Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/NFAa9NhiOkNEDTFzlMLx2-FYBTo.roa
File: NFAa9NhiOkNEDTFzlMLx2-FYBTo.roa (raw, json)
Hash identifier: D+hqSc9AGs8/0rb1PIJWbIlCilWv4UaD3CRAWBCX26Q=
Subject key identifier: 34:50:1A:F4:D8:62:3A:43:44:0D:31:73:94:C2:F1:DB:E1:58:05:3A
Certificate issuer: /CN=6dc85b6788e450c054134ae8c365748b23f74267
Certificate serial: 018CC493263A3B30CA0896399C6FB45FC751
Authority key identifier: 6D:C8:5B:67:88:E4:50:C0:54:13:4A:E8:C3:65:74:8B:23:F7:42:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/NFAa9NhiOkNEDTFzlMLx2-FYBTo.roa
Signing time: Mon 01 Jan 2024 10:30:27 +0000
ROA not before: Mon 01 Jan 2024 10:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199889
IP address blocks: 185.207.20.0/24 maxlen: 24
2a13:ca00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:26:3a:3b:30:ca:08:96:39:9c:6f:b4:5f:c7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc85b6788e450c054134ae8c365748b23f74267
Validity
Not Before: Jan 1 10:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34501af4d8623a43440d317394c2f1dbe158053a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:07:5e:79:e9:7e:9c:3a:b3:7b:e9:ec:da:d4:
13:9e:54:7a:91:a5:42:3d:1b:8d:f0:8c:a0:9d:d4:
8f:b9:24:93:aa:6c:a9:07:ab:11:9c:10:2c:55:63:
93:31:e0:3f:48:6f:1b:92:d9:b0:e9:f8:6d:90:c0:
dc:04:a9:2e:dc:63:4c:69:01:82:67:13:cd:0e:71:
ba:66:58:d9:7e:a8:78:c0:c2:47:8c:33:bf:69:2f:
16:da:1b:2f:10:53:47:91:a2:a7:4c:b6:5b:2c:9d:
c3:1b:33:ca:c5:4f:ac:a6:d2:d5:05:00:eb:d3:e5:
4e:99:e8:16:db:f8:b2:41:02:15:e2:b5:47:99:6c:
db:19:35:ce:7b:30:d1:e5:2d:11:15:6e:71:19:78:
55:bf:26:ce:44:6f:3a:c2:d0:08:96:09:e8:7e:ce:
df:d8:3a:a9:52:dc:c7:07:66:85:fb:e4:21:96:d3:
86:c6:6f:de:e0:87:f0:07:d0:1d:d5:f8:43:c1:38:
b3:5d:08:fb:8c:48:7b:52:fd:fe:c3:22:b6:0a:34:
a3:18:25:51:29:67:65:ae:b9:4c:4a:4e:d3:7a:28:
b9:db:30:b2:9f:75:e0:15:e4:c6:6f:02:97:6c:5d:
df:7f:81:65:0d:da:fd:c5:2a:fc:7c:4f:ef:bb:06:
e6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:50:1A:F4:D8:62:3A:43:44:0D:31:73:94:C2:F1:DB:E1:58:05:3A
X509v3 Authority Key Identifier:
keyid:6D:C8:5B:67:88:E4:50:C0:54:13:4A:E8:C3:65:74:8B:23:F7:42:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/NFAa9NhiOkNEDTFzlMLx2-FYBTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.20.0/24
IPv6:
2a13:ca00::/29
Signature Algorithm: sha256WithRSAEncryption
88:90:0e:3c:88:4c:0b:46:05:9c:38:bd:ce:b0:d0:a3:3a:fa:
0a:b8:25:1f:46:2c:bc:26:b0:a9:be:33:8f:a3:97:7e:df:b6:
