4864BlTxHNoDq+PutE1D3Db3
+RkO6NTnkccASOESQcQPZN8taqGhlmrUdlQfHdQlqmSWmudJfboK5uvZ8/sSJkcv
GQM6BPHjvNoQIvETnJDQ69pUIT/oqny0JvLry3I0LMmpsUOUppqKu3NRRQV1uggj
X+25ybMs+Du2XF1XO2JXm+xyWMKIc1UubIepgWLkHW+eOXtN4I6LiuDMVPyQ+azN
IW1bws99mJKgerDSbVX2bha2UiiE2sDloAguaZ3D86aN
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:02:41 2024 by rpki-client on console-fra.rpki-client.org