Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/nh0g3WxhLsVMV2lhkTG_6DvHfVo.roa
File: nh0g3WxhLsVMV2lhkTG_6DvHfVo.roa (raw, json)
Hash identifier: e/iZ0LWMJm8HEPmhQWJbqknQI6g4VMtHcNFOS1do0Lg=
Subject key identifier: 9E:1D:20:DD:6C:61:2E:C5:4C:57:69:61:91:31:BF:E8:3B:C7:7D:5A
Certificate issuer: /CN=593b53fb9306346f272494928d77839cbaf9ddc7
Certificate serial: 018CC34938B8520B3732F5AA0B40093A1A83
Authority key identifier: 59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/nh0g3WxhLsVMV2lhkTG_6DvHfVo.roa
Signing time: Mon 01 Jan 2024 04:30:04 +0000
ROA not before: Mon 01 Jan 2024 04:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43128
IP address blocks: 178.218.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:38:b8:52:0b:37:32:f5:aa:0b:40:09:3a:1a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=593b53fb9306346f272494928d77839cbaf9ddc7
Validity
Not Before: Jan 1 04:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e1d20dd6c612ec54c5769619131bfe83bc77d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c0:69:38:0d:44:19:5e:c8:ff:31:43:a2:da:
1d:b4:1f:93:02:fe:e5:94:7a:88:e9:83:b3:5e:d6:
ee:6a:b7:a5:a0:c4:9b:86:f4:f5:68:3d:79:15:9f:
09:c4:a7:57:49:77:4c:d1:ae:f4:6c:c3:27:ee:31:
f8:5b:62:df:10:d4:b3:20:fb:17:65:e6:6d:f7:f3:
ee:ba:c2:72:39:75:21:a4:71:2f:18:e2:59:d4:e7:
8b:b6:8b:12:0d:f5:79:f3:7b:41:07:39:b3:fe:e6:
56:a7:d3:43:ab:97:e7:2f:09:66:fe:96:f9:2c:4e:
00:27:f2:fc:33:08:d3:37:4e:77:dd:b8:71:c8:98:
36:c5:86:43:12:68:c9:d8:a5:78:28:6f:45:76:77:
cc:72:ba:9b:c7:32:de:6d:74:91:23:d4:c7:45:f7:
20:0d:51:37:a5:9d:8d:cc:bb:1d:f9:71:3c:af:10:
06:91:81:36:5d:e7:42:a3:b8:b8:2d:ba:41:d5:1f:
b7:cd:0a:70:91:29:8c:5e:60:2c:d0:2e:48:97:b3:
15:a9:ff:8f:2d:c9:ae:e0:ac:8c:da:91:d7:2d:3c:
97:67:1e:2a:ad:4b:af:43:8d:31:fd:9d:84:f8:33:
86:1e:bc:5a:57:22:81:49:a2:59:a5:9d:a5:5f:c1:
ae:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1D:20:DD:6C:61:2E:C5:4C:57:69:61:91:31:BF:E8:3B:C7:7D:5A
X509v3 Authority Key Identifier:
keyid:59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/nh0g3WxhLsVMV2lhkTG_6DvHfVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.218.175.0/24
Signature Algorithm: sha256WithRSAEncryption
85:1a:ce:89:b0:52:1d:86:67:6b:db:77:14:c1:8e:5f:2d:63:
b9:c8:b8:a4:01:f6:fa:02:53:df:0a:e0:c8:f6:44:af:b8:5d:
be:25:f0:37:58:80:01:8e:87:da:66:67:14:ba:11:28:d1:1e:
