Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/nxkmRl1JvtBqcOny_32HInB4rXs.roa
File: nxkmRl1JvtBqcOny_32HInB4rXs.roa (raw, json)
Hash identifier: e8GzGr9HqJ+AX5U3xmWgpqrLazirQxo0q7H7h43EkTU=
Subject key identifier: 9F:19:26:46:5D:49:BE:D0:6A:70:E9:F2:FF:7D:87:22:70:78:AD:7B
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 018CC7276D70E20C6BA2CBB3EC688599F5C9
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/nxkmRl1JvtBqcOny_32HInB4rXs.roa
Signing time: Mon 01 Jan 2024 22:31:39 +0000
ROA not before: Mon 01 Jan 2024 22:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204009
IP address blocks: 85.219.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:6d:70:e2:0c:6b:a2:cb:b3:ec:68:85:99:f5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 22:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f1926465d49bed06a70e9f2ff7d87227078ad7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9b:ea:53:7a:48:e1:e0:8a:61:8f:3e:ff:19:
9f:b6:ad:4c:34:45:b7:94:29:6b:5b:2f:6b:62:90:
b1:5d:1f:2a:a7:96:4e:43:18:38:5a:7e:ac:7b:98:
4b:0a:f0:20:0a:0d:3f:38:15:30:51:3b:41:e5:4e:
dc:ec:d7:64:a4:44:51:ee:90:6a:ef:d0:d1:00:52:
a2:c7:5a:6a:62:63:ed:e9:88:08:5c:6d:ce:0e:a6:
c0:93:79:4a:8b:4f:31:82:cb:c7:30:6f:93:52:8a:
85:06:7a:47:a4:b4:da:db:54:f1:92:6a:1f:77:a3:
42:52:46:33:df:1b:a9:47:df:55:06:58:d7:ca:5f:
a4:74:cf:2c:ba:91:e8:cf:85:1c:2a:ac:e9:d4:ae:
69:9f:be:13:19:78:f9:26:5e:b1:0e:71:5c:e4:a3:
92:01:64:e7:8e:2b:5c:0a:3b:ad:c3:e7:22:e2:52:
c2:19:fe:a8:ea:1a:ea:8c:e6:f6:8c:b5:c7:1a:d2:
fd:a0:61:7d:26:7e:09:1b:32:39:cc:10:7c:bc:19:
8a:d6:53:91:d9:7c:6d:97:fa:47:6f:83:ce:95:ee:
f3:b2:5b:a6:32:ab:20:0f:85:5b:fa:db:95:52:d0:
9f:46:e6:b7:24:89:0a:ec:db:aa:57:49:c3:56:f5:
7c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:19:26:46:5D:49:BE:D0:6A:70:E9:F2:FF:7D:87:22:70:78:AD:7B
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/nxkmRl1JvtBqcOny_32HInB4rXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.219.229.0/24
Signature Algorithm: sha256WithRSAEncryption
06:e7:18:a3:8a:28:91:3c:b1:04:c6:14:bc:8e:0b:cb:05:dc:
7c:dd:ff:37:d7:6a:79:bd:50:32:7c:e8:05:e7:c1:10:08:2c:
eb:5a:53:be:04:17:ce:80:83:2b:bd:a7:35:dc:25:97:7f:fc:
95:16:66:9d:17:f5:9d:29:3e:d9:e4:af:0f:2e:ae:51:65:06:
9e:11:37:de:af:d0:c7:b2:27:d7:d9:b6:97:9b:7e:4a:f3:01:
33:8a:fc:9a:4e:6c:c4:6c:b2:b9:74:94:10:8a:01:ef:8a:d0:
e6:46:64:2b:9b:a3:86:c9:5c:15:6a:bd:54:f4:12:f0:ab:75:
e2:3e:13:af:f2:0a:a2:bb:9e:9d:1a:fd:84:2e:46:01:1b:e4:
be:3a:8f:47:8b:fc:5c:7c:bc:87:c8:be:a8:cd:da:16:8c:46:
23:11:bc:af:9c:c5:65:96:a4:04:5e:07:1a:aa:12:93:89:ad:
83:79:6b:ab:e8:d9:ee:ff:86:92:84:97:5f:6c:26:ae:6d:73:
5e:c1:93:b6:0d:4e:75:8e:3e:7c:bd:96:ac:d0:2c:b0:ee:4f:
0e:55:e9:22:72:5b:f0:76:3e:d7:38:8b:90:e9:36:04:e6:76:
70:78:67:a4:46:b3:b7:9e:41:48:be:f3:55:a4:11:2d:10:44:
04:d0:82:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJ21w4gxrosuz7GiFmfXJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj
ZWY5MzMwHhcNMjQwMTAxMjIzMTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjE5MjY0NjVkNDliZWQwNmE3MGU5ZjJmZjdkODcyMjcwNzhhZDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5vqU3pI4eCKYY8+/xmftq1MNEW3
lClrWy9rYpCxXR8qp5ZOQxg4Wn6se5hLCvAgCg0/OBUwUTtB5U7c7NdkpERR7pBq
79DRAFKix1pqYmPt6YgIXG3ODqbAk3lKi08xgsvHMG+TUoqFBnpHpLTa21Txkmof
d6NCUkYz3xupR99VBljXyl+kdM8supHoz4UcKqzp1K5pn74TGXj5Jl6xDnFc5KOS
AWTnjitcCjutw+ci4lLCGf6o6hrqjOb2jLXHGtL9oGF9Jn4JGzI5zBB8vBmK1lOR
2Xxtl/pHb4POle7zslumMqsgD4Vb+tuVUtCfRua3JIkK7NuqV0nDVvV8fQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ8ZJkZdSb7QanDp8v99hyJweK17MB8GA1UdIwQY
MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt
OTFlMzE4NGJiMGFiLzEvbnhrbVJsMUp2dEJxY09ueV8zMkhJbkI0clhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi
LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdvlMA0G
CSqGSIb3DQEBCwUAA4IBAQAG5xijiiiRPLEExhS8jgvLBdx83f8312p5vVAyfOgF
58EQCCzrWlO+BBfOgIMrvac13CWXf/yVFmadF/WdKT7Z5K8PLq5RZQaeETfer9DH
sifX2baXm35K8wEzivyaTmzEbLK5dJQQigHvitDmRmQrm6OGyVwVar1U9BLwq3Xi
PhOv8gqiu56dGv2ELkYBG+S+Oo9Hi/xcfLyHyL6ozdoWjEYjEbyvnMVllqQEXgca
qhKTia2DeWur6Nnu/4aShJdfbCaubXNewZO2DU51jj58vZas0Cyw7k8OVekiclvw
dj7XOIuQ6TYE5nZweGekRrO3nkFIvvNVpBEtEEQE0IIn
-----END CERTIFICATE-----
Generated at Sun May 19 08:35:25 2024 by rpki-client on console-ams.rpki-client.org