Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/9Nl_-NSeuD28pbJBqRPcO8iWU0Y.roa
File: 9Nl_-NSeuD28pbJBqRPcO8iWU0Y.roa (raw, json)
Hash identifier: h92kgLlZGv0MeTZclBKSsC4xoQssa731KTKYLFLKkv0=
Subject key identifier: F4:D9:7F:F8:D4:9E:B8:3D:BC:A5:B2:41:A9:13:DC:3B:C8:96:53:46
Certificate issuer: /CN=c3b3962aee4e8ae4c6ccd8979e539802ea0e4ce7
Certificate serial: 018CC6B926A5A5538EA57BEBA1D5DFD17CDA
Authority key identifier: C3:B3:96:2A:EE:4E:8A:E4:C6:CC:D8:97:9E:53:98:02:EA:0E:4C:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/9Nl_-NSeuD28pbJBqRPcO8iWU0Y.roa
Signing time: Mon 01 Jan 2024 20:31:11 +0000
ROA not before: Mon 01 Jan 2024 20:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212058
IP address blocks: 185.197.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:26:a5:a5:53:8e:a5:7b:eb:a1:d5:df:d1:7c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b3962aee4e8ae4c6ccd8979e539802ea0e4ce7
Validity
Not Before: Jan 1 20:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4d97ff8d49eb83dbca5b241a913dc3bc8965346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4d:67:bf:a6:47:59:18:ef:dc:fb:f7:e2:1b:
7e:b0:38:4b:bd:9e:d3:37:eb:0b:84:c6:97:0c:d4:
91:6f:71:79:2e:0f:ce:6d:19:de:ad:6e:48:e2:81:
8f:5e:6b:76:6b:41:a5:3f:4d:67:b1:10:d9:39:62:
cb:17:43:39:f1:a9:cb:f7:e0:a5:d2:b1:27:f1:39:
d0:95:37:29:79:b0:92:06:52:5d:a6:e8:71:92:4d:
f2:c6:5c:5d:ad:86:96:79:d4:24:5f:36:31:38:ae:
25:8b:f8:07:02:59:2c:9f:01:d5:26:10:b2:07:d9:
33:01:f7:1a:67:30:38:39:91:59:e9:31:aa:c0:ca:
02:fc:66:73:0e:19:04:05:a6:e4:94:f8:31:29:eb:
51:9a:e8:2d:15:32:d6:66:19:e0:b4:1b:d2:03:11:
61:f9:73:f9:26:6e:12:f2:36:3d:24:9b:62:5e:38:
79:ec:05:a5:5c:ae:94:6c:93:2e:69:3f:82:04:8b:
f3:d7:2d:7e:4b:b1:88:9e:4d:85:ed:c5:77:a7:f2:
ef:19:e3:55:7e:79:6a:0d:68:80:3e:25:a9:4f:89:
28:28:52:1f:c0:39:87:94:60:ee:de:f0:f7:6b:f3:
28:67:23:bb:13:22:cd:fe:da:45:a4:8b:69:36:c7:
51:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D9:7F:F8:D4:9E:B8:3D:BC:A5:B2:41:A9:13:DC:3B:C8:96:53:46
X509v3 Authority Key Identifier:
keyid:C3:B3:96:2A:EE:4E:8A:E4:C6:CC:D8:97:9E:53:98:02:EA:0E:4C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/9Nl_-NSeuD28pbJBqRPcO8iWU0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.183.0/24
Signature Algorithm: sha256WithRSAEncryption
23:0f:99:1e:9c:a3:8d:ed:32:0c:95:a9:68:6c:de:67:e6:7e:
85:69:b0:fc:b6:5d:91:5b:36:96:ea:29:84:ff:65:a7:e3:1a:
