Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/NmibKro5ghOd5DUSPlIniubDyFs.roa
File: NmibKro5ghOd5DUSPlIniubDyFs.roa (raw, json)
Hash identifier: +Si2E4nB4t8Z0k68N8Pk5Vql7F5CFSroj9MMaTeNR9o=
Subject key identifier: 36:68:9B:2A:BA:39:82:13:9D:E4:35:12:3E:52:27:8A:E6:C3:C8:5B
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 018CC8DF75584D960A134AD7168D9C93D34B
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/NmibKro5ghOd5DUSPlIniubDyFs.roa
Signing time: Tue 02 Jan 2024 06:32:16 +0000
ROA not before: Tue 02 Jan 2024 06:32:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23674
IP address blocks: 185.2.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:75:58:4d:96:0a:13:4a:d7:16:8d:9c:93:d3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Jan 2 06:32:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36689b2aba3982139de435123e52278ae6c3c85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:75:67:0b:67:17:6a:8c:c5:9e:91:f9:f6:34:
ae:50:eb:6a:4f:5d:b8:58:af:73:63:b1:83:7f:ac:
7e:30:0d:b4:c9:9b:56:22:59:6d:20:a6:fc:9d:93:
aa:80:97:d1:8b:12:98:82:36:78:f3:b8:cf:1a:b6:
0b:ff:bc:d7:ec:eb:0c:f1:ac:f3:ea:a9:ce:9f:9b:
18:97:fc:3d:92:fb:eb:c5:e4:d6:7f:63:9f:75:7d:
71:1a:5d:4d:09:8b:1d:d8:12:d8:29:df:ea:eb:82:
9d:e1:ab:fb:45:56:f3:58:59:13:e9:e6:ca:fa:9b:
e2:92:58:6f:08:3b:59:7b:a1:52:01:4b:4d:31:2f:
7b:48:2f:f7:8b:08:d8:0b:0b:96:76:16:ce:a1:93:
47:a4:22:cb:07:b2:63:63:aa:aa:94:09:a7:db:1b:
1b:17:fd:ba:3e:85:2f:4b:ba:e5:6e:7e:23:8d:85:
85:4f:bc:83:ba:ec:63:76:10:bb:6d:fd:bc:ea:f7:
d2:83:90:e3:ee:79:f6:fc:a4:fa:29:b3:eb:b2:01:
3b:f5:62:23:5a:76:fc:1b:df:f7:20:43:05:fe:02:
51:ad:a6:88:a7:5d:dc:c0:eb:6f:fe:21:6c:de:1a:
b2:71:68:84:d3:61:34:dc:4b:df:0a:4d:7e:cf:f2:
cc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:68:9B:2A:BA:39:82:13:9D:E4:35:12:3E:52:27:8A:E6:C3:C8:5B
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/NmibKro5ghOd5DUSPlIniubDyFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.48.0/24
Signature Algorithm: sha256WithRSAEncryption
17:98:be:45:60:b4:34:5b:5b:b2:f6:06:ca:d8:d7:32:de:b4:
18:67:7c:be:05:68:eb:80:c9:e5:db:49:35:4b:93:61:e9:43:
3a:3d:9e:a3:d7:1b:82:79:ac:ed:13:64:09:64:58:21:0f:e5:
70:a9:54:99:65:59:41:8b:0a:ef:06:0d:d3:51:59:93:11:0a:
f6:34:e4:25:19:73:49:76:4e:0a:f4:cb:31:64:76:4e:e9:be:
da:06:20:1b:fe:52:c5:08:8a:81:2e:71:c1:49:7b:40:0e:8a:
84:33:94:9d:02:8f:dc:12:57:73:9f:63:3a:1e:f5:be:ec:31:
58:4c:11:f4:16:96:3f:d6:35:d8:c7:2f:a8:5e:b0:de:fd:ed:
3b:30:83:81:1b:f5:6b:8e:63:10:12:f0:44:da:bf:d9:58:e5:
72:0c:bf:b0:91:8e:eb:fb:7e:84:71:c5:c0:e3:40:91:ec:18:
f6:8e:96:da:e0:58:4f:75:69:5e:3c:56:9d:3e:55:0d:eb:04:
29:88:32:17:e1:c6:2a:a8:7b:32:e5:b0:3e:39:ea:ee:43:2c:
6b:59:51:d1:89:c2:c4:17:55:45:1e:60:ea:4c:aa:d7:2e:51:
e6:14:10:18:19:da:e6:21:00:ba:c9:c8:b4:12:a0:7d:d5:e3:
51:c4:d8:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI33VYTZYKE0rXFo2ck9NLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OTRhZmRiNWU2YTE4ODU3ODA5MjBhNTRmZmE4MjQwOGVh
ODViYTEwHhcNMjQwMTAyMDYzMjE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjY4OWIyYWJhMzk4MjEzOWRlNDM1MTIzZTUyMjc4YWU2YzNjODViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnVnC2cXaozFnpH59jSuUOtqT124
WK9zY7GDf6x+MA20yZtWIlltIKb8nZOqgJfRixKYgjZ487jPGrYL/7zX7OsM8azz
6qnOn5sYl/w9kvvrxeTWf2OfdX1xGl1NCYsd2BLYKd/q64Kd4av7RVbzWFkT6ebK
+pviklhvCDtZe6FSAUtNMS97SC/3iwjYCwuWdhbOoZNHpCLLB7JjY6qqlAmn2xsb
F/26PoUvS7rlbn4jjYWFT7yDuuxjdhC7bf286vfSg5Dj7nn2/KT6KbPrsgE79WIj
Wnb8G9/3IEMF/gJRraaIp13cwOtv/iFs3hqycWiE02E03EvfCk1+z/LMlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDZomyq6OYITneQ1Ej5SJ4rmw8hbMB8GA1UdIwQY
MBaAFFeUr9teahiFeAkgpU/6gkCOqFuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQt
NDdkODJhNDFhOGYzLzEvTm1pYktybzVnaE9kNURVU1BsSW5pdWJEeUZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQtNDdkODJhNDFhOGYz
LzEvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQIwMA0G
CSqGSIb3DQEBCwUAA4IBAQAXmL5FYLQ0W1uy9gbK2Ncy3rQYZ3y+BWjrgMnl20k1
S5Nh6UM6PZ6j1xuCeaztE2QJZFghD+VwqVSZZVlBiwrvBg3TUVmTEQr2NOQlGXNJ
dk4K9MsxZHZO6b7aBiAb/lLFCIqBLnHBSXtADoqEM5SdAo/cEldzn2M6HvW+7DFY
TBH0FpY/1jXYxy+oXrDe/e07MIOBG/VrjmMQEvBE2r/ZWOVyDL+wkY7r+36EccXA
40CR7Bj2jpba4FhPdWlePFadPlUN6wQpiDIX4cYqqHsy5bA+OeruQyxrWVHRicLE
F1VFHmDqTKrXLlHmFBAYGdrmIQC6yci0EqB91eNRxNiR
-----END CERTIFICATE-----
Generated at Sat May 11 19:31:51 2024 by rpki-client on console-fra.rpki-client.org