Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/NODf68hXgQnteo3RA8dcwIV9XSQ.roa
File: NODf68hXgQnteo3RA8dcwIV9XSQ.roa (raw, json)
Hash identifier: u6xXuFj6LwYe3gR59u+svVRWbdLwGNmbJ9HlvD0cbmw=
Subject key identifier: 34:E0:DF:EB:C8:57:81:09:ED:7A:8D:D1:03:C7:5C:C0:85:7D:5D:24
Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial: 018CC56EF3C384A45CBCE8AE4A88A3D5CE0C
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/NODf68hXgQnteo3RA8dcwIV9XSQ.roa
Signing time: Mon 01 Jan 2024 14:30:32 +0000
ROA not before: Mon 01 Jan 2024 14:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61079
IP address blocks: 185.19.164.0/23 maxlen: 24
185.19.166.0/23 maxlen: 24
2a04:1240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f3:c3:84:a4:5c:bc:e8:ae:4a:88:a3:d5:ce:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
Validity
Not Before: Jan 1 14:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34e0dfebc8578109ed7a8dd103c75cc0857d5d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a7:f4:aa:66:73:2d:8f:7a:85:7f:a5:97:1b:
d8:30:34:86:41:eb:05:76:8d:bc:41:f1:e3:b8:8c:
e4:f2:9e:1a:37:1a:20:ad:8e:0e:c6:30:53:6d:d5:
1c:75:f4:bf:31:31:9a:9d:94:82:b1:db:91:7d:00:
c1:ec:3a:39:bb:e5:ff:d2:cf:c3:9b:ec:f8:9c:77:
61:82:ba:d8:ad:3f:59:74:55:59:3b:d0:00:02:98:
0b:37:1d:fb:c9:c0:28:de:a7:07:af:4d:1c:98:09:
20:12:a9:12:fd:dc:e3:ca:c5:6b:a1:a5:63:33:0a:
36:8c:da:c9:d1:6c:33:a9:b9:b3:00:a8:88:c3:dc:
32:d8:ef:c1:ec:fe:1b:68:ed:a7:28:e7:85:c0:e9:
53:be:5a:38:8d:2d:1e:31:6c:ad:25:a4:c0:5a:92:
e8:6e:80:02:2b:b7:87:0d:ef:bb:e5:9d:2d:16:96:
66:80:db:16:87:bf:3e:91:0f:84:7d:c0:47:d7:37:
63:05:fc:68:eb:25:88:38:7d:b7:d3:fd:62:b6:0e:
4d:8b:3f:5c:cd:6e:90:e4:ef:00:5e:c1:be:cc:d8:
13:3e:a9:af:1d:75:8a:c9:dc:71:59:48:5f:31:42:
b1:0b:ac:70:8f:34:16:98:54:b6:fb:41:c3:dd:9a:
ba:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E0:DF:EB:C8:57:81:09:ED:7A:8D:D1:03:C7:5C:C0:85:7D:5D:24
X509v3 Authority Key Identifier:
keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/NODf68hXgQnteo3RA8dcwIV9XSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.164.0/22
IPv6:
2a04:1240::/29
Signature Algorithm: sha256WithRSAEncryption
93:76:87:77:93:a9:ba:34:e2:09:45:f0:f5:c0:10:ce:42:c0:
cf:66:18:f8:4a:de:57:24:21:dc:c5:d7:cc:f4:21:b6:c7:a0:
7b:a5:05:ad:4e:0e:c1:8e:92:49:42:41:ec:56:2d:e3:5e:2e:
a6:22:54:e1:aa:1b:32:bb:7c:22:90:cb:65:29:8a:37:19:8a:
