Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nhvU6lVf7L-QEn7ufI3N-W9YILA.roa
File: nhvU6lVf7L-QEn7ufI3N-W9YILA.roa (raw, json)
Hash identifier: 6LNlZQKdN+zsKRX2iIAKrutOJO0Kw6AATnSguEbvjNc=
Subject key identifier: 9E:1B:D4:EA:55:5F:EC:BF:90:12:7E:EE:7C:8D:CD:F9:6F:58:20:B0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019306B42FD325A8134C39BD3B81A1B09B2D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nhvU6lVf7L-QEn7ufI3N-W9YILA.roa
Signing time: Thu 07 Nov 2024 12:58:12 +0000
ROA not before: Thu 07 Nov 2024 12:58:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137235
IP address blocks: 82.163.23.0/24 maxlen: 24
213.210.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:06:b4:2f:d3:25:a8:13:4c:39:bd:3b:81:a1:b0:9b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 7 12:58:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e1bd4ea555fecbf90127eee7c8dcdf96f5820b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:4c:d9:e0:20:73:6a:8c:82:fa:1f:86:69:
ca:06:79:88:a1:d6:9a:ec:82:eb:5d:f7:5a:63:2b:
c1:45:90:ac:3f:c0:b7:4e:b5:23:b2:4d:33:29:f7:
17:95:d0:c4:14:b8:3e:57:ca:6c:8f:d9:e2:0c:48:
22:f7:12:37:81:b7:e3:ef:04:6c:0a:c4:70:e7:8a:
bd:f7:30:e3:30:ac:c3:3e:3e:9f:29:43:6c:e8:6e:
16:55:49:b6:9a:b8:e0:b5:34:f7:49:0d:54:73:c5:
72:d1:1c:e2:80:85:ab:b3:64:4e:1e:30:5d:f1:c0:
23:a1:a9:29:e4:25:57:a3:d1:55:d9:8f:ac:d3:47:
a4:74:2b:14:be:99:32:ee:ba:22:4c:b1:95:7a:87:
9d:90:07:ed:27:fc:34:8d:3f:1d:5f:fd:26:c5:0f:
33:01:b2:fe:ac:dd:30:15:57:42:32:21:70:e5:70:
54:07:a7:2b:e4:52:4f:0b:f5:f6:b7:a4:12:d0:b6:
4b:27:70:98:7f:3d:ba:1e:b6:ac:7c:b8:ad:bf:8e:
d1:77:cc:26:51:43:72:0f:f9:1b:38:3f:52:af:0f:
6e:09:b4:a6:4a:d0:2c:87:94:f2:d5:35:2e:3c:3d:
b2:25:3d:5b:18:a5:3c:9e:85:a5:09:f9:8b:f5:2b:
65:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1B:D4:EA:55:5F:EC:BF:90:12:7E:EE:7C:8D:CD:F9:6F:58:20:B0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nhvU6lVf7L-QEn7ufI3N-W9YILA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.23.0/24
213.210.58.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:8c:2e:c0:82:03:77:66:bb:5f:22:ae:92:3d:b5:be:b2:5d:
d6:e0:b0:b9:5b:a4:17:06:24:70:d8:73:22:8d:eb:5a:f6:9c:
8a:98:42:46:0c:3a:c4:f5:4a:4a:27:91:cf:49:76:a9:8f:f3:
c4:4d:0e:8d:04:68:e2:70:c1:49:2d:f3:6c:82:4e:2e:ed:25:
aa:7c:11:3e:dc:23:5a:3e:7b:e3:8a:bd:0b:c9:32:ab:53:37:
b7:e6:d6:20:15:92:be:4a:90:07:81:72:d6:c2:4a:cc:e0:2d:
93:97:06:bc:40:6b:c6:80:b5:30:5e:14:f0:ac:af:76:48:a5:
99:fd:46:ac:49:47:c5:2c:6c:61:54:47:32:da:b3:fa:d2:33:
30:53:0d:69:d3:79:9b:06:b7:a0:5a:d8:9a:7a:ee:3b:61:f8:
b8:c6:34:3c:60:4f:85:2e:24:94:92:6b:80:86:92:df:45:27:
77:65:a5:02:f4:5b:45:34:21:2f:f0:64:e4:46:1d:b0:6f:36:
8a:f2:68:f6:ec:66:f4:94:df:24:94:c9:55:76:6b:02:30:fe:
9b:91:37:5e:4c:b1:4c:9a:46:fc:3d:98:d7:ab:23:e2:6d:c8:
22:4f:ee:49:ec:9a:c0:53:1f:9a:90:d4:ed:97:ce:06:67:cd:
d9:8d:69:29
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZMGtC/TJagTTDm9O4GhsJstMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQxMTA3MTI1ODEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTFiZDRlYTU1NWZlY2JmOTAxMjdlZWU3YzhkY2RmOTZmNTgyMGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCJM2eAgc2qMgvofhmnKBnmIodaa
7ILrXfdaYyvBRZCsP8C3TrUjsk0zKfcXldDEFLg+V8psj9niDEgi9xI3gbfj7wRs
CsRw54q99zDjMKzDPj6fKUNs6G4WVUm2mrjgtTT3SQ1Uc8Vy0RzigIWrs2ROHjBd
8cAjoakp5CVXo9FV2Y+s00ekdCsUvpky7roiTLGVeoedkAftJ/w0jT8dX/0mxQ8z
AbL+rN0wFVdCMiFw5XBUB6cr5FJPC/X2t6QS0LZLJ3CYfz26HrasfLitv47Rd8wm
UUNyD/kbOD9Srw9uCbSmStAsh5Ty1TUuPD2yJT1bGKU8noWlCfmL9StldQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ4b1OpVX+y/kBJ+7nyNzflvWCCwMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvbmh2VTZsVmY3TC1RRW43dWZJM04tVzlZSUxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUqMXAwQA
1dI6MA0GCSqGSIb3DQEBCwUAA4IBAQCfjC7AggN3ZrtfIq6SPbW+sl3W4LC5W6QX
BiRw2HMijeta9pyKmEJGDDrE9UpKJ5HPSXapj/PETQ6NBGjicMFJLfNsgk4u7SWq
fBE+3CNaPnvjir0LyTKrUze35tYgFZK+SpAHgXLWwkrM4C2Tlwa8QGvGgLUwXhTw
rK92SKWZ/UasSUfFLGxhVEcy2rP60jMwUw1p03mbBregWtiaeu47Yfi4xjQ8YE+F
LiSUkmuAhpLfRSd3ZaUC9FtFNCEv8GTkRh2wbzaK8mj27Gb0lN8klMlVdmsCMP6b
kTdeTLFMmkb8PZjXqyPibcgiT+5J7JrAUx+akNTtl84GZ83ZjWkp
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:57:16 2024 by rpki-client on console-fra.rpki-client.org