Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/0UfBt7UF0nMtv2uJrLNscerAMP4.roa
File: 0UfBt7UF0nMtv2uJrLNscerAMP4.roa (raw, json)
Hash identifier: /lsYWXnKIK3le56g4hsMwMjRgf2+iF3SThmUVGEoEz0=
Subject key identifier: D1:47:C1:B7:B5:05:D2:73:2D:BF:6B:89:AC:B3:6C:71:EA:C0:30:FE
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC5010D0EAC94652F1193E9939ACD2E74
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/0UfBt7UF0nMtv2uJrLNscerAMP4.roa
Signing time: Mon 01 Jan 2024 12:30:29 +0000
ROA not before: Mon 01 Jan 2024 12:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33801
IP address blocks: 178.239.206.0/23 maxlen: 24
178.239.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:0d:0e:ac:94:65:2f:11:93:e9:93:9a:cd:2e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d147c1b7b505d2732dbf6b89acb36c71eac030fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a6:af:6a:5f:a8:fc:e9:2b:23:e8:b6:5f:c4:
4c:d2:49:7d:3d:b0:37:80:59:40:f6:27:9d:b0:42:
81:02:c8:d7:96:ac:25:fc:0f:36:76:11:ec:63:da:
f3:78:99:a7:c9:dc:cf:79:ec:7e:0e:0c:f3:22:5a:
8b:1d:df:4d:f1:41:c9:c9:b1:ba:0b:7b:40:6b:d7:
ef:ca:97:9e:e2:aa:51:fe:9c:73:d5:74:6d:85:0a:
ab:0f:71:b3:7e:9b:60:bf:87:56:3a:1d:39:d6:ac:
2d:1a:2c:87:01:9d:e5:a2:29:c2:38:01:b8:50:1a:
f7:16:f6:55:66:e2:82:fe:9f:32:0d:c4:5b:94:13:
77:03:16:6e:4c:65:ca:82:68:1e:9c:b6:aa:ad:e7:
0d:ac:06:e3:cb:16:7c:89:75:59:56:c5:59:d7:ed:
13:7d:26:15:f0:88:e2:1f:2d:14:c8:66:2c:02:71:
9d:f9:0a:eb:f0:34:40:79:e9:56:57:e7:d7:40:94:
82:ae:2e:9f:79:aa:82:d3:33:7e:1d:ed:a0:b1:cc:
2c:70:c6:f4:2f:97:32:18:eb:cd:8e:33:1b:0e:bf:
a5:af:4e:07:c1:d4:c1:89:78:78:40:be:2e:a9:76:
55:58:38:7d:ad:1a:1b:5b:51:9e:ac:f3:db:7c:48:
21:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:47:C1:B7:B5:05:D2:73:2D:BF:6B:89:AC:B3:6C:71:EA:C0:30:FE
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/0UfBt7UF0nMtv2uJrLNscerAMP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.196.0/24
178.239.206.0/23
Signature Algorithm: sha256WithRSAEncryption
30:c4:f7:07:1c:46:61:b3:13:0c:a0:41:33:a3:8f:bb:64:46:
44:cc:8d:b7:a9:72:5b:24:a1:94:02:50:6a:7b:c1:4b:87:38:
35:a6:dc:3d:0d:d5:0c:70:c3:3b:7d:87:8e:e1:2c:f0:3e:3e:
73:30:3d:77:fa:96:8b:7a:d7:86:04:55:2c:b6:e8:a7:d0:96:
f4:61:e2:02:a9:27:bf:fe:e1:b7:f8:ba:2b:be:1c:e5:24:f5:
63:57:1a:59:e8:d8:15:5a:7b:48:ba:47:86:6c:bd:d7:4c:c5:
2a:5f:96:13:37:34:1a:14:85:62:04:18:28:5f:73:47:10:3e:
5e:6a:4d:7b:69:65:46:72:0c:6a:82:b0:86:5d:43:39:a6:4f:
f4:dd:89:1c:0b:c6:d8:7c:8b:94:1f:a8:da:9b:51:20:ea:b6:
cd:a6:78:e9:9c:02:d2:a4:d4:86:dc:f6:25:2e:6e:1a:1e:ed:
c6:2f:a4:c3:55:5c:54:d4:77:96:fe:14:f0:f9:7e:1f:77:bb:
24:eb:f4:33:5a:a2:04:04:11:25:bf:8a:67:b3:93:34:e9:50:
4d:b6:6e:78:dd:a8:dd:4b:75:07:5f:60:b6:94:0c:67:17:3e:
44:4f:ff:0c:ad:82:b3:03:9b:81:93:ad:41:2f:bc:4b:78:98:
7b:bb:1b:a8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzFAQ0OrJRlLxGT6ZOazS50MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjQwMTAxMTIzMDI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTQ3YzFiN2I1MDVkMjczMmRiZjZiODlhY2IzNmM3MWVhYzAzMGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqaval+o/OkrI+i2X8RM0kl9PbA3
gFlA9iedsEKBAsjXlqwl/A82dhHsY9rzeJmnydzPeex+DgzzIlqLHd9N8UHJybG6
C3tAa9fvypee4qpR/pxz1XRthQqrD3Gzfptgv4dWOh051qwtGiyHAZ3loinCOAG4
UBr3FvZVZuKC/p8yDcRblBN3AxZuTGXKgmgenLaqrecNrAbjyxZ8iXVZVsVZ1+0T
fSYV8IjiHy0UyGYsAnGd+Qrr8DRAeelWV+fXQJSCri6feaqC0zN+He2gscwscMb0
L5cyGOvNjjMbDr+lr04HwdTBiXh4QL4uqXZVWDh9rRobW1GerPPbfEghPwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNFHwbe1BdJzLb9riayzbHHqwDD+MB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvMFVmQnQ3VUYwbk10djJ1SnJMTnNjZXJBTVA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsu/EAwQB
su/OMA0GCSqGSIb3DQEBCwUAA4IBAQAwxPcHHEZhsxMMoEEzo4+7ZEZEzI23qXJb
JKGUAlBqe8FLhzg1ptw9DdUMcMM7fYeO4SzwPj5zMD13+paLeteGBFUstuin0Jb0
YeICqSe//uG3+LorvhzlJPVjVxpZ6NgVWntIukeGbL3XTMUqX5YTNzQaFIViBBgo
X3NHED5eak17aWVGcgxqgrCGXUM5pk/03YkcC8bYfIuUH6jam1Eg6rbNpnjpnALS
pNSG3PYlLm4aHu3GL6TDVVxU1HeW/hTw+X4fd7sk6/QzWqIEBBElv4pns5M06VBN
tm543ajdS3UHX2C2lAxnFz5ET/8MrYKzA5uBk61BL7xLeJh7uxuo
-----END CERTIFICATE-----
Generated at Sun May 5 20:04:47 2024 by rpki-client on console-ams.rpki-client.org