Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/nnhQziMzbiF2kCnLpDzK_dfI-vQ.roa
File: nnhQziMzbiF2kCnLpDzK_dfI-vQ.roa (raw, json)
Hash identifier: wu0U5Dp37ZTSNKpD//6Xn4RW5g5OcM/HJPC4AraP+tY=
Subject key identifier: 9E:78:50:CE:23:33:6E:21:76:90:29:CB:A4:3C:CA:FD:D7:C8:FA:F4
Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial: 018CC7933B0A826AC0ABC55DF5A29577874C
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/nnhQziMzbiF2kCnLpDzK_dfI-vQ.roa
Signing time: Tue 02 Jan 2024 00:29:23 +0000
ROA not before: Tue 02 Jan 2024 00:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51905
IP address blocks: 84.19.112.0/24 maxlen: 24
84.19.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:3b:0a:82:6a:c0:ab:c5:5d:f5:a2:95:77:87:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Validity
Not Before: Jan 2 00:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e7850ce23336e21769029cba43ccafdd7c8faf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0c:cb:37:bc:23:a3:90:8f:14:ae:be:db:0a:
3a:7a:c1:67:8b:8c:ea:e6:a6:a8:ad:7e:e6:62:23:
dc:00:ce:71:58:89:4c:af:f2:b5:71:09:95:52:a1:
cb:84:a4:46:c6:47:07:ef:6d:0b:3a:ed:3f:b1:3c:
de:52:0f:17:08:e4:68:9d:9f:4a:27:d6:2d:e6:62:
72:a1:0d:cf:ce:36:55:6c:da:dd:01:00:89:c9:6b:
97:95:52:0e:65:35:36:e6:37:2b:75:26:d4:87:16:
9d:74:e1:9d:00:0f:e8:55:cf:65:2d:5e:38:fc:ff:
ad:9d:ab:2e:00:45:5b:65:12:c6:f7:5a:e7:f8:bb:
70:5a:25:15:37:48:2d:ed:a5:96:f4:f9:ba:e9:8e:
ae:e4:f6:bc:2c:ea:c5:94:08:8c:ae:b8:94:0d:9b:
d4:77:e3:cd:f9:60:60:c0:76:02:48:28:46:cf:7d:
38:25:7b:af:d1:d0:9c:9e:a4:6d:e9:81:45:13:0e:
d1:d7:b8:57:e3:df:ab:d7:12:d4:7b:6a:5a:90:74:
f9:ae:29:87:de:1d:c2:34:31:98:d7:6f:cc:f2:f1:
f2:a4:38:02:5a:fd:9b:ac:04:35:2d:de:24:82:bc:
7b:52:15:6f:18:cf:d6:14:3a:8b:b3:54:01:1c:cd:
5c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:78:50:CE:23:33:6E:21:76:90:29:CB:A4:3C:CA:FD:D7:C8:FA:F4
X509v3 Authority Key Identifier:
keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/nnhQziMzbiF2kCnLpDzK_dfI-vQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.19.112.0/21
Signature Algorithm: sha256WithRSAEncryption
bd:b4:a5:9e:98:2b:8b:45:e3:fd:09:b5:11:ed:5a:ba:6a:60:
21:3b:de:51:d4:a6:3c:c3:f2:a9:a6:b9:33:f1:15:e5:4e:15:
5e:55:5e:63:84:a9:bd:4e:72:c0:c9:05:3d:b8:d4:7e:9f:18:
ac:1c:29:27:c6:6a:4b:01:f0:f8:f5:5a:c0:98:74:be:42:0b:
4e:b7:2a:0a:97:8e:f1:75:bd:a7:98:cc:dc:30:bb:aa:f0:b2:
79:5b:52:95:7a:88:2f:10:6b:2b:1d:60:81:f5:26:23:a7:46:
ef:21:0f:4b:89:84:d2:f6:a0:3b:74:43:7a:90:0d:15:ef:17:
3c:8c:69:7b:f2:b2:ba:06:6b:34:09:2b:0a:c6:60:fd:24:fc:
b6:05:94:2d:63:9f:2f:3c:a5:37:6f:4a:3e:62:eb:f5:e2:17:
76:00:52:b2:2a:45:55:03:02:b1:74:4f:7b:66:b2:4e:f0:2d:
53:e0:09:0f:cb:62:cd:42:04:9b:f3:67:66:41:3f:50:1a:da:
29:9c:45:98:fc:a0:24:c9:40:31:e0:73:8a:1c:7d:d6:40:f1:
ab:40:a4:eb:99:ea:94:37:b0:46:11:63:62:22:17:22:15:a5:
31:bc:ea:4a:09:78:6d:40:65:76:79:85:bf:d9:84:53:f8:79:
68:6e:c7:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHkzsKgmrAq8Vd9aKVd4dMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MzA3ZDI5ZjU1NDNmMjFlYTMwMDliOTUyM2ZlNzFiOGYx
MzY5Y2EwHhcNMjQwMTAyMDAyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTc4NTBjZTIzMzM2ZTIxNzY5MDI5Y2JhNDNjY2FmZGQ3YzhmYWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgzLN7wjo5CPFK6+2wo6esFni4zq
5qaorX7mYiPcAM5xWIlMr/K1cQmVUqHLhKRGxkcH720LOu0/sTzeUg8XCORonZ9K
J9Yt5mJyoQ3PzjZVbNrdAQCJyWuXlVIOZTU25jcrdSbUhxaddOGdAA/oVc9lLV44
/P+tnasuAEVbZRLG91rn+LtwWiUVN0gt7aWW9Pm66Y6u5Pa8LOrFlAiMrriUDZvU
d+PN+WBgwHYCSChGz304JXuv0dCcnqRt6YFFEw7R17hX49+r1xLUe2pakHT5rimH
3h3CNDGY12/M8vHypDgCWv2brAQ1Ld4kgrx7UhVvGM/WFDqLs1QBHM1cWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ54UM4jM24hdpApy6Q8yv3XyPr0MB8GA1UdIwQY
MBaAFBYwfSn1VD8h6jAJuVI/5xuPE2nKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2Yt
NGNmZTQwZjA3YTZiLzEvbm5oUXppTXpiaUYya0NuTHBEektfZGZJLXZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2YtNGNmZTQwZjA3YTZi
LzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDVBNwMA0G
CSqGSIb3DQEBCwUAA4IBAQC9tKWemCuLReP9CbUR7Vq6amAhO95R1KY8w/Kpprkz
8RXlThVeVV5jhKm9TnLAyQU9uNR+nxisHCknxmpLAfD49VrAmHS+QgtOtyoKl47x
db2nmMzcMLuq8LJ5W1KVeogvEGsrHWCB9SYjp0bvIQ9LiYTS9qA7dEN6kA0V7xc8
jGl78rK6Bms0CSsKxmD9JPy2BZQtY58vPKU3b0o+Yuv14hd2AFKyKkVVAwKxdE97
ZrJO8C1T4AkPy2LNQgSb82dmQT9QGtopnEWY/KAkyUAx4HOKHH3WQPGrQKTrmeqU
N7BGEWNiIhciFaUxvOpKCXhtQGV2eYW/2YRT+HlobsfP
-----END CERTIFICATE-----
Generated at Sat May 18 14:43:08 2024 by rpki-client on console-ams.rpki-client.org