Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/2CNDKBjAc6yyL5PIhDfIk2JgogY.roa
File: 2CNDKBjAc6yyL5PIhDfIk2JgogY.roa (raw, json)
Hash identifier: x+ySdCKRvKo+Vs6kmlcqAeavSr4ZhsNBOBJsTKX507E=
Subject key identifier: D8:23:43:28:18:C0:73:AC:B2:2F:93:C8:84:37:C8:93:62:60:A2:06
Certificate issuer: /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial: 018CC6B91C0AF032677FBE79C9C6E6090F67
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/2CNDKBjAc6yyL5PIhDfIk2JgogY.roa
Signing time: Mon 01 Jan 2024 20:31:09 +0000
ROA not before: Mon 01 Jan 2024 20:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41881
IP address blocks: 89.221.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jul 2024 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:1c:0a:f0:32:67:7f:be:79:c9:c6:e6:09:0f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Validity
Not Before: Jan 1 20:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d823432818c073acb22f93c88437c8936260a206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:97:5c:88:20:5e:98:f0:b9:48:9e:c5:36:1a:
24:b1:ac:b1:d0:25:42:e0:c2:6f:33:b2:70:49:62:
3a:78:d4:2a:68:18:0b:02:1f:be:df:31:5a:c8:c6:
47:d9:b8:ba:f7:c9:c2:d2:d7:d4:6b:95:1b:79:ed:
8b:04:ff:d7:97:4b:1f:39:4e:f8:0f:a2:75:7a:60:
7b:ab:24:d9:a1:82:4f:5a:d7:f3:0a:fa:62:a5:b0:
02:c4:2f:4e:0b:21:4d:bf:66:8d:88:48:34:1e:d3:
c6:e1:2c:cc:df:19:70:a9:2e:99:f1:30:5e:fd:e9:
c9:7d:e5:9b:e1:35:2e:cc:95:89:31:bd:fa:28:cc:
ff:3e:6f:a5:f1:00:cb:d2:5f:a4:bf:3c:51:95:f2:
91:3d:9d:cf:b1:eb:6d:7c:31:36:33:74:78:ff:1f:
dd:d2:51:e3:db:a4:be:67:46:b5:ae:38:c6:96:27:
9b:dd:e0:e7:4c:91:1b:d8:00:f8:81:96:90:7d:db:
76:3e:6a:7c:4c:e5:8f:2b:a3:49:38:07:dd:ee:69:
d3:81:e7:71:94:6f:4a:4a:03:23:e7:58:d3:72:f9:
15:06:73:2e:86:44:2b:43:42:4d:13:3e:b7:ba:3d:
cf:0d:52:91:e4:00:ed:db:49:a0:39:e6:bf:58:7b:
cb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:23:43:28:18:C0:73:AC:B2:2F:93:C8:84:37:C8:93:62:60:A2:06
X509v3 Authority Key Identifier:
keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/2CNDKBjAc6yyL5PIhDfIk2JgogY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.221.95.0/24
Signature Algorithm: sha256WithRSAEncryption
16:20:d2:c5:0b:15:a3:8e:09:90:31:07:d9:86:c6:58:d8:52:
98:8b:8d:e7:81:f0:ca:88:63:5f:a3:77:fc:52:a1:77:9b:3f:
cc:3a:b2:35:ed:51:9b:2a:2d:6f:22:51:a6:45:c0:63:0e:96:
3f:27:c0:34:de:1f:0f:0e:75:7f:1d:fd:40:a3:b3:32:c6:5e:
78:47:8e:b6:af:77:b8:f9:f2:ee:ab:dc:36:b8:1a:11:33:12:
2c:01:c8:62:d4:cc:44:c1:b7:7a:df:8b:aa:eb:fe:ec:31:63:
7a:14:71:f1:5b:b1:c6:78:7b:73:c2:85:ab:f1:0f:6a:c5:c3:
c2:6c:81:18:bc:82:10:59:32:f5:15:f2:2a:5b:b5:c0:d8:76:
22:fe:da:9f:25:30:a2:6b:16:33:fd:72:2a:1a:d7:b0:b1:73:
dd:36:2f:d2:0f:bb:cd:22:a5:b4:14:28:bb:82:bc:fa:cc:7a:
05:ef:ca:ea:41:e8:fb:1c:fd:a6:73:56:3d:1b:51:83:e8:53:
04:7e:f9:03:5c:51:92:0e:57:a0:d2:47:e9:f3:6f:5b:d4:b9:
9c:b3:89:8e:78:ad:c1:38:81:16:c3:61:ae:cf:fd:07:94:27:
bd:34:67:8a:5e:fe:68:81:20:a1:00:1c:e1:5d:70:ae:49:85:
ba:c8:6e:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuRwK8DJnf755ycbmCQ9nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkOTY4MWYxNDRkYjE0MzBhYzMxNWM4MzA2ZTFjMTQ3MzBj
NWZlYzIwHhcNMjQwMTAxMjAzMTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODIzNDMyODE4YzA3M2FjYjIyZjkzYzg4NDM3Yzg5MzYyNjBhMjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZdciCBemPC5SJ7FNhoksayx0CVC
4MJvM7JwSWI6eNQqaBgLAh++3zFayMZH2bi698nC0tfUa5Ubee2LBP/Xl0sfOU74
D6J1emB7qyTZoYJPWtfzCvpipbACxC9OCyFNv2aNiEg0HtPG4SzM3xlwqS6Z8TBe
/enJfeWb4TUuzJWJMb36KMz/Pm+l8QDL0l+kvzxRlfKRPZ3PsettfDE2M3R4/x/d
0lHj26S+Z0a1rjjGlieb3eDnTJEb2AD4gZaQfdt2Pmp8TOWPK6NJOAfd7mnTgedx
lG9KSgMj51jTcvkVBnMuhkQrQ0JNEz63uj3PDVKR5ADt20mgOea/WHvL3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNgjQygYwHOssi+TyIQ3yJNiYKIGMB8GA1UdIwQY
MBaAFK2WgfFE2xQwrDFcgwbhwUcwxf7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2Yt
YTNhMTNlM2E3ZDgwLzEvMkNOREtCakFjNnl5TDVQSWhEZklrMkpnb2dZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2YtYTNhMTNlM2E3ZDgw
LzEvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWd1fMA0G
CSqGSIb3DQEBCwUAA4IBAQAWINLFCxWjjgmQMQfZhsZY2FKYi43ngfDKiGNfo3f8
UqF3mz/MOrI17VGbKi1vIlGmRcBjDpY/J8A03h8PDnV/Hf1Ao7Myxl54R462r3e4
+fLuq9w2uBoRMxIsAchi1MxEwbd634uq6/7sMWN6FHHxW7HGeHtzwoWr8Q9qxcPC
bIEYvIIQWTL1FfIqW7XA2HYi/tqfJTCiaxYz/XIqGtewsXPdNi/SD7vNIqW0FCi7
grz6zHoF78rqQej7HP2mc1Y9G1GD6FMEfvkDXFGSDleg0kfp829b1Lmcs4mOeK3B
OIEWw2Guz/0HlCe9NGeKXv5ogSChABzhXXCuSYW6yG4F
-----END CERTIFICATE-----
Generated at Sat Jul 6 05:15:07 2024 by rpki-client on console-fra.rpki-client.org