Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/NTUeDeyO26gm8stawoxbjjNj_nU.roa
File: NTUeDeyO26gm8stawoxbjjNj_nU.roa (raw, json)
Hash identifier: SRNisOeyjUIXIIGz2LnG6bzoEaJ3dKIy5cwmMmbKBS4=
Subject key identifier: 35:35:1E:0D:EC:8E:DB:A8:26:F2:CB:5A:C2:8C:5B:8E:33:63:FE:75
Certificate issuer: /CN=a088b0547f09fe9224050d70a523da5bedbe0738
Certificate serial: 0192D9D7E43F1546BD4F58F7A76FD37537F4
Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/NTUeDeyO26gm8stawoxbjjNj_nU.roa
Signing time: Tue 29 Oct 2024 19:54:17 +0000
ROA not before: Tue 29 Oct 2024 19:54:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215413
IP address blocks: 185.83.155.0/24 maxlen: 24
185.206.151.0/24 maxlen: 24
188.64.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d9:d7:e4:3f:15:46:bd:4f:58:f7:a7:6f:d3:75:37:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738
Validity
Not Before: Oct 29 19:54:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35351e0dec8edba826f2cb5ac28c5b8e3363fe75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9b:01:4a:3c:04:4e:c9:7d:38:f8:e6:41:28:
4a:88:bc:f2:3c:66:34:39:5c:07:53:ee:4e:e9:e2:
0d:23:62:43:17:6f:d0:c5:26:83:39:a4:73:6c:f5:
72:42:3c:21:2d:9f:c6:8f:0c:88:16:0e:65:f9:4c:
5f:86:59:e1:ef:7d:e6:48:09:06:6d:a6:a8:7c:eb:
8f:b3:ca:ad:bb:d5:04:e4:16:33:94:62:60:9a:2e:
a4:ca:81:14:d5:da:cf:ae:d1:dd:bd:7b:f9:8e:55:
22:ee:09:5a:97:2e:c2:17:64:8d:2f:13:e8:29:13:
dd:b4:ec:a7:d2:73:b6:98:f7:41:ae:41:e5:1c:1f:
38:f1:d3:6f:f1:32:60:15:f7:50:2b:9c:79:5c:4d:
0e:c7:35:2b:12:f0:5b:41:4d:eb:e1:99:c9:1a:4f:
1c:1a:4e:e2:a8:26:17:21:c2:f3:e0:26:33:83:73:
14:dc:f7:b0:6b:e4:ee:49:a1:cb:69:0b:04:bf:7a:
d3:e4:67:8b:e4:43:a7:7c:58:6f:9d:ef:6d:f3:68:
03:67:f8:ca:d8:0c:8c:ab:8d:e5:94:a3:75:eb:61:
2a:bd:06:6a:0a:fe:86:f5:71:19:58:d6:1f:47:3a:
ec:d2:90:af:d2:b6:b0:d9:65:48:5c:d4:de:a6:d2:
4f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:35:1E:0D:EC:8E:DB:A8:26:F2:CB:5A:C2:8C:5B:8E:33:63:FE:75
X509v3 Authority Key Identifier:
keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/NTUeDeyO26gm8stawoxbjjNj_nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.155.0/24
185.206.151.0/24
188.64.33.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:95:8a:95:89:01:ab:e8:0b:47:a1:e3:9b:0d:36:6b:ae:07:
7b:70:9c:3d:ad:db:59:75:b0:69:5a:de:e9:9a:22:be:55:05:
4a:51:0c:fa:83:1a:d9:b5:6f:22:be:33:19:63:a8:3d:7c:27:
20:21:e5:c9:c3:99:2d:c9:61:58:35:8d:a9:7e:3b:fb:a8:f1:
b8:25:53:60:dc:28:41:4f:c9:c9:14:0f:a1:69:2c:ed:79:19:
4c:5f:74:ea:59:6d:45:82:ce:06:43:44:65:1b:1d:f4:66:8c:
75:85:2f:c3:d7:5c:d6:b7:9c:3b:57:0f:76:69:75:25:23:ad:
ee:cf:04:ec:8c:e9:cf:8e:d7:ed:4c:19:8b:4d:0a:2c:73:d4:
85:a4:98:98:9b:e5:51:ff:f7:ab:cf:bf:68:26:b2:64:16:fb:
a4:36:c1:72:0c:f6:24:54:18:08:14:81:1a:04:a0:f6:f4:ee:
05:90:57:ec:e1:30:29:83:3b:c3:b6:24:1d:ed:12:79:21:70:
a5:66:9e:02:58:4d:5e:53:af:2c:a6:0c:1f:85:d6:93:a8:e8:
19:c6:a4:c0:b4:64:ea:27:2a:ad:14:de:de:a3:d5:87:8b:8c:
0c:79:79:72:e5:03:1f:fe:2f:a2:bc:87:9f:7e:d9:cf:bd:48:
01:bb:98:99
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZLZ1+Q/FUa9T1j3p2/TdTf0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwODhiMDU0N2YwOWZlOTIyNDA1MGQ3MGE1MjNkYTViZWRi
ZTA3MzgwHhcNMjQxMDI5MTk1NDE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTM1MWUwZGVjOGVkYmE4MjZmMmNiNWFjMjhjNWI4ZTMzNjNmZTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5sBSjwETsl9OPjmQShKiLzyPGY0
OVwHU+5O6eINI2JDF2/QxSaDOaRzbPVyQjwhLZ/GjwyIFg5l+Uxfhlnh733mSAkG
baaofOuPs8qtu9UE5BYzlGJgmi6kyoEU1drPrtHdvXv5jlUi7glaly7CF2SNLxPo
KRPdtOyn0nO2mPdBrkHlHB848dNv8TJgFfdQK5x5XE0OxzUrEvBbQU3r4ZnJGk8c
Gk7iqCYXIcLz4CYzg3MU3Pewa+TuSaHLaQsEv3rT5GeL5EOnfFhvne9t82gDZ/jK
2AyMq43llKN162EqvQZqCv6G9XEZWNYfRzrs0pCv0raw2WVIXNTeptJPjwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDU1Hg3sjtuoJvLLWsKMW44zY/51MB8GA1UdIwQY
MBaAFKCIsFR/Cf6SJAUNcKUj2lvtvgc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMt
ZGY4MmZhODk3MzI2LzEvTlRVZURleU8yNmdtOHN0YXdveGJqak5qX25VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMtZGY4MmZhODk3MzI2
LzEvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuVObAwQA
uc6XAwQAvEAhMA0GCSqGSIb3DQEBCwUAA4IBAQCulYqViQGr6AtHoeObDTZrrgd7
cJw9rdtZdbBpWt7pmiK+VQVKUQz6gxrZtW8ivjMZY6g9fCcgIeXJw5ktyWFYNY2p
fjv7qPG4JVNg3ChBT8nJFA+haSzteRlMX3TqWW1Fgs4GQ0RlGx30Zox1hS/D11zW
t5w7Vw92aXUlI63uzwTsjOnPjtftTBmLTQosc9SFpJiYm+VR//erz79oJrJkFvuk
NsFyDPYkVBgIFIEaBKD29O4FkFfs4TApgzvDtiQd7RJ5IXClZp4CWE1eU68spgwf
hdaTqOgZxqTAtGTqJyqtFN7eo9WHi4wMeXly5QMf/i+ivIefftnPvUgBu5iZ
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:54 2024 by rpki-client on console-fra.rpki-client.org