Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/NRtX5PytUhX6g8zAH5EaJ2lFC8s.roa
File: NRtX5PytUhX6g8zAH5EaJ2lFC8s.roa (raw, json)
Hash identifier: nJcUVx0K5LTBe87SBhS+loIvayQb53d+q5JUmxSKTy8=
Subject key identifier: 35:1B:57:E4:FC:AD:52:15:FA:83:CC:C0:1F:91:1A:27:69:45:0B:CB
Certificate issuer: /CN=d9c9baf46d6c94d27ce128da3b65b5a3b06db38b
Certificate serial: 018CC649AA6BA0B40581F82ED1F65B47FC31
Authority key identifier: D9:C9:BA:F4:6D:6C:94:D2:7C:E1:28:DA:3B:65:B5:A3:B0:6D:B3:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2cm69G1slNJ84SjaO2W1o7Bts4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/NRtX5PytUhX6g8zAH5EaJ2lFC8s.roa
Signing time: Mon 01 Jan 2024 18:29:25 +0000
ROA not before: Mon 01 Jan 2024 18:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206706
IP address blocks: 185.228.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2cm69G1slNJ84SjaO2W1o7Bts4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:aa:6b:a0:b4:05:81:f8:2e:d1:f6:5b:47:fc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9c9baf46d6c94d27ce128da3b65b5a3b06db38b
Validity
Not Before: Jan 1 18:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=351b57e4fcad5215fa83ccc01f911a2769450bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:28:77:dd:b4:4d:e5:27:e7:98:05:e4:e1:bd:
61:29:c2:84:4c:64:e2:d6:e8:07:29:40:48:48:ce:
cd:27:5d:e8:b7:14:b4:6e:b0:f4:76:ea:48:61:b2:
21:21:5f:fc:48:cb:42:5f:98:e6:7c:bd:fe:d9:61:
a4:a3:c6:c4:7e:9d:d7:38:e0:56:d0:a8:c3:60:f6:
d5:31:36:a2:ef:e3:3e:a8:24:49:a3:f9:e8:1a:11:
24:58:89:b9:75:71:0a:0c:3e:be:b7:a9:b6:a5:70:
12:8b:a4:9e:6d:5f:84:94:75:6a:59:17:99:15:3f:
d9:4c:72:4c:a7:29:d5:cd:bd:2f:0b:1b:9d:b2:0c:
9a:f0:0a:4d:5f:73:34:02:05:b0:da:5a:85:b4:4b:
11:d3:31:46:6c:67:85:64:77:5d:50:71:41:4f:46:
9a:bd:71:61:de:eb:ae:eb:14:9c:87:fa:9c:15:eb:
37:57:d1:f7:a6:2c:1b:c7:30:ed:d4:70:ad:3d:b8:
f2:60:58:e1:64:f4:22:69:77:e7:d3:cb:45:d3:67:
2d:1d:a0:11:24:ec:41:17:8c:2d:ed:b5:44:b2:33:
93:4b:41:41:6f:8c:4e:29:26:5a:5c:98:da:db:dd:
d6:a9:f0:c7:7f:36:e5:a8:3b:b2:90:52:62:86:fa:
cb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1B:57:E4:FC:AD:52:15:FA:83:CC:C0:1F:91:1A:27:69:45:0B:CB
X509v3 Authority Key Identifier:
keyid:D9:C9:BA:F4:6D:6C:94:D2:7C:E1:28:DA:3B:65:B5:A3:B0:6D:B3:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2cm69G1slNJ84SjaO2W1o7Bts4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/NRtX5PytUhX6g8zAH5EaJ2lFC8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.249.0/24
Signature Algorithm: sha256WithRSAEncryption
