Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/n89kdTnL9xtnu8EbZVFlcBef6xE.roa
File: n89kdTnL9xtnu8EbZVFlcBef6xE.roa (raw, json)
Hash identifier: CZYR1TQrIEmY+ceJh67P4CpnDyx7aIHAEoV5TBIOeh4=
Subject key identifier: 9F:CF:64:75:39:CB:F7:1B:67:BB:C1:1B:65:51:65:70:17:9F:EB:11
Certificate issuer: /CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Certificate serial: 018CC72715A5676FBC7337EA29E81B163DBA
Authority key identifier: 3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/n89kdTnL9xtnu8EbZVFlcBef6xE.roa
Signing time: Mon 01 Jan 2024 22:31:16 +0000
ROA not before: Mon 01 Jan 2024 22:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51255
IP address blocks: 45.9.194.0/24 maxlen: 27
2a0e:1101::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:15:a5:67:6f:bc:73:37:ea:29:e8:1b:16:3d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Validity
Not Before: Jan 1 22:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fcf647539cbf71b67bbc11b65516570179feb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:06:f6:1c:b0:35:e0:1b:c7:fd:48:21:7a:65:
c5:ec:24:ac:25:fc:07:8f:19:e6:da:10:07:d7:1f:
41:07:79:b2:84:d4:cf:4d:78:56:30:de:be:b9:00:
f4:e7:21:34:5c:b4:a7:56:d7:81:42:97:6c:19:14:
d0:b9:8d:2e:21:5a:bd:c0:c9:3f:6a:1e:7e:69:58:
3b:92:86:a4:b4:6e:18:fe:21:60:e8:29:81:1f:cb:
60:f0:24:1b:37:23:91:2f:74:af:9b:ec:ba:00:9d:
42:d1:5e:cf:f8:f6:c1:73:5c:ec:4a:d8:ac:b7:ce:
ed:10:da:48:a9:65:6f:98:be:17:3f:d1:90:f0:ec:
ab:9a:3b:3a:51:71:7d:a9:fc:97:fe:a4:cd:e9:e5:
e2:b0:32:8d:eb:a8:97:e0:37:ea:cc:f1:28:af:34:
5d:4f:ea:8f:48:f0:1b:c6:ab:97:bc:df:2d:18:25:
82:6c:6d:56:99:f2:bb:7e:0f:91:3a:83:af:42:3d:
03:16:dd:53:af:4f:6e:69:7e:0f:e3:b8:a5:b5:16:
7c:e4:8c:f2:c9:37:09:d9:2a:f9:27:f2:47:41:1a:
ec:a4:de:d6:39:cd:01:f8:14:38:6b:27:d6:79:0a:
df:e3:39:69:e9:cb:89:af:2d:c8:77:ba:db:26:03:
79:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CF:64:75:39:CB:F7:1B:67:BB:C1:1B:65:51:65:70:17:9F:EB:11
X509v3 Authority Key Identifier:
keyid:3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/n89kdTnL9xtnu8EbZVFlcBef6xE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.194.0/24
IPv6:
2a0e:1101::/44
Signature Algorithm: sha256WithRSAEncryption
21:08:52:e2:5d:64:6c:f5:26:7d:5f:23:de:e3:f8:51:16:0f:
f9:99:2a:c9:7c:28:6d:b8:b3:b9:b8:63:e2:4b:d7:40:e1:1c:
13:06:5f:14:84:de:9a:94:fe:5b:05:62:73:73:31:e1:87:80:
17:d6:69:49:b5:2d:14:ed:a8:aa:bf:d9:f4:10:36:af:27:07:
63:9a:c9:dc:80:e9:40:9e:68:3c:61:6f:72:98:07:57:e1:4c:
cb:36:e9:5f:e7:3a:0d:16:76:b7:37:69:5b:42:2c:91:70:52:
7c:95:4a:eb:ae:3a:10:46:fb:9e:65:28:e8:38:bb:d9:7c:c9:
04:ce:86:78:4c:f1:54:06:04:24:be:61:e5:79:30:bd:c9:d6:
79:2a:47:4e:3e:d6:d3:dc:e8:20:4c:a9:d2:63:50:9b:4c:02:
c0:70:65:b3:48:ff:86:18:97:7a:e2:0b:46:9e:f6:da:85:2b:
7c:c9:e8:90:fc:01:29:fc:be:73:31:51:19:0e:bd:44:e5:d9:
5e:a6:1a:4c:c8:9f:03:ff:84:e3:85:31:31:82:c5:53:ea:d8:
fe:c8:dc:6d:b1:9d:55:38:0e:f0:0c:ac:23:bb:be:77:06:6b:
bb:0c:6f:be:7e:1b:01:0e:7a:47:4d:de:81:c3:a5:b3:4b:f5:
12:6b:1f:3d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzHJxWlZ2+8czfqKegbFj26MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhY2E1MDg1OGExODU2ZmZhMDJlOTEzNTZmMTQyMzZlN2Mz
OGI4NWEwHhcNMjQwMTAxMjIzMTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmNmNjQ3NTM5Y2JmNzFiNjdiYmMxMWI2NTUxNjU3MDE3OWZlYjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogb2HLA14BvH/UghemXF7CSsJfwH
jxnm2hAH1x9BB3myhNTPTXhWMN6+uQD05yE0XLSnVteBQpdsGRTQuY0uIVq9wMk/
ah5+aVg7koaktG4Y/iFg6CmBH8tg8CQbNyORL3Svm+y6AJ1C0V7P+PbBc1zsStis
t87tENpIqWVvmL4XP9GQ8Oyrmjs6UXF9qfyX/qTN6eXisDKN66iX4DfqzPEorzRd
T+qPSPAbxquXvN8tGCWCbG1WmfK7fg+ROoOvQj0DFt1Tr09uaX4P47iltRZ85Izy
yTcJ2Sr5J/JHQRrspN7WOc0B+BQ4ayfWeQrf4zlp6cuJry3Id7rbJgN5AQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJ/PZHU5y/cbZ7vBG2VRZXAXn+sRMB8GA1UdIwQY
MBaAFDrKUIWKGFb/oC6RNW8UI258OLhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEt
MzMxZDdmYzc3YmQ0LzEvbjg5a2RUbkw5eHRudThFYlpWRmxjQmVmNnhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEtMzMxZDdmYzc3YmQ0
LzEvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALQnCMA8E
AgACMAkDBwQqDhEBAAAwDQYJKoZIhvcNAQELBQADggEBACEIUuJdZGz1Jn1fI97j
+FEWD/mZKsl8KG24s7m4Y+JL10DhHBMGXxSE3pqU/lsFYnNzMeGHgBfWaUm1LRTt
qKq/2fQQNq8nB2OaydyA6UCeaDxhb3KYB1fhTMs26V/nOg0Wdrc3aVtCLJFwUnyV
SuuuOhBG+55lKOg4u9l8yQTOhnhM8VQGBCS+YeV5ML3J1nkqR04+1tPc6CBMqdJj
UJtMAsBwZbNI/4YYl3riC0ae9tqFK3zJ6JD8ASn8vnMxURkOvUTl2V6mGkzInwP/
hOOFMTGCxVPq2P7I3G2xnVU4DvAMrCO7vncGa7sMb75+GwEOekdN3oHDpbNL9RJr
Hz0=
-----END CERTIFICATE-----
Generated at Tue Jun 18 12:16:53 2024 by rpki-client on console-fra.rpki-client.org