Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/1-CEbVX9q9sr88-GTGkAnbgtjZMw.roa
File: 1-CEbVX9q9sr88-GTGkAnbgtjZMw.roa (raw, json)
Hash identifier: G7ontNIpfpUHiCConAhzk/4rwjkx0Aez1nVKE4Ldm/o=
Subject key identifier: F8:21:1B:55:7F:6A:F6:CA:FC:F3:E1:93:1A:40:27:6E:0B:63:64:CC
Certificate issuer: /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Certificate serial: 018CC56EDE0CB429D2CDCA8BE92CD74FED88
Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/1-CEbVX9q9sr88-GTGkAnbgtjZMw.roa
Signing time: Mon 01 Jan 2024 14:30:26 +0000
ROA not before: Mon 01 Jan 2024 14:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48260
IP address blocks: 185.77.198.0/24 maxlen: 24
185.77.199.0/24 maxlen: 24
185.77.197.0/24 maxlen: 24
2a03:1980:d400::/40 maxlen: 40
2a03:1980:d200::/40 maxlen: 40
2a03:1980::/40 maxlen: 40
2a03:1981::/32 maxlen: 32
2a03:1980:d4ff::/48 maxlen: 48
2a03:1980:d1ff::/48 maxlen: 48
2a03:1980:d0ff::/48 maxlen: 48
2a03:1984::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:de:0c:b4:29:d2:cd:ca:8b:e9:2c:d7:4f:ed:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Validity
Not Before: Jan 1 14:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8211b557f6af6cafcf3e1931a40276e0b6364cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:be:a3:ad:94:f3:62:a3:94:3a:3a:ec:2f:6a:
23:6d:40:0f:28:2c:a2:86:a5:1d:1a:78:53:d2:3c:
a2:a5:af:ce:ed:b6:7e:e3:12:3d:4c:61:67:a3:6d:
f4:27:87:7b:1c:f9:6e:f9:dc:6b:8d:0e:a1:63:16:
97:9b:41:4e:c9:f8:ab:07:eb:dd:d2:f0:4e:c0:8d:
38:75:94:4d:60:20:97:46:c1:34:a0:59:2f:78:fd:
9e:0a:e6:2e:8a:4d:24:17:4f:51:95:85:a8:58:0f:
70:26:06:f1:df:72:36:86:e0:bd:31:1b:88:df:88:
87:14:2e:07:cc:09:31:e3:f2:89:b7:52:e4:5a:22:
f0:52:a8:ef:eb:31:7d:48:1d:b4:62:76:8d:ac:9a:
18:76:fd:b2:dc:35:64:f1:ab:43:b0:7a:f5:77:3d:
be:44:1d:ec:46:54:c0:4e:9e:2b:1a:82:43:3e:11:
b7:18:61:df:f7:7b:f8:60:2b:46:87:1b:f9:77:10:
4a:10:da:be:77:03:4a:32:fc:a4:12:60:a3:9e:e9:
f4:30:99:eb:09:20:ab:b4:da:3f:3c:98:f0:a8:bb:
7c:72:53:cd:c9:fb:8c:be:26:91:3e:02:29:2f:96:
7a:c8:21:e5:24:ab:d3:79:43:6e:45:c3:36:2d:f8:
ce:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:21:1B:55:7F:6A:F6:CA:FC:F3:E1:93:1A:40:27:6E:0B:63:64:CC
X509v3 Authority Key Identifier:
keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/1-CEbVX9q9sr88-GTGkAnbgtjZMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.197.0-185.77.199.255
IPv6:
2a03:1980::/40
2a03:1980:d0ff::/48
2a03:1980:d1ff::-2a03:1980:d2ff:ffff:ffff:ffff:ffff:ffff
2a03:1980:d400::/40
2a03:1981::/32
2a03:1984::/32
Signature Algorithm: sha256WithRSAEncryption
f5:3b:2b:3b:05:c8:65:3c:19:b5:9c:bd:ea:98:0c:a2:90:83:
af:dd:93:b2:6f:83:ce:c9:64:5a:95:38:53:57:91:da:e6:d4:
0e:d3:9b:a4:3a:4c:32:cd:e3:f1:ba:c1:35:cf:16:91:43:b0:
10:38:11:e8:70:00:af:ae:6c:ec:47:91:3c:6f:db:3b:fc:a1:
3c:66:18:4e:0f:e3:48:18:bb:49:8b:c7:42:3f:a4:5f:08:06:
04:48:0f:4c:54:03:73:c8:d2:5e:cf:77:17:a7:7a:8a:8e:c1:
4e:5d:e1:92:b7:41:d7:02:86:56:3c:cc:59:90:b5:9a:55:ee:
2f:25:73:18:15:82:b3:4a:1b:23:64:ec:bc:4d:76:d8:87:40:
a5:ed:45:a9:6a:37:69:47:89:bc:2a:b8:dc:a0:ef:bc:b0:b9:
b3:9f:51:97:9c:0d:f0:34:f4:fc:b1:25:b3:1f:d7:cd:0e:d7:
9f:60:94:64:91:32:ac:21:bd:1f:7a:7f:3b:45:26:23:73:87:
26:e8:c2:16:91:6e:87:77:c4:06:60:12:1d:08:35:46:26:8d:
46:0a:0b:b0:99:c7:12:93:65:20:75:24:ee:61:df:be:4e:61:
a4:f8:bd:44:33:4f:8d:eb:c2:d2:0b:75:03:17:8a:c1:c9:07:
fe:28:62:4a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgISAYzFbt4MtCnSzcqL6SzXT+2IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZmY1YmNmNzM5YjA3MzJmYjFiY2RiNzE3ZWM3MTdmNmYx
Y2IwZTIwHhcNMjQwMTAxMTQzMDI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODIxMWI1NTdmNmFmNmNhZmNmM2UxOTMxYTQwMjc2ZTBiNjM2NGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj76jrZTzYqOUOjrsL2ojbUAPKCyi
hqUdGnhT0jyipa/O7bZ+4xI9TGFno230J4d7HPlu+dxrjQ6hYxaXm0FOyfirB+vd
0vBOwI04dZRNYCCXRsE0oFkveP2eCuYuik0kF09RlYWoWA9wJgbx33I2huC9MRuI
34iHFC4HzAkx4/KJt1LkWiLwUqjv6zF9SB20YnaNrJoYdv2y3DVk8atDsHr1dz2+
RB3sRlTATp4rGoJDPhG3GGHf93v4YCtGhxv5dxBKENq+dwNKMvykEmCjnun0MJnr
CSCrtNo/PJjwqLt8clPNyfuMviaRPgIpL5Z6yCHlJKvTeUNuRcM2LfjOnQIDAQAB
o4ICVDCCAlAwHQYDVR0OBBYEFPghG1V/avbK/PPhkxpAJ24LY2TMMB8GA1UdIwQY
MBaAFCL/W89zmwcy+xvNtxfscX9vHLDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXY5YnozT2JCekw3RzgyM0YteHhmMjhjc09JLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kