Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/f-6npCCRN9ABvwY8ZSAERP6ObvU.roa
File: f-6npCCRN9ABvwY8ZSAERP6ObvU.roa (raw, json)
Hash identifier: WpwujzSxJITps1/JWQpVFXiW9vbOunNh1dzb+oX99s4=
Subject key identifier: 7F:EE:A7:A4:20:91:37:D0:01:BF:06:3C:65:20:04:44:FE:8E:6E:F5
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018DF06EC84D91747A8101F0F827952ACFA4
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/f-6npCCRN9ABvwY8ZSAERP6ObvU.roa
Signing time: Wed 28 Feb 2024 15:56:48 +0000
ROA not before: Wed 28 Feb 2024 15:56:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211389
IP address blocks: 220.158.196.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f0:6e:c8:4d:91:74:7a:81:01:f0:f8:27:95:2a:cf:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 28 15:56:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7feea7a4209137d001bf063c65200444fe8e6ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:fb:0e:af:9f:9e:a5:56:53:17:b5:9f:3c:
26:9d:df:0a:48:20:23:d8:ea:fb:e8:67:31:9a:1b:
a6:0c:41:fa:76:6c:75:4b:ac:10:ec:05:6a:24:8d:
1d:3d:eb:3f:a6:65:d0:e2:15:07:70:d6:e2:0e:e8:
6d:73:00:38:88:14:1e:03:d3:33:26:0d:9c:ef:c4:
45:5f:f6:62:79:8e:98:a1:f6:47:ac:42:da:4b:68:
e1:73:88:21:03:29:f3:9b:fa:f4:b1:64:5b:58:5d:
79:12:02:8c:83:87:cc:9f:98:1c:01:e0:89:00:40:
23:d8:a6:e0:7c:84:18:99:bc:07:44:0b:b5:25:c6:
ef:4d:d4:5f:de:5f:52:95:e9:09:42:35:ea:93:90:
23:26:a7:ea:3d:05:a2:b7:0a:ed:3d:94:a4:a6:91:
1c:e5:94:e0:8b:15:91:c6:a0:0a:7e:9a:7b:29:60:
7b:68:e3:0a:88:a3:2b:5a:e1:2d:44:f0:83:ec:0e:
4b:0b:4d:d2:74:51:82:9e:c5:51:f6:31:6d:97:dd:
ae:d9:65:1c:52:dc:1d:3d:4c:09:b0:4f:de:7a:47:
96:e7:20:aa:c1:67:dc:dd:49:f3:ef:a4:d7:bf:b9:
3a:94:9b:32:a0:0c:17:71:0e:9b:1b:fb:53:e0:d4:
b4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EE:A7:A4:20:91:37:D0:01:BF:06:3C:65:20:04:44:FE:8E:6E:F5
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/f-6npCCRN9ABvwY8ZSAERP6ObvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
220.158.196.0/23
Signature Algorithm: sha256WithRSAEncryption
29:c4:81:8a:c4:cb:2b:89:d8:ce:92:99:1d:2d:db:be:6a:17:
d7:3e:cb:5d:67:52:fe:10:f3:85:18:12:d6:36:55:b4:b1:41:
a3:86:24:11:8d:5f:da:7c:ed:2e:b8:c3:4d:dc:78:f3:b6:85:
51:c4:8b:4a:7e:bd:d8:02:ba:71:6f:a3:3b:34:d3:ac:96:e5:
4e:68:c8:9b:db:24:22:c5:27:fc:a9:e0:f3:f1:53:20:50:48:
87:66:5d:e3:16:46:5d:d4:85:a5:3f:e8:5f:1a:4d:78:02:86:
65:40:b8:b4:5a:59:d6:f3:1f:17:d7:a5:0d:a8:67:71:6d:3d:
5b:f0:1d:40:77:1c:16:95:05:e8:43:bb:e0:88:22:c1:a4:67:
19:15:82:e7:cf:df:e2:4d:72:b6:7e:a1:3a:4c:1f:c6:47:da:
77:4e:f5:ed:35:74:b4:65:7b:11:44:1c:68:8d:62:32:6a:67:
c4:7d:5e:3a:51:3e:5e:ff:38:cf:5e:f5:51:c8:f4:ea:d6:82:
35:2d:88:1c:63:3f:5f:b1:d7:c4:2d:e5:b1:c8:71:1d:4c:a9:
73:8b:36:ad:38:09:09:97:05:97:b3:26:d7:8d:cd:bb:d6:04:
01:9f:79:67:d8:5e:d3:bd:b0:19:5d:8e:73:e4:69:b7:51:a7:
7d:ff:20:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3wbshNkXR6gQHw+CeVKs+kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjQwMjI4MTU1NjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmVlYTdhNDIwOTEzN2QwMDFiZjA2M2M2NTIwMDQ0NGZlOGU2ZWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr37Dq+fnqVWUxe1nzwmnd8KSCAj
2Or76GcxmhumDEH6dmx1S6wQ7AVqJI0dPes/pmXQ4hUHcNbiDuhtcwA4iBQeA9Mz
Jg2c78RFX/ZieY6YofZHrELaS2jhc4ghAynzm/r0sWRbWF15EgKMg4fMn5gcAeCJ
AEAj2KbgfIQYmbwHRAu1JcbvTdRf3l9SlekJQjXqk5AjJqfqPQWitwrtPZSkppEc
5ZTgixWRxqAKfpp7KWB7aOMKiKMrWuEtRPCD7A5LC03SdFGCnsVR9jFtl92u2WUc
UtwdPUwJsE/eekeW5yCqwWfc3Unz76TXv7k6lJsyoAwXcQ6bG/tT4NS0TwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH/up6QgkTfQAb8GPGUgBET+jm71MB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvZi02bnBDQ1JOOUFCdndZOFpTQUVSUDZPYnZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB3J7EMA0G
CSqGSIb3DQEBCwUAA4IBAQApxIGKxMsridjOkpkdLdu+ahfXPstdZ1L+EPOFGBLW
NlW0sUGjhiQRjV/afO0uuMNN3HjztoVRxItKfr3YArpxb6M7NNOsluVOaMib2yQi
xSf8qeDz8VMgUEiHZl3jFkZd1IWlP+hfGk14AoZlQLi0WlnW8x8X16UNqGdxbT1b
8B1AdxwWlQXoQ7vgiCLBpGcZFYLnz9/iTXK2fqE6TB/GR9p3TvXtNXS0ZXsRRBxo
jWIyamfEfV46UT5e/zjPXvVRyPTq1oI1LYgcYz9fsdfELeWxyHEdTKlzizatOAkJ
lwWXsybXjc271gQBn3ln2F7TvbAZXY5z5Gm3Uad9/yCp
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:41:10 2024 by rpki-client on console-ams.rpki-client.org