Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/NrBghBDxVUP3b8K-s4QfPajtoEw.roa
File: NrBghBDxVUP3b8K-s4QfPajtoEw.roa (raw, json)
Hash identifier: PXmrD91Lu77kd9R7RmMEPIR9q62nZX3KSQVZITYjO7o=
Subject key identifier: 36:B0:60:84:10:F1:55:43:F7:6F:C2:BE:B3:84:1F:3D:A8:ED:A0:4C
Certificate issuer: /CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Certificate serial: 019427B563964E48D1332A322EC532F6F147
Authority key identifier: 41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/NrBghBDxVUP3b8K-s4QfPajtoEw.roa
Signing time: Thu 02 Jan 2025 15:49:46 +0000
ROA not before: Thu 02 Jan 2025 15:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202409
IP address blocks: 185.1.166.0/23 maxlen: 32
2001:7f8:f2::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:63:96:4e:48:d1:33:2a:32:2e:c5:32:f6:f1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Validity
Not Before: Jan 2 15:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36b0608410f15543f76fc2beb3841f3da8eda04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cb:d4:12:2c:41:13:18:57:b2:2e:8d:22:14:
6e:88:a0:76:b8:41:8c:8e:7e:44:b4:b3:98:1b:28:
19:0c:5d:25:83:e8:4d:f7:fb:8e:27:e8:ec:cb:33:
54:50:e1:1e:eb:c6:04:f4:99:d5:6b:d5:1d:33:41:
6c:fa:c7:ea:6f:05:0b:ad:7b:57:0a:fd:48:13:e2:
f1:cf:d9:c8:ea:10:87:a4:d1:b7:fb:11:e6:e3:a8:
cf:a6:d0:c9:44:1e:c2:99:89:f8:fc:9d:48:21:ce:
9c:a2:fb:1c:10:9d:d4:d9:dc:ae:2f:1b:39:fb:ba:
0c:80:ca:53:4b:b2:31:84:e2:41:32:45:40:6e:ce:
38:ef:a2:58:3b:df:5d:7c:f4:8a:8a:cc:61:58:6e:
05:95:ac:d2:3b:5e:5f:57:e8:7d:2d:7d:25:92:6f:
88:82:18:c3:53:dc:07:b1:a1:7f:29:77:c6:81:d4:
0c:b1:ec:52:bb:14:39:cd:1c:5a:6f:c4:d0:14:b2:
85:12:fd:6a:cf:27:25:4a:15:b6:dc:0e:2f:47:57:
a9:12:cf:a0:0e:2f:3e:3b:fa:9c:16:5b:25:f2:4e:
da:f0:29:ca:eb:8e:45:d3:a5:cb:d9:72:cc:4a:6c:
89:95:31:f6:7e:45:44:53:8b:ac:e9:e6:9e:09:03:
42:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B0:60:84:10:F1:55:43:F7:6F:C2:BE:B3:84:1F:3D:A8:ED:A0:4C
X509v3 Authority Key Identifier:
keyid:41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/NrBghBDxVUP3b8K-s4QfPajtoEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.166.0/23
IPv6:
2001:7f8:f2::/48
Signature Algorithm: sha256WithRSAEncryption
5d:08:42:7a:7c:f2:f4:af:73:61:5d:7f:f1:9d:bc:85:07:10:
22:43:ff:8f:30:a4:8b:70:02:70:56:f1:9f:fa:b3:60:e2:53:
ee:0a:17:ed:8a:90:fa:67:84:30:65:de:6a:b2:54:49:bb:b3:
