Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/stNJtTfsVsh39hOR4Wy_PV4JDsk.roa
File: stNJtTfsVsh39hOR4Wy_PV4JDsk.roa (raw, json)
Hash identifier: Jy1pX1D586ez+jWMGoa3yRq08ETwnniSZtu7rVte9GI=
Subject key identifier: B2:D3:49:B5:37:EC:56:C8:77:F6:13:91:E1:6C:BF:3D:5E:09:0E:C9
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC50103C239023FC29FFBC60134C34052
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/stNJtTfsVsh39hOR4Wy_PV4JDsk.roa
Signing time: Mon 01 Jan 2024 12:30:27 +0000
ROA not before: Mon 01 Jan 2024 12:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 185.244.222.0/23 maxlen: 23
185.244.221.0/24 maxlen: 24
185.228.227.0/24 maxlen: 24
89.31.219.0/24 maxlen: 24
193.84.135.0/24 maxlen: 24
217.74.19.0/24 maxlen: 24
84.245.48.0/21 maxlen: 21
84.245.58.0/23 maxlen: 23
84.245.56.0/24 maxlen: 24
84.245.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:03:c2:39:02:3f:c2:9f:fb:c6:01:34:c3:40:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2d349b537ec56c877f61391e16cbf3d5e090ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e4:0b:4a:ca:17:cd:7e:cc:be:94:61:55:5d:
32:6c:97:5e:27:10:59:fa:ba:e1:d7:29:ee:2e:af:
d5:49:af:15:2e:88:f0:ca:41:d2:56:ec:51:b8:af:
60:90:0e:43:6f:f6:80:e0:66:93:f2:50:4b:fc:6a:
76:83:8a:89:10:4a:62:0c:e1:05:14:94:7d:8b:5e:
aa:83:6a:21:af:c9:03:a1:65:15:8d:16:20:52:7a:
1d:1d:64:80:a6:00:56:86:e9:9b:03:86:db:6e:c3:
1b:76:9a:82:75:9d:e3:0b:89:47:f9:40:f3:db:2e:
cd:42:b5:5c:1f:09:08:18:c6:e9:e1:1e:6e:fb:0e:
ac:14:c4:7f:45:3d:48:df:c5:8e:0e:5a:f1:ed:68:
a9:38:91:04:a1:9b:bf:50:5b:68:a7:a2:a3:a5:25:
1d:51:6a:26:65:68:4f:d1:19:a9:7d:21:f0:e2:0a:
ca:c0:31:03:f0:70:a9:50:f6:32:68:c7:d9:2b:cb:
bb:01:a6:72:2d:c0:5f:4c:91:6d:04:1c:61:bb:19:
c5:10:e7:c0:94:5b:11:e1:48:0c:ea:8f:f4:2d:81:
7a:1c:71:73:b0:d1:8f:b7:a0:ac:06:f5:53:25:f8:
a6:55:a5:1b:dd:ed:6a:38:88:f3:06:01:a0:3a:85:
ca:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D3:49:B5:37:EC:56:C8:77:F6:13:91:E1:6C:BF:3D:5E:09:0E:C9
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/stNJtTfsVsh39hOR4Wy_PV4JDsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.245.48.0-84.245.56.255
84.245.58.0-84.245.63.255
89.31.219.0/24
185.228.227.0/24
185.244.221.0-185.244.223.255
193.84.135.0/24
217.74.19.0/24
Signature Algorithm: sha256WithRSAEncryption
30:28:c5:7f:4a:1e:62:6c:7e:0e:a3:d4:32:68:72:34:e5:3e:
8e:b7:b7:b6:61:0f:08:89:a2:38:f9:cb:db:10:7f:c4:94:bc:
ce:80:06:ca:e3:50:75:de:f7:78:a2:80:1b:6c:ac:37:db:f4:
3d:14:0a:0b:f9:c0:28:5c:0b:da:e1:a2:34:50:03:93:d4:db:
0e:34:d3:19:ff:ff:27:b5:78:83:4a:47:b7:c5:a8:fc:9c:11:
f4:39:ba:0e:d7:f7:fa:67:f9:76:0d:ab:08:c4:06:bb:00:85:
3b:2c:52:a1:49:ee:92:5f:88:76:f9:0b:43:12:bf:5a:21:1a:
10:24:60:aa:b1:21:fe:59:74:ff:5b:7b:e1:e2:06:b3:c7:0b:
e4:7a:48:1f:22:83:3e:38:87:8c:56:57:2d:6a:af:bf:b3:63:
fe:ec:d2:41:37:9a:d1:ed:3a:7f:6a:a4:8e:8e:a3:f5:d3:60:
1a:31:e4:08:22:14:e6:05:8b:0e:f2:33:97:27:4d:c8:32:0f:
de:f0:9d:1d:67:a3:d9:31:37:3f:c0:89:f6:b0:98:63:55:1b:
0b:75:2b:47:b9:e6:0f:24:3d:9a:a7:f1:57:49:19:37:20:33:
f0:57:e7:99:37:57:90:f1:89:ee:21:11:41:12:fa:4a:8e:b5:
da:a8:20:57
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAYzFAQPCOQI/wp/7xgE0w0BSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjQwMTAxMTIzMDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmQzNDliNTM3ZWM1NmM4NzdmNjEzOTFlMTZjYmYzZDVlMDkwZWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeQLSsoXzX7MvpRhVV0ybJdeJxBZ
+rrh1ynuLq/VSa8VLojwykHSVuxRuK9gkA5Db/aA4GaT8lBL/Gp2g4qJEEpiDOEF
FJR9i16qg2ohr8kDoWUVjRYgUnodHWSApgBWhumbA4bbbsMbdpqCdZ3jC4lH+UDz
2y7NQrVcHwkIGMbp4R5u+w6sFMR/RT1I38WODlrx7WipOJEEoZu/UFtop6KjpSUd
UWomZWhP0RmpfSHw4grKwDED8HCpUPYyaMfZK8u7AaZyLcBfTJFtBBxhuxnFEOfA
lFsR4UgM6o/0LYF6HHFzsNGPt6CsBvVTJfimVaUb3e1qOIjzBgGgOoXKkQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFLLTSbU37FbId/YTkeFsvz1eCQ7JMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvc3ROSnRUZnNWc2gzOWhPUjRXeV9QVjRKRHNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCMAwDBARU9TAD
BABU9TgwDAMEAVT1OgMEBlT1AAMEAFkf2wMEALnk4zAMAwQAufTdAwQFufTAAwQA
wVSHAwQA2UoTMA0GCSqGSIb3DQEBCwUAA4IBAQAwKMV/Sh5ibH4Oo9QyaHI05T6O
t7e2YQ8IiaI4+cvbEH/ElLzOgAbK41B13vd4ooAbbKw32/Q9FAoL+cAoXAva4aI0
UAOT1NsONNMZ//8ntXiDSke3xaj8nBH0OboO1/f6Z/l2DasIxAa7AIU7LFKhSe6S
X4h2+QtDEr9aIRoQJGCqsSH+WXT/W3vh4gazxwvkekgfIoM+OIeMVlctaq+/s2P+
7NJBN5rR7Tp/aqSOjqP102AaMeQIIhTmBYsO8jOXJ03IMg/e8J0dZ6PZMTc/wIn2
sJhjVRsLdStHueYPJD2ap/FXSRk3IDPwV+eZN1eQ8YnuIRFBEvpKjrXaqCBX
-----END CERTIFICATE-----
Generated at Sun May 5 19:53:50 2024 by rpki-client on console-fra.rpki-client.org