7d:61:4e:1e:a9:6b:71:d0:08:d4:4a:d3:f5:79:f9:25:2b:fa:
27:d0:9d:42:b3:71:4a:bc:47:c8:8c:15:a5:c6:37:56:53:ea:
35:46:d7:1d:76:eb:d3:56:fd:2f:d3:4d:93:3d:c5:92:96:7e:
e5:f4:df:9e:7e:b1:be:38:ad:73:21:7f:ab:76:b8:b3:7d:ca:
dc:cc:92:a5:f1:ca:03:86:62:cb:cb:24:69:0d:2d:f8:be:8a:
67:73:54:f2:aa:c1:2d:71:b1:8e:d4:3c:02:cf:6e:31:96:13:
e6:0b:bc:a9:8e:c4:1e:63:f9:a5:d3:96:4e:02:c0:11:dd:09:
94:ad:25:c2:18:1e:f8:3a:5e:b5:79:85:f9:38:be:d8:db:35:
b8:b5:e4:57:d5:b6:d4:92:0e:cf:47:a7:d8:c2:e4:f6:62:86:
bc:70:0e:31:d5:8d:aa:ce:33:4b:92:1e:16:f1:b6:45:ec:dc:
52:c6:46:7a:90:37:27:29:0d:c9:c8:2b:c3:0e:f7:64:40:3e:
ec:af:d9:98:6b:b0:2e:40:1d:3d:19:ea:14:07:d4:31:8f:32:
12:69:bf:c4
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzEkyY6OzDKCJY5nG+0X8dRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYzg1YjY3ODhlNDUwYzA1NDEzNGFlOGMzNjU3NDhiMjNm
NzQyNjcwHhcNMjQwMTAxMTAzMDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDUwMWFmNGQ4NjIzYTQzNDQwZDMxNzM5NGMyZjFkYmUxNTgwNTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAdeeel+nDqze+ns2tQTnlR6kaVC
PRuN8IygndSPuSSTqmypB6sRnBAsVWOTMeA/SG8bktmw6fhtkMDcBKku3GNMaQGC
ZxPNDnG6ZljZfqh4wMJHjDO/aS8W2hsvEFNHkaKnTLZbLJ3DGzPKxU+sptLVBQDr
0+VOmegW2/iyQQIV4rVHmWzbGTXOezDR5S0RFW5xGXhVvybORG86wtAIlgnofs7f
2DqpUtzHB2aF++QhltOGxm/e4IfwB9Ad1fhDwTizXQj7jEh7Uv3+wyK2CjSjGCVR
KWdlrrlMSk7Teii52zCyn3XgFeTGbwKXbF3ff4FlDdr9xSr8fE/vuwbmbwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDRQGvTYYjpDRA0xc5TC8dvhWAU6MB8GA1UdIwQY
MBaAFG3IW2eI5FDAVBNK6MNldIsj90JnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmNoYlo0amtVTUJVRTByb3cyVjBpeVAzUW1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lYmYxNjktYmUxNy00Y2U5LTkyNzUt
MDgxNzg2YWIwNzQ4LzEvTkZBYTlOaGlPa05FRFRGemxNTHgyLUZZQlRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9lYmYxNjktYmUxNy00Y2U5LTkyNzUtMDgxNzg2YWIwNzQ4
LzEvYmNoYlo0amtVTUJVRTByb3cyVjBpeVAzUW1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuc8UMA0E
AgACMAcDBQMqE8oAMA0GCSqGSIb3DQEBCwUAA4IBAQCIkA48iEwLRgWcOL3OsNCj
OvoKuCUfRiy8JrCpvjOPo5d+37Z9YU4eqWtx0AjUStP1efklK/on0J1Cs3FKvEfI
jBWlxjdWU+o1RtcdduvTVv0v002TPcWSln7l9N+efrG+OK1zIX+rdrizfcrczJKl
8coDhmLLyyRpDS34vopnc1TyqsEtcbGO1DwCz24xlhPmC7ypjsQeY/ml05ZOAsAR
3QmUrSXCGB74Ol61eYX5OL7Y2zW4teRX1bbUkg7PR6fYwuT2Yoa8cA4x1Y2qzjNL
kh4W8bZF7NxSxkZ6kDcnKQ3JyCvDDvdkQD7sr9mYa7AuQB09GeoUB9QxjzISab/E
-----END CERTIFICATE-----
Generated at Sat Jun 8 02:07:19 2024 by rpki-client on console-fra.rpki-client.org