da:cf:d5:b7:7a:80:cd:59:d2:0a:1b:60:fb:5a:16:02:92:4c:
1b:c8:0b:ac:e3:8a:bd:0d:9d:30:e4:e6:dd:6f:3a:8a:c8:4a:
3c:27:e5:5c:9a:78:c3:01:15:6f:f6:e4:46:77:d9:20:1a:d7:
97:0d:46:7c:ed:36:ad:b5:77:de:a5:b5:98:91:5c:02:5b:12:
fb:db:24:ec:bf:f1:5d:8d:92:3d:8b:f7:ab:ba:b7:99:65:eb:
6c:d5:a3:05:04:81:81:1b:1b:1a:54:c0:95:9c:30:50:db:77:
e3:9e:aa:ec:54:4e:e1:56:6c:92:36:01:9e:57:9b:5d:bb:9e:
67:77:34:42:f2:94:a0:39:e9:77:cf:cb:b3:73:d9:7d:bf:f3:
bb:a5:86:8b:16:38:11:b8:cf:64:d9:e2:f1:61:b7:24:05:cb:
2e:da:04:c5:9e:9b:5e:88:45:9b:40:5a:2b:f5:67:91:39:8a:
73:5f:ac:34:98:22:c2:cb:db:45:39:d6:8e:57:59:51:5c:40:
ce:aa:65:06
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQntWOWTkjRMyoyLsUy9vFHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxOGRmODY4ZjdkOWU5OGQ0ZmQ0MWU2ZGE1OTdhMjgzYzkx
NDFiNDQwHhcNMjUwMTAyMTU0OTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmIwNjA4NDEwZjE1NTQzZjc2ZmMyYmViMzg0MWYzZGE4ZWRhMDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcvUEixBExhXsi6NIhRuiKB2uEGM
jn5EtLOYGygZDF0lg+hN9/uOJ+jsyzNUUOEe68YE9JnVa9UdM0Fs+sfqbwULrXtX
Cv1IE+Lxz9nI6hCHpNG3+xHm46jPptDJRB7CmYn4/J1IIc6covscEJ3U2dyuLxs5
+7oMgMpTS7IxhOJBMkVAbs4476JYO99dfPSKisxhWG4FlazSO15fV+h9LX0lkm+I
ghjDU9wHsaF/KXfGgdQMsexSuxQ5zRxab8TQFLKFEv1qzyclShW23A4vR1epEs+g
Di8+O/qcFlsl8k7a8CnK645F06XL2XLMSmyJlTH2fkVEU4us6eaeCQNCYQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDawYIQQ8VVD92/CvrOEHz2o7aBMMB8GA1UdIwQY
MBaAFEGN+Gj32emNT9QebaWXooPJFBtEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVkzNGFQZlo2WTFQMUI1dHBaZWlnOGtVRzBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jNmY4NmQtZjc5NS00MTlmLWFkMzEt
ZWU5YzM0NTJjYmFmLzEvTnJCZ2hCRHhWVVAzYjhLLXM0UWZQYWp0b0V3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9jNmY4NmQtZjc5NS00MTlmLWFkMzEtZWU5YzM0NTJjYmFm
LzEvUVkzNGFQZlo2WTFQMUI1dHBaZWlnOGtVRzBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBuQGmMA8E
AgACMAkDBwAgAQf4APIwDQYJKoZIhvcNAQELBQADggEBAF0IQnp88vSvc2Fdf/Gd
vIUHECJD/48wpItwAnBW8Z/6s2DiU+4KF+2KkPpnhDBl3mqyVEm7s9rP1bd6gM1Z
0gobYPtaFgKSTBvIC6zjir0NnTDk5t1vOorISjwn5VyaeMMBFW/25EZ32SAa15cN
RnztNq21d96ltZiRXAJbEvvbJOy/8V2Nkj2L96u6t5ll62zVowUEgYEbGxpUwJWc
MFDbd+OequxUTuFWbJI2AZ5Xm127nmd3NELylKA56XfPy7Nz2X2/87ulhosWOBG4
z2TZ4vFhtyQFyy7aBMWem16IRZtAWiv1Z5E5inNfrDSYIsLL20U51o5XWVFcQM6q
ZQY=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:54 2025 by rpki-client