Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4Pl5tVdlvXGKv4wzgIdOmyRtazo.roa
File: 4Pl5tVdlvXGKv4wzgIdOmyRtazo.roa (raw, json)
Hash identifier: /RiM7dj0bWF/njcgXKCKitfsg0FXTmJxG2pxo5qqYZQ=
Subject key identifier: E0:F9:79:B5:57:65:BD:71:8A:BF:8C:33:80:87:4E:9B:24:6D:6B:3A
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC50111500E9E5F4B4C1ABE060B608CDC
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4Pl5tVdlvXGKv4wzgIdOmyRtazo.roa
Signing time: Mon 01 Jan 2024 12:30:30 +0000
ROA not before: Mon 01 Jan 2024 12:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44592
IP address blocks: 92.114.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:11:50:0e:9e:5f:4b:4c:1a:be:06:0b:60:8c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0f979b55765bd718abf8c3380874e9b246d6b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:41:7a:9c:d1:cf:f9:15:1d:25:f6:02:3e:
20:e9:bc:b0:c9:04:08:6d:b4:7b:10:c2:57:a0:8e:
3f:dd:4b:3e:12:c7:ef:47:63:e6:f5:34:5d:ae:34:
17:2c:d1:3b:ae:77:62:35:60:4a:61:2c:e6:d6:0f:
68:ce:f8:ae:0d:91:aa:3d:8d:e8:7f:14:3d:b5:e3:
f9:0a:c4:94:f0:02:79:f6:94:75:fa:57:af:05:27:
3c:7a:fc:f9:d1:0a:fe:ae:7e:63:27:5f:9b:ea:50:
12:a8:67:71:52:b5:f4:ba:47:92:51:97:53:37:43:
46:65:82:de:8f:e5:d3:a1:17:0a:12:f8:58:41:f4:
ad:fc:35:09:8d:5c:31:a9:e0:41:8f:88:19:e0:88:
8c:a7:3a:49:46:b5:3e:29:95:60:73:fb:20:b9:c5:
64:6c:72:7c:6f:6d:26:ea:f6:82:1a:2c:7b:81:57:
f4:ed:c6:f6:ac:86:3e:3b:7c:07:f5:7c:21:4f:66:
b9:cb:ac:8c:80:09:00:72:24:cf:3e:ff:05:fc:0c:
d4:4e:69:6b:28:e5:b4:7e:89:bb:c2:70:3a:15:3f:
a4:39:18:3d:cf:a5:d7:90:93:21:f8:ef:4a:4f:4d:
29:f7:e9:52:b9:30:6e:fb:a2:58:3f:4a:00:b5:cf:
20:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F9:79:B5:57:65:BD:71:8A:BF:8C:33:80:87:4E:9B:24:6D:6B:3A
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4Pl5tVdlvXGKv4wzgIdOmyRtazo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.85.0/24
Signature Algorithm: sha256WithRSAEncryption
07:30:9b:b0:16:45:a3:09:18:d4:b4:9c:1d:9f:fe:ec:64:ba:
ab:03:05:0e:99:c1:b3:45:23:4d:37:9c:1f:7e:26:8e:9d:b9:
64:95:7b:c9:0f:6e:6c:78:fa:a0:f2:2f:23:40:21:65:ef:20:
16:60:9c:e7:51:94:dc:ca:5c:de:98:a2:b6:da:17:b8:b3:b3:
b9:60:17:2b:1b:46:b7:4c:db:78:2b:03:88:60:0a:df:3e:da:
67:d3:93:7a:13:43:1e:05:e5:ff:e3:d6:74:30:8a:84:e5:5f:
1e:11:04:9b:28:27:fc:9e:23:f4:c1:0a:7a:f7:ab:6a:61:f9:
f5:c4:08:d2:f0:b0:33:a9:d5:3c:d1:c1:37:6a:8f:e1:43:c8:
48:71:7f:b4:81:65:30:5a:51:3d:cc:90:84:d6:9c:bc:25:fb:
62:31:95:f0:4e:66:26:45:4c:ca:d0:a8:24:70:ad:e5:04:03:
46:34:80:49:a2:62:b0:ca:f6:ae:47:27:fa:69:79:f7:25:63:
95:3e:93:05:6b:f9:1e:86:65:db:c5:4a:08:e6:41:95:96:59:
e9:d4:71:45:8e:3b:10:32:f7:12:f9:23:65:8e:be:71:62:37:
f5:48:3d:ae:f2:d1:88:85:2a:e7:bf:35:7d:88:10:af:be:07:
11:59:0f:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFARFQDp5fS0wavgYLYIzcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjQwMTAxMTIzMDMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGY5NzliNTU3NjViZDcxOGFiZjhjMzM4MDg3NGU5YjI0NmQ2YjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrZBepzRz/kVHSX2Aj4g6bywyQQI
bbR7EMJXoI4/3Us+EsfvR2Pm9TRdrjQXLNE7rndiNWBKYSzm1g9ozviuDZGqPY3o
fxQ9teP5CsSU8AJ59pR1+levBSc8evz50Qr+rn5jJ1+b6lASqGdxUrX0ukeSUZdT
N0NGZYLej+XToRcKEvhYQfSt/DUJjVwxqeBBj4gZ4IiMpzpJRrU+KZVgc/sgucVk
bHJ8b20m6vaCGix7gVf07cb2rIY+O3wH9XwhT2a5y6yMgAkAciTPPv8F/AzUTmlr
KOW0fom7wnA6FT+kORg9z6XXkJMh+O9KT00p9+lSuTBu+6JYP0oAtc8g5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOD5ebVXZb1xir+MM4CHTpskbWs6MB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvNFBsNXRWZGx2WEdLdjR3emdJZE9teVJ0YXpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHJVMA0G
CSqGSIb3DQEBCwUAA4IBAQAHMJuwFkWjCRjUtJwdn/7sZLqrAwUOmcGzRSNNN5wf
fiaOnblklXvJD25sePqg8i8jQCFl7yAWYJznUZTcylzemKK22he4s7O5YBcrG0a3
TNt4KwOIYArfPtpn05N6E0MeBeX/49Z0MIqE5V8eEQSbKCf8niP0wQp696tqYfn1
xAjS8LAzqdU80cE3ao/hQ8hIcX+0gWUwWlE9zJCE1py8JftiMZXwTmYmRUzK0Kgk
cK3lBANGNIBJomKwyvauRyf6aXn3JWOVPpMFa/kehmXbxUoI5kGVllnp1HFFjjsQ
MvcS+SNljr5xYjf1SD2u8tGIhSrnvzV9iBCvvgcRWQ89
-----END CERTIFICATE-----
Generated at Sun May 5 20:04:47 2024 by rpki-client on console-ams.rpki-client.org