5d:9c:89:12:0c:b4:ee:dd:99:35:72:36:de:be:5d:64:81:e5:
3d:3d:b2:ba:f8:1a:88:26:74:bd:c8:a8:12:72:92:7d:90:a0:
e8:ae:69:08:54:d6:a5:e3:bd:d3:d8:00:90:cf:c1:f3:31:80:
c8:06:83:e1:13:dc:ca:c3:a2:07:42:fb:cf:27:7b:56:7f:5c:
c3:38:bb:78:64:dc:61:99:3d:53:ff:bd:8d:a1:72:11:76:2d:
2f:1e:1a:b3:e9:b0:7a:f9:59:f8:a2:e6:6c:83:a5:a5:cc:07:
e8:b2:1a:1a:b7:91:78:e4:da:49:49:4a:53:b7:c8:0d:97:6f:
b4:51:a6:0a:11:5a:e0:b4:ff:1a:3b:25:ab:da:31:b4:cc:81:
41:9c:c1:1f:62:31:01:ab:a8:66:85:25:a8:6c:a4:d1:f4:ac:
f7:71:3d:c5:43:10:d0:3e:dd:f1:03:a7:05:a7:95:ec:d7:0b:
35:1f:6d:51
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzFbvPDhKRcvOiuSoij1c4MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTczNmY2NTcyMjFmYzEzNDMxNjMyM2IwNzQwNTg1YTlj
MWIyMGMwHhcNMjQwMTAxMTQzMDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGUwZGZlYmM4NTc4MTA5ZWQ3YThkZDEwM2M3NWNjMDg1N2Q1ZDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaf0qmZzLY96hX+llxvYMDSGQesF
do28QfHjuIzk8p4aNxogrY4OxjBTbdUcdfS/MTGanZSCsduRfQDB7Do5u+X/0s/D
m+z4nHdhgrrYrT9ZdFVZO9AAApgLNx37ycAo3qcHr00cmAkgEqkS/dzjysVroaVj
Mwo2jNrJ0WwzqbmzAKiIw9wy2O/B7P4baO2nKOeFwOlTvlo4jS0eMWytJaTAWpLo
boACK7eHDe+75Z0tFpZmgNsWh78+kQ+EfcBH1zdjBfxo6yWIOH230/1itg5Niz9c
zW6Q5O8AXsG+zNgTPqmvHXWKydxxWUhfMUKxC6xwjzQWmFS2+0HD3Zq64QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDTg3+vIV4EJ7XqN0QPHXMCFfV0kMB8GA1UdIwQY
MBaAFHQXNvZXIh/BNDFjI7B0BYWpwbIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJjMjlsY2lIOEUwTVdNanNIUUZoYW5Cc2d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iMzE0Y2ItNjJiNS00ZmE2LWI0NDUt
Y2JmYmE0NTlkOGY3LzEvTk9EZjY4aFhnUW50ZW8zUkE4ZGN3SVY5WFNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iMzE0Y2ItNjJiNS00ZmE2LWI0NDUtY2JmYmE0NTlkOGY3
LzEvZEJjMjlsY2lIOEUwTVdNanNIUUZoYW5Cc2d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuROkMA0E
AgACMAcDBQMqBBJAMA0GCSqGSIb3DQEBCwUAA4IBAQCTdod3k6m6NOIJRfD1wBDO
QsDPZhj4St5XJCHcxdfM9CG2x6B7pQWtTg7BjpJJQkHsVi3jXi6mIlThqhsyu3wi
kMtlKYo3GYpdnIkSDLTu3Zk1cjbevl1kgeU9PbK6+BqIJnS9yKgScpJ9kKDormkI
VNal473T2ACQz8HzMYDIBoPhE9zKw6IHQvvPJ3tWf1zDOLt4ZNxhmT1T/72NoXIR
di0vHhqz6bB6+Vn4ouZsg6WlzAfoshoat5F45NpJSUpTt8gNl2+0UaYKEVrgtP8a
OyWr2jG0zIFBnMEfYjEBq6hmhSWobKTR9Kz3cT3FQxDQPt3xA6cFp5Xs1ws1H21R
-----END CERTIFICATE-----
Generated at Sat Jun 1 17:00:59 2024 by rpki-client on console-ams.rpki-client.org