Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/sX-1_2wMCrTfQs6f1T_8ORS2sVI.roa
File: sX-1_2wMCrTfQs6f1T_8ORS2sVI.roa (raw, json)
Hash identifier: +p1iJpQHcRA4XfYm05LKL/YmLXPIAi52sduqP7aeNLU=
Subject key identifier: B1:7F:B5:FF:6C:0C:0A:B4:DF:42:CE:9F:D5:3F:FC:39:14:B6:B1:52
Certificate issuer: /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Certificate serial: 018CC8702A746E1AA9349238F91A834699C2
Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/sX-1_2wMCrTfQs6f1T_8ORS2sVI.roa
Signing time: Tue 02 Jan 2024 04:30:43 +0000
ROA not before: Tue 02 Jan 2024 04:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61400
IP address blocks: 217.199.223.0/24 maxlen: 24
217.199.221.0/24 maxlen: 24
217.199.220.0/24 maxlen: 24
193.243.182.0/24 maxlen: 24
78.24.92.0/22 maxlen: 24
185.16.212.0/22 maxlen: 24
37.0.120.0/21 maxlen: 24
89.248.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:2a:74:6e:1a:a9:34:92:38:f9:1a:83:46:99:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Validity
Not Before: Jan 2 04:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b17fb5ff6c0c0ab4df42ce9fd53ffc3914b6b152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:72:18:ec:98:17:ec:73:3b:94:f9:c1:38:
78:0b:83:35:c8:bb:ed:67:33:50:9f:3f:43:9f:3c:
1a:de:46:a0:7d:59:17:df:5d:60:62:80:11:04:3b:
01:14:5c:f0:d8:10:e3:92:2c:f1:8a:3d:9a:6f:1e:
6f:25:17:8d:30:e8:18:97:64:61:fa:cc:a6:dc:3f:
b8:b4:3a:8f:a8:e9:1d:94:7b:df:b3:63:fa:65:d2:
8b:38:05:e8:29:26:39:b8:a0:a2:67:4f:de:f9:32:
55:bd:9c:ee:57:72:7b:96:fe:9a:4a:7a:0f:9f:1b:
2d:d6:6f:1b:ca:52:22:49:69:8f:88:32:f5:8e:59:
37:ab:2d:d8:ee:68:54:2d:14:8c:92:98:53:90:ac:
00:2e:bb:b1:e0:28:74:81:c0:9c:4e:71:47:38:0e:
11:fd:a7:47:f4:57:6b:d4:69:34:1c:18:e3:41:2f:
3e:a5:13:a2:d6:b0:63:f1:6a:e0:8b:eb:2d:6b:a7:
42:28:c9:b7:0b:04:a5:d5:85:2b:14:e9:f6:0b:75:
1e:46:c7:20:d1:27:9b:94:13:bb:88:dc:49:35:10:
a0:59:d1:10:04:40:11:15:d7:9c:12:b8:aa:d2:bb:
bd:f7:32:27:a8:68:f0:db:ef:08:3d:15:4a:a4:66:
20:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7F:B5:FF:6C:0C:0A:B4:DF:42:CE:9F:D5:3F:FC:39:14:B6:B1:52
X509v3 Authority Key Identifier:
keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/sX-1_2wMCrTfQs6f1T_8ORS2sVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.120.0/21
78.24.92.0/22
89.248.235.0/24
185.16.212.0/22
193.243.182.0/24
217.199.220.0/23
217.199.223.0/24
Signature Algorithm: sha256WithRSAEncryption
11:4c:67:9f:3d:6d:33:71:0c:16:a2:8e:cf:d3:13:3e:be:01:
b1:07:8a:14:6a:96:e4:4e:c6:36:03:f5:be:08:70:ac:9f:04:
