Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NMZnRl_1R-jvUh5TBxT75QVoO2w.roa
File: NMZnRl_1R-jvUh5TBxT75QVoO2w.roa (raw, json)
Hash identifier: CyZRcq0Z9pGr/AKCJMgkdRzF+PackgcMg18Rf60UypQ=
Subject key identifier: 34:C6:67:46:5F:F5:47:E8:EF:52:1E:53:07:14:FB:E5:05:68:3B:6C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F8588791B86D86B400991CB61AD2197F3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NMZnRl_1R-jvUh5TBxT75QVoO2w.roa
Signing time: Fri 17 May 2024 07:51:04 +0000
ROA not before: Fri 17 May 2024 07:51:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215672
IP address blocks: 82.153.157.0/24 maxlen: 24
89.213.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:85:88:79:1b:86:d8:6b:40:09:91:cb:61:ad:21:97:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 17 07:51:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34c667465ff547e8ef521e530714fbe505683b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:59:d7:c9:23:f3:6d:52:cd:2f:f9:ca:06:7f:
9c:79:68:c0:77:7d:3f:a6:8d:16:c6:af:5e:d0:08:
72:5c:fa:33:96:3b:0b:5c:c9:85:f1:81:28:35:c8:
5a:31:4a:24:23:3a:ec:8a:e1:97:3d:d7:c2:be:fc:
69:08:bf:7d:c4:84:0c:e5:dd:0e:2b:af:28:c3:cd:
53:8d:30:b1:d5:55:0e:10:e7:db:b4:76:1b:4e:2e:
28:a6:23:78:fd:ed:8e:db:16:99:ce:02:98:9b:97:
12:6e:87:8d:65:e1:3b:a1:43:55:c7:67:83:2e:65:
4f:f9:0a:f4:70:a7:88:2f:50:08:87:80:ca:19:e0:
11:13:65:4a:26:97:b2:4d:9f:85:bf:b2:00:49:1c:
56:9d:84:3e:d2:f7:1c:95:b0:6a:86:af:88:32:4f:
32:cc:13:65:5e:76:73:b7:5c:32:cb:cf:17:b0:9d:
10:8b:e8:45:5c:74:47:ef:e0:79:c0:01:bc:4f:cd:
b9:8b:ba:e5:cb:f0:61:db:47:1b:26:ec:69:73:c0:
df:bd:3f:61:dd:0b:fd:21:03:df:f8:c4:c8:62:cd:
2d:c6:03:55:8f:7b:1d:51:a6:e6:e7:48:aa:f5:5b:
1e:af:ed:99:99:1b:7c:44:87:c2:1b:9c:3a:e4:82:
ef:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C6:67:46:5F:F5:47:E8:EF:52:1E:53:07:14:FB:E5:05:68:3B:6C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NMZnRl_1R-jvUh5TBxT75QVoO2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.157.0/24
89.213.219.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:41:98:48:06:fb:d4:f0:04:2f:04:20:26:08:5b:4b:c6:3b:
71:ca:1f:1b:51:57:d1:51:86:7d:d4:3c:72:15:53:4b:45:5b:
c4:f9:36:8c:b1:15:7e:80:7c:ed:07:70:db:18:9c:09:79:23:
ff:91:39:b3:00:cb:f7:3f:00:ea:aa:11:44:28:8f:9a:ba:36:
81:a5:12:ab:f0:45:62:c0:15:62:53:ae:02:9e:8d:55:71:9b:
b7:7d:ef:2e:a7:c1:60:d8:6e:6e:8f:94:23:70:30:5b:e6:b5:
3f:8d:5f:93:09:42:f8:26:39:e8:21:37:ab:e2:7f:1b:e5:f8:
aa:14:36:70:9e:c9:a9:5c:19:d2:83:96:19:d2:e5:fc:6d:61:
3b:47:35:4d:e3:6f:86:e1:58:1c:e1:ac:89:08:5e:1f:2e:95:
0c:96:fa:b2:b3:2a:29:5f:04:15:63:ea:3f:83:e3:a1:fa:19:
b1:8f:e4:06:3f:4b:c7:bd:e1:ce:bf:62:06:e1:a3:96:9c:04:
9b:89:30:b8:7f:0b:f6:97:bd:90:72:3b:e7:e3:9b:4b:4b:41:
91:09:95:24:bc:e6:32:48:48:a5:37:cb:42:a6:4c:bb:44:60:
0b:4c:30:fb:2e:31:20:22:5c:c0:15:b2:ff:f8:79:60:c4:d1:
0c:70:8e:00
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY+FiHkbhthrQAmRy2GtIZfzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNTE3MDc1MTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGM2Njc0NjVmZjU0N2U4ZWY1MjFlNTMwNzE0ZmJlNTA1NjgzYjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1nXySPzbVLNL/nKBn+ceWjAd30/
po0Wxq9e0AhyXPozljsLXMmF8YEoNchaMUokIzrsiuGXPdfCvvxpCL99xIQM5d0O
K68ow81TjTCx1VUOEOfbtHYbTi4opiN4/e2O2xaZzgKYm5cSboeNZeE7oUNVx2eD
LmVP+Qr0cKeIL1AIh4DKGeARE2VKJpeyTZ+Fv7IASRxWnYQ+0vcclbBqhq+IMk8y
zBNlXnZzt1wyy88XsJ0Qi+hFXHRH7+B5wAG8T825i7rly/Bh20cbJuxpc8DfvT9h
3Qv9IQPf+MTIYs0txgNVj3sdUabm50iq9Vser+2ZmRt8RIfCG5w65ILvIQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDTGZ0Zf9Ufo71IeUwcU++UFaDtsMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvTk1ablJsXzFSLWp2VWg1VEJ4VDc1UVZvTzJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUpmdAwQA
WdXbMA0GCSqGSIb3DQEBCwUAA4IBAQCqQZhIBvvU8AQvBCAmCFtLxjtxyh8bUVfR
UYZ91DxyFVNLRVvE+TaMsRV+gHztB3DbGJwJeSP/kTmzAMv3PwDqqhFEKI+aujaB
pRKr8EViwBViU64Cno1VcZu3fe8up8Fg2G5uj5QjcDBb5rU/jV+TCUL4JjnoITer
4n8b5fiqFDZwnsmpXBnSg5YZ0uX8bWE7RzVN42+G4Vgc4ayJCF4fLpUMlvqysyop
XwQVY+o/g+Oh+hmxj+QGP0vHveHOv2IG4aOWnASbiTC4fwv2l72Qcjvn45tLS0GR
CZUkvOYySEilN8tCpky7RGALTDD7LjEgIlzAFbL/+HlgxNEMcI4A
-----END CERTIFICATE-----
Generated at Sat Jun 8 05:28:21 2024 by rpki-client on console-fra.rpki-client.org