Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/NTof9ux1HUoolWrZtTvNJ_uT3jo.roa
File: NTof9ux1HUoolWrZtTvNJ_uT3jo.roa (raw, json)
Hash identifier: yfrqjzNXcDMS1nBoYd/uE6IdFdpnin819J0GwinnNpo=
Subject key identifier: 35:3A:1F:F6:EC:75:1D:4A:28:95:6A:D9:B5:3B:CD:27:FB:93:DE:3A
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC8030A2AB82DBCBADBE3203DAFA3F51F
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/NTof9ux1HUoolWrZtTvNJ_uT3jo.roa
Signing time: Tue 02 Jan 2024 02:31:31 +0000
ROA not before: Tue 02 Jan 2024 02:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211564
IP address blocks: 192.165.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:03:0a:2a:b8:2d:bc:ba:db:e3:20:3d:af:a3:f5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=353a1ff6ec751d4a28956ad9b53bcd27fb93de3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0b:6c:03:e5:97:c9:8c:ce:e0:df:13:6e:11:
b2:06:59:98:65:d0:88:8d:1e:d4:d6:d1:9c:e4:50:
35:4a:e3:b0:12:bf:85:d0:35:cd:90:db:b4:03:8d:
84:d6:2d:ac:84:27:4a:41:0a:e0:d5:b7:54:63:c1:
84:c4:4a:92:25:af:01:c4:2b:4f:99:24:10:b6:5c:
14:e0:d7:cd:0c:0b:cb:f9:bc:9a:7f:36:1b:9e:12:
59:50:3e:8c:81:5a:0f:64:1c:e8:21:a5:8d:ec:29:
2f:ce:58:e2:ee:3d:2b:d5:f9:8b:ce:25:b8:5a:13:
98:b6:2d:ac:7a:ac:55:ee:39:df:bb:85:7d:ca:58:
d2:6d:80:dd:d8:ca:3e:75:fb:fa:f0:4f:83:fa:7f:
cf:a1:3a:cd:5a:89:e0:c4:ab:3d:4d:3f:5c:07:cb:
59:0f:ba:16:9c:ae:10:1a:d6:72:a5:09:c8:69:97:
e2:a1:4d:a4:ab:d7:0e:1e:74:24:80:e2:ab:9f:a6:
fd:9f:35:c0:75:bc:14:7a:a8:34:45:fa:9b:d0:b7:
46:bd:ba:2f:c7:76:eb:e3:e8:d8:1b:bf:b8:e9:46:
1f:f0:e9:1c:03:24:8e:f3:97:4e:2f:6e:e8:c6:70:
3b:02:5f:b3:30:82:76:24:ae:d0:10:f9:2d:65:29:
53:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3A:1F:F6:EC:75:1D:4A:28:95:6A:D9:B5:3B:CD:27:FB:93:DE:3A
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/NTof9ux1HUoolWrZtTvNJ_uT3jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.11.0/24
Signature Algorithm: sha256WithRSAEncryption
31:49:a8:ab:3f:2c:a6:f7:ac:34:e6:4e:85:9c:d4:3c:46:aa:
34:ed:0f:dd:58:bf:96:9e:2a:9d:7e:29:39:50:d1:fc:00:c2:
3c:c9:f4:c8:5e:cf:b1:3f:f3:ea:79:17:ba:94:fe:8a:70:74:
8c:08:78:35:bc:a8:bd:8b:6e:f0:12:d9:b6:36:e2:5f:4c:40:
d7:fe:60:37:6c:5c:eb:09:22:ca:eb:11:7c:e4:b6:ba:3b:20:
b3:4a:14:d1:ed:af:18:62:d7:8e:d5:79:0f:da:4f:d1:6f:5c:
6b:81:37:5e:44:6a:65:4c:c0:3d:fb:88:ca:db:52:4b:33:dc:
5e:18:0a:e3:19:8f:6a:ba:7d:3d:fe:f8:f0:b4:75:8d:66:04:
f1:27:53:cc:37:90:de:b6:ad:76:1a:51:be:eb:28:77:bd:c6:
1c:a8:a0:a9:c0:de:de:20:bd:09:3e:e8:98:d6:4c:3e:97:92:
23:dc:8b:a6:5c:6c:b3:d3:d1:58:3e:03:61:02:52:da:c4:25:
a6:0e:25:e4:fa:ff:9e:58:98:9b:de:06:43:33:00:ca:e4:5d:
7f:4e:c1:42:66:db:bb:d3:6d:cb:c9:83:e5:8c:17:e0:e9:4a:
ea:05:8b:1d:20:cb:f0:e2:7d:c3:5f:a2:1a:8f:fc:c9:10:65:
34:90:30:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAwoquC28utvjID2vo/UfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjQwMTAyMDIzMTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTNhMWZmNmVjNzUxZDRhMjg5NTZhZDliNTNiY2QyN2ZiOTNkZTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwtsA+WXyYzO4N8TbhGyBlmYZdCI
jR7U1tGc5FA1SuOwEr+F0DXNkNu0A42E1i2shCdKQQrg1bdUY8GExEqSJa8BxCtP
mSQQtlwU4NfNDAvL+byafzYbnhJZUD6MgVoPZBzoIaWN7Ckvzlji7j0r1fmLziW4
WhOYti2seqxV7jnfu4V9yljSbYDd2Mo+dfv68E+D+n/PoTrNWongxKs9TT9cB8tZ
D7oWnK4QGtZypQnIaZfioU2kq9cOHnQkgOKrn6b9nzXAdbwUeqg0Rfqb0LdGvbov
x3br4+jYG7+46UYf8OkcAySO85dOL27oxnA7Al+zMIJ2JK7QEPktZSlTpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDU6H/bsdR1KKJVq2bU7zSf7k946MB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvTlRvZjl1eDFIVW9vbFdyWnRUdk5KX3VUM2pvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKULMA0G
CSqGSIb3DQEBCwUAA4IBAQAxSairPyym96w05k6FnNQ8Rqo07Q/dWL+Wniqdfik5
UNH8AMI8yfTIXs+xP/PqeRe6lP6KcHSMCHg1vKi9i27wEtm2NuJfTEDX/mA3bFzr
CSLK6xF85La6OyCzShTR7a8YYteO1XkP2k/Rb1xrgTdeRGplTMA9+4jK21JLM9xe
GArjGY9qun09/vjwtHWNZgTxJ1PMN5Detq12GlG+6yh3vcYcqKCpwN7eIL0JPuiY
1kw+l5Ij3IumXGyz09FYPgNhAlLaxCWmDiXk+v+eWJib3gZDMwDK5F1/TsFCZtu7
023LyYPljBfg6UrqBYsdIMvw4n3DX6Iaj/zJEGU0kDCx
-----END CERTIFICATE-----
Generated at Sat May 18 17:25:40 2024 by rpki-client on console-ams.rpki-client.org