43:d0:38:5d:a3:39:28:bf:32:39:c3:26:6c:e5:72:92:ed:ec:
bd:a8:cb:de:20:95:c0:aa:42:80:86:7c:1b:ce:49:4e:78:ed:
35:1d:1e:e6:59:ab:47:57:28:4c:33:48:c0:f5:f2:a8:95:9d:
eb:42:d7:4a:95:4f:e5:ef:7a:50:19:56:f0:ed:d9:c6:fd:02:
5f:0c:0f:9b:6f:36:7d:26:56:18:bb:ef:bb:a4:b0:ea:37:9c:
6a:7e:c8:ab:7e:9a:cc:e0:dc:96:d0:44:c6:48:c2:1b:a3:53:
df:c5:eb:00:8c:7a:6e:9d:7c:18:79:a7:ff:48:f1:cf:75:b8:
ec:84:6c:8f:b8:b1:a3:67:e9:62:e1:15:34:42:aa:6b:18:6b:
20:c8:ab:8c:17:16:0c:15:d8:73:85:2b:e0:81:21:2c:33:4d:
cf:c4:ea:14:ed:29:fa:64:e5:b7:df:23:9f:9c:0f:44:30:b6:
f4:f5:e1:1b:f1:61:fd:10:e0:22:f4:fa:aa:6e:10:03:f1:6c:
10:ec:2b:fc:26:38:93:b3:c4:eb:b6:b0:0f:08:93:9c:a4:b0:
41:f9:1d:b2:5e:2a:ee:a8:b4:e1:24:a6:d8:4b:11:06:d5:c5:
94:da:4a:ed:65:8b:c5:f5:6b:f6:93:9c:27:7e:90:f3:93:8e:
26:0e:33:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSaproLQFgfgu0fZbR/wxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YzliYWY0NmQ2Yzk0ZDI3Y2UxMjhkYTNiNjViNWEzYjA2
ZGIzOGIwHhcNMjQwMTAxMTgyOTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTFiNTdlNGZjYWQ1MjE1ZmE4M2NjYzAxZjkxMWEyNzY5NDUwYmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyh33bRN5SfnmAXk4b1hKcKETGTi
1ugHKUBISM7NJ13otxS0brD0dupIYbIhIV/8SMtCX5jmfL3+2WGko8bEfp3XOOBW
0KjDYPbVMTai7+M+qCRJo/noGhEkWIm5dXEKDD6+t6m2pXASi6SebV+ElHVqWReZ
FT/ZTHJMpynVzb0vCxudsgya8ApNX3M0AgWw2lqFtEsR0zFGbGeFZHddUHFBT0aa
vXFh3uuu6xSch/qcFes3V9H3piwbxzDt1HCtPbjyYFjhZPQiaXfn08tF02ctHaAR
JOxBF4wt7bVEsjOTS0FBb4xOKSZaXJja293WqfDHfzblqDuykFJihvrLIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDUbV+T8rVIV+oPMwB+RGidpRQvLMB8GA1UdIwQY
MBaAFNnJuvRtbJTSfOEo2jtltaOwbbOLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmNtNjlHMXNsTko4NFNqYU8yVzFvN0J0czRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85NGY5OGMtYzFkMS00ZmUyLTlhZGMt
YTAxMGQ4ZTRmYWYwLzEvTlJ0WDVQeXRVaFg2Zzh6QUg1RWFKMmxGQzhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC85NGY5OGMtYzFkMS00ZmUyLTlhZGMtYTAxMGQ4ZTRmYWYw
LzEvMmNtNjlHMXNsTko4NFNqYU8yVzFvN0J0czRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueT5MA0G
CSqGSIb3DQEBCwUAA4IBAQBD0DhdozkovzI5wyZs5XKS7ey9qMveIJXAqkKAhnwb
zklOeO01HR7mWatHVyhMM0jA9fKolZ3rQtdKlU/l73pQGVbw7dnG/QJfDA+bbzZ9
JlYYu++7pLDqN5xqfsirfprM4NyW0ETGSMIbo1PfxesAjHpunXwYeaf/SPHPdbjs
hGyPuLGjZ+li4RU0QqprGGsgyKuMFxYMFdhzhSvggSEsM03PxOoU7Sn6ZOW33yOf
nA9EMLb09eEb8WH9EOAi9PqqbhAD8WwQ7Cv8JjiTs8TrtrAPCJOcpLBB+R2yXiru
qLThJKbYSxEG1cWU2krtZYvF9Wv2k5wnfpDzk44mDjNP
-----END CERTIFICATE-----
Generated at Sun Jun 2 16:07:26 2024 by rpki-client on console-ams.rpki-client.org