48:a0:45:7c:0d:bf:c0:94:e6:ab:9c:85:57:80:67:5d:0a:67:
14:6d:2f:dc:96:62:bf:1e:07:17:ea:48:b2:e7:80:59:61:a0:
2e:9c:dd:fc:b2:7d:fb:34:b3:e7:0a:d4:0e:4c:31:5b:6a:57:
73:7a:32:81:73:8a:db:f8:03:5d:56:5c:b1:e1:46:5f:d0:90:
3e:81:90:ab:46:3c:f5:16:93:0d:50:49:2e:f8:0f:b1:f1:36:
82:60:31:b0:a0:15:d8:75:04:e8:8b:77:f3:ec:4b:20:ed:87:
71:ba:ba:45:d8:6a:fc:99:f5:6e:43:aa:2b:f1:ac:1d:67:08:
b2:40:5d:07:18:f1:e6:66:67:3b:16:d9:c6:7c:21:50:92:4c:
54:84:4e:4a:67:80:00:7b:15:f1:c8:40:f9:fa:27:07:13:54:
22:37:cd:84:58:77:89:24:9b:08:52:29:c4:45:fa:84:5f:36:
9c:18:cf:fb:9b:0c:e3:9c:9d:0f:38:b2:e4:fa:c6:5b:0c:7f:
8c:d8:e7:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSTi4Ugs3MvWqC0AJOhqDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5M2I1M2ZiOTMwNjM0NmYyNzI0OTQ5MjhkNzc4MzljYmFm
OWRkYzcwHhcNMjQwMTAxMDQzMDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTFkMjBkZDZjNjEyZWM1NGM1NzY5NjE5MTMxYmZlODNiYzc3ZDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcBpOA1EGV7I/zFDotodtB+TAv7l
lHqI6YOzXtbuareloMSbhvT1aD15FZ8JxKdXSXdM0a70bMMn7jH4W2LfENSzIPsX
ZeZt9/PuusJyOXUhpHEvGOJZ1OeLtosSDfV583tBBzmz/uZWp9NDq5fnLwlm/pb5
LE4AJ/L8MwjTN0533bhxyJg2xYZDEmjJ2KV4KG9FdnfMcrqbxzLebXSRI9THRfcg
DVE3pZ2NzLsd+XE8rxAGkYE2XedCo7i4LbpB1R+3zQpwkSmMXmAs0C5Il7MVqf+P
Lcmu4KyM2pHXLTyXZx4qrUuvQ40x/Z2E+DOGHrxaVyKBSaJZpZ2lX8GulwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ4dIN1sYS7FTFdpYZExv+g7x31aMB8GA1UdIwQY
MBaAFFk7U/uTBjRvJySUko13g5y6+d3HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1R0VC01TUdORzhuSkpTU2pYZURuTHI1M2NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMmZjOWUtZWEzYi00MWMwLTk1MGUt
NDQ3NWE5YmYyNTBlLzEvbmgwZzNXeGhMc1ZNVjJsaGtUR182RHZIZlZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8xMmZjOWUtZWEzYi00MWMwLTk1MGUtNDQ3NWE5YmYyNTBl
LzEvV1R0VC01TUdORzhuSkpTU2pYZURuTHI1M2NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstqvMA0G
CSqGSIb3DQEBCwUAA4IBAQCFGs6JsFIdhmdr23cUwY5fLWO5yLikAfb6AlPfCuDI
9kSvuF2+JfA3WIABjofaZmcUuhEo0R5IoEV8Db/AlOarnIVXgGddCmcUbS/clmK/
HgcX6kiy54BZYaAunN38sn37NLPnCtQOTDFbaldzejKBc4rb+ANdVlyx4UZf0JA+
gZCrRjz1FpMNUEku+A+x8TaCYDGwoBXYdQToi3fz7Esg7YdxurpF2Gr8mfVuQ6or
8awdZwiyQF0HGPHmZmc7FtnGfCFQkkxUhE5KZ4AAexXxyED5+icHE1QiN82EWHeJ
JJsIUinERfqEXzacGM/7mwzjnJ0POLLk+sZbDH+M2Oep
-----END CERTIFICATE-----
Generated at Thu Jun 27 23:39:55 2024 by rpki-client on console-fra.rpki-client.org