64:e5:f2:93:d8:7d:74:40:b0:96:da:aa:33:93:5f:2b:49:4c:
bf:e5:5f:6e:21:fb:d7:62:7d:19:ee:70:eb:92:a3:e7:a1:03:
99:40:f5:03:7f:a5:54:68:c8:0e:23:24:cc:b2:8f:ac:73:9a:
0f:26:2a:ad:6a:2c:52:58:bc:92:ad:57:f0:62:eb:68:2c:d5:
ec:11:14:6d:72:87:cf:81:73:2a:b5:e3:2c:b1:0e:c7:6f:bd:
7a:28:ab:87:a8:d4:78:10:c5:34:a8:93:93:43:fb:ba:4d:49:
4e:ab:f9:5d:4e:a4:3d:37:a3:e4:fa:09:13:07:80:b5:af:cb:
fa:d3:b1:47:fe:56:d3:3d:99:b6:0e:ca:50:ea:d4:7c:88:b7:
48:4f:76:57:83:ce:72:49:cf:9b:d8:13:6a:a4:2c:87:5c:af:
f8:98:40:13:18:33:b8:8f:92:3b:bb:67:fc:bf:28:6a:42:f1:
c9:58:e5:d4:e4:58:83:be:2f:fe:30:9f:f4:d9:db:63:1a:e2:
f2:a8:ea:da:8b:2d:96:3f:b9:32:d4:14:19:35:80:ea:34:0a:
de:e1:bf:e4
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYzIcCp0bhqpNJI4+RqDRpnCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNzNkOTQ1M2ZiZWRmYjgwYzQ1NDNiYjUyOWZjMzMwYzFm
OGMxY2UwHhcNMjQwMTAyMDQzMDQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTdmYjVmZjZjMGMwYWI0ZGY0MmNlOWZkNTNmZmMzOTE0YjZiMTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3ZyGOyYF+xzO5T5wTh4C4M1yLvt
ZzNQnz9Dnzwa3kagfVkX311gYoARBDsBFFzw2BDjkizxij2abx5vJReNMOgYl2Rh
+sym3D+4tDqPqOkdlHvfs2P6ZdKLOAXoKSY5uKCiZ0/e+TJVvZzuV3J7lv6aSnoP
nxst1m8bylIiSWmPiDL1jlk3qy3Y7mhULRSMkphTkKwALrux4Ch0gcCcTnFHOA4R
/adH9Fdr1Gk0HBjjQS8+pROi1rBj8Wrgi+sta6dCKMm3CwSl1YUrFOn2C3UeRscg
0SeblBO7iNxJNRCgWdEQBEARFdecEriq0ru99zInqGjw2+8IPRVKpGYgxwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFLF/tf9sDAq030LOn9U//DkUtrFSMB8GA1UdIwQY
MBaAFJxz2UU/vt+4DEVDu1KfwzDB+MHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkhQWlJULS0zN2dNUlVPN1VwX0RNTUg0d2M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9iMzUzNzktMjEyMi00MTkxLTg4MjEt
YzQ3ZTE4ZGYwMzcxLzEvc1gtMV8yd01DclRmUXM2ZjFUXzhPUlMyc1ZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9iMzUzNzktMjEyMi00MTkxLTg4MjEtYzQ3ZTE4ZGYwMzcx
LzEvbkhQWlJULS0zN2dNUlVPN1VwX0RNTUg0d2M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQDJQB4AwQC
ThhcAwQAWfjrAwQCuRDUAwQAwfO2AwQB2cfcAwQA2cffMA0GCSqGSIb3DQEBCwUA
A4IBAQARTGefPW0zcQwWoo7P0xM+vgGxB4oUapbkTsY2A/W+CHCsnwRk5fKT2H10
QLCW2qozk18rSUy/5V9uIfvXYn0Z7nDrkqPnoQOZQPUDf6VUaMgOIyTMso+sc5oP
JiqtaixSWLySrVfwYutoLNXsERRtcofPgXMqteMssQ7Hb716KKuHqNR4EMU0qJOT
Q/u6TUlOq/ldTqQ9N6Pk+gkTB4C1r8v607FH/lbTPZm2DspQ6tR8iLdIT3ZXg85y
Sc+b2BNqpCyHXK/4mEATGDO4j5I7u2f8vyhqQvHJWOXU5FiDvi/+MJ/02dtjGuLy
qOraiy2WP7ky1BQZNYDqNAre4b/k
-----END CERTIFICATE-----
Generated at Fri Sep 27 22:10:59 2024 by rpki-client on console-ams.rpki-client.org