Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/NMpFn7ZS9El92zodlUqpMOsRhfk.roa
File: NMpFn7ZS9El92zodlUqpMOsRhfk.roa (raw, json)
Hash identifier: jD1osQQdeJaAJqVJ4wtgZoIJwdm+sgTkp4oFW4Dlsgg=
Subject key identifier: 34:CA:45:9F:B6:52:F4:49:7D:DB:3A:1D:95:4A:A9:30:EB:11:85:F9
Certificate issuer: /CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Certificate serial: 018CC5012D7E1A0A5DA3F5F134CDEE8715C1
Authority key identifier: 1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/NMpFn7ZS9El92zodlUqpMOsRhfk.roa
Signing time: Mon 01 Jan 2024 12:30:37 +0000
ROA not before: Mon 01 Jan 2024 12:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 185.76.201.0/24 maxlen: 24
185.76.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:2d:7e:1a:0a:5d:a3:f5:f1:34:cd:ee:87:15:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Validity
Not Before: Jan 1 12:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34ca459fb652f4497ddb3a1d954aa930eb1185f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3a:b0:3f:cd:86:04:af:4c:5f:43:aa:9d:9a:
0f:7b:26:8b:06:91:46:a1:6a:62:4d:af:24:da:2d:
ad:b7:73:d9:b8:e7:f7:bc:15:1c:a5:de:26:c2:f2:
d7:cb:d3:e8:19:18:5d:b6:00:e5:af:6a:36:87:57:
3e:a6:d2:7a:e7:15:33:f5:40:fa:75:1f:19:83:55:
b7:19:0d:66:06:ee:b5:cb:47:eb:0f:e5:3a:9a:9f:
0d:ff:89:4b:33:60:ed:b1:2d:13:3f:0b:dc:55:71:
70:ed:ac:cf:66:4c:5b:1a:a4:e8:58:45:53:f1:0c:
71:59:eb:fb:29:e6:f2:f4:ba:01:45:3f:b1:75:06:
21:ea:c4:0d:06:4d:54:71:15:b0:fd:c7:b7:f6:6b:
b4:4e:6c:0a:39:45:d9:65:3c:65:99:49:78:b8:cb:
4e:f3:86:0d:79:3b:2c:48:f4:fe:31:51:7b:45:a4:
d8:58:f0:cf:ee:3e:64:73:cd:6d:7e:d6:cb:43:0e:
5d:b8:4c:8b:be:eb:52:b1:dc:b1:74:3a:2e:8e:17:
f0:6a:64:56:ad:d6:bb:ec:57:48:b4:ed:ea:52:b3:
c1:db:e1:45:07:86:4c:71:94:93:91:cb:35:24:bb:
a8:e6:fc:79:9f:ad:bf:36:7c:a2:e3:ab:ae:0d:71:
d4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CA:45:9F:B6:52:F4:49:7D:DB:3A:1D:95:4A:A9:30:EB:11:85:F9
X509v3 Authority Key Identifier:
keyid:1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/NMpFn7ZS9El92zodlUqpMOsRhfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.201.0/24
185.76.203.0/24
Signature Algorithm: sha256WithRSAEncryption
48:ea:f0:5d:d4:bb:7e:e3:43:ba:ff:fe:d7:0e:14:4e:b6:59:
1d:1d:12:da:55:07:df:e9:e2:6a:a9:37:57:21:02:66:46:c7:
19:92:64:4f:72:26:15:f8:42:5e:31:07:50:6a:ec:51:9b:ca:
6d:a3:9a:55:a0:58:30:e6:99:6c:c6:70:be:c0:a5:fc:22:42:
15:23:bf:32:38:af:e3:37:50:40:dc:d9:87:4e:d8:6f:48:16:
1d:b1:6a:57:c5:b6:08:8c:28:75:a4:f5:75:47:46:ed:8e:e7:
01:39:63:22:8a:d9:2b:64:cc:78:00:1a:32:8d:12:6b:28:ee:
67:f9:41:1a:4c:03:3f:dd:bd:7d:98:ec:90:ec:7f:5f:1d:51:
5e:1d:87:c6:8d:b7:d2:af:5e:15:25:6c:80:86:c9:21:1a:04:
df:85:20:7f:a3:6b:42:81:04:e5:a2:ed:ca:fc:bb:ae:42:03:
db:de:ce:30:40:fc:91:ab:1e:1f:e4:a5:bc:17:b1:ba:8d:12:
a4:26:8b:10:ea:da:04:67:ce:67:e7:a2:ac:7f:1b:c1:47:bb:
45:32:2c:b1:ac:2c:9a:7b:db:59:8f:9f:4d:4b:39:e2:cc:0b:
1b:cc:3f:75:b4:60:6c:76:87:e0:af:89:c3:1f:75:d5:70:18:
be:83:48:64
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzFAS1+Ggpdo/XxNM3uhxXBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMTI1MDllNGYyYTczMGUxNjk5MzdkNDA4MzNiYjg5M2Vl
N2I5OGMwHhcNMjQwMTAxMTIzMDM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGNhNDU5ZmI2NTJmNDQ5N2RkYjNhMWQ5NTRhYTkzMGViMTE4NWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDqwP82GBK9MX0OqnZoPeyaLBpFG
oWpiTa8k2i2tt3PZuOf3vBUcpd4mwvLXy9PoGRhdtgDlr2o2h1c+ptJ65xUz9UD6
dR8Zg1W3GQ1mBu61y0frD+U6mp8N/4lLM2DtsS0TPwvcVXFw7azPZkxbGqToWEVT
8QxxWev7Keby9LoBRT+xdQYh6sQNBk1UcRWw/ce39mu0TmwKOUXZZTxlmUl4uMtO
84YNeTssSPT+MVF7RaTYWPDP7j5kc81tftbLQw5duEyLvutSsdyxdDoujhfwamRW
rda77FdItO3qUrPB2+FFB4ZMcZSTkcs1JLuo5vx5n62/Nnyi46uuDXHUjwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDTKRZ+2UvRJfds6HZVKqTDrEYX5MB8GA1UdIwQY
MBaAFBoSUJ5PKnMOFpk31Agzu4k+57mMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2hKUW5rOHFjdzRXbVRmVUNETzdpVDdudVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iMzE3MzEtNWNkMy00NDVlLThjYjMt
NDE5NmIwZWFjZDI3LzEvTk1wRm43WlM5RWw5MnpvZGxVcXBNT3NSaGZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iMzE3MzEtNWNkMy00NDVlLThjYjMtNDE5NmIwZWFjZDI3
LzEvR2hKUW5rOHFjdzRXbVRmVUNETzdpVDdudVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuUzJAwQA
uUzLMA0GCSqGSIb3DQEBCwUAA4IBAQBI6vBd1Lt+40O6//7XDhROtlkdHRLaVQff
6eJqqTdXIQJmRscZkmRPciYV+EJeMQdQauxRm8pto5pVoFgw5plsxnC+wKX8IkIV
I78yOK/jN1BA3NmHTthvSBYdsWpXxbYIjCh1pPV1R0btjucBOWMiitkrZMx4ABoy
jRJrKO5n+UEaTAM/3b19mOyQ7H9fHVFeHYfGjbfSr14VJWyAhskhGgTfhSB/o2tC
gQTlou3K/LuuQgPb3s4wQPyRqx4f5KW8F7G6jRKkJosQ6toEZ85n56KsfxvBR7tF
MiyxrCyae9tZj59NSznizAsbzD91tGBsdofgr4nDH3XVcBi+g0hk
-----END CERTIFICATE-----
Generated at Sun May 19 17:32:35 2024 by rpki-client on console-ams.rpki-client.org