84:7a:cd:e6:55:59:2e:78:99:c3:94:7e:6a:c4:27:a1:c7:d3:
79:3f:79:9e:0c:9e:8c:6d:c6:87:27:ba:41:38:0d:2c:42:14:
b1:05:11:75:bb:a4:ef:9b:8e:2d:7d:77:c2:d0:38:1a:87:42:
0e:4b:b7:3b:ce:85:2d:2d:6d:0e:ce:df:37:4f:3f:f5:e7:95:
67:3a:7b:24:d9:69:55:68:5b:07:f5:78:ea:7c:06:d7:c5:58:
ca:03:ee:82:9a:8e:b1:4e:a5:87:ee:07:30:ff:01:41:6f:3c:
2f:fe:74:c8:7c:ba:29:4a:19:9c:fd:4b:77:7d:f0:cb:c2:1d:
2f:a5:30:06:97:68:9a:15:c0:96:5e:8d:b5:e9:cd:08:e2:4a:
ef:b5:78:36:2a:0c:16:9d:9c:6d:ec:0d:a2:34:1b:04:d3:2f:
40:67:10:04:c1:7f:18:e9:2e:78:cb:00:1c:19:9a:fd:6e:93:
2e:46:fe:4d:af:dc:6d:9e:f3:1b:53:6a:80:2b:fb:40:ba:4f:
a0:8a:0d:da:49:6a:67:6d:9a:f8:bc:42:13:92:1c:2c:c2:c7:
08:44:61:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuSalpVOOpXvrodXf0XzaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYjM5NjJhZWU0ZThhZTRjNmNjZDg5NzllNTM5ODAyZWEw
ZTRjZTcwHhcNMjQwMTAxMjAzMTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGQ5N2ZmOGQ0OWViODNkYmNhNWIyNDFhOTEzZGMzYmM4OTY1MzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj01nv6ZHWRjv3Pv34ht+sDhLvZ7T
N+sLhMaXDNSRb3F5Lg/ObRnerW5I4oGPXmt2a0GlP01nsRDZOWLLF0M58anL9+Cl
0rEn8TnQlTcpebCSBlJdpuhxkk3yxlxdrYaWedQkXzYxOK4li/gHAlksnwHVJhCy
B9kzAfcaZzA4OZFZ6TGqwMoC/GZzDhkEBabklPgxKetRmugtFTLWZhngtBvSAxFh
+XP5Jm4S8jY9JJtiXjh57AWlXK6UbJMuaT+CBIvz1y1+S7GInk2F7cV3p/LvGeNV
fnlqDWiAPiWpT4koKFIfwDmHlGDu3vD3a/MoZyO7EyLN/tpFpItpNsdRmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPTZf/jUnrg9vKWyQakT3DvIllNGMB8GA1UdIwQY
MBaAFMOzliruTorkxszYl55TmALqDkznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzdPV0t1NU9pdVRHek5pWG5sT1lBdW9PVE9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yNjQ1YTctNTMyYy00ZmExLWJjZGQt
ZWE1ZGFkOGI0NzY1LzEvOU5sXy1OU2V1RDI4cGJKQnFSUGNPOGlXVTBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yNjQ1YTctNTMyYy00ZmExLWJjZGQtZWE1ZGFkOGI0NzY1
LzEvdzdPV0t1NU9pdVRHek5pWG5sT1lBdW9PVE9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucW3MA0G
CSqGSIb3DQEBCwUAA4IBAQAjD5kenKON7TIMlalobN5n5n6FabD8tl2RWzaW6imE
/2Wn4xqEes3mVVkueJnDlH5qxCehx9N5P3meDJ6MbcaHJ7pBOA0sQhSxBRF1u6Tv
m44tfXfC0Dgah0IOS7c7zoUtLW0Ozt83Tz/155VnOnsk2WlVaFsH9XjqfAbXxVjK
A+6Cmo6xTqWH7gcw/wFBbzwv/nTIfLopShmc/Ut3ffDLwh0vpTAGl2iaFcCWXo21
6c0I4krvtXg2KgwWnZxt7A2iNBsE0y9AZxAEwX8Y6S54ywAcGZr9bpMuRv5Nr9xt
nvMbU2qAK/tAuk+gig3aSWpnbZr4vEITkhwswscIRGGN
-----END CERTIFICATE-----
Generated at Fri Sep 20 21:29:37 2024 by rpki-client on console-ams.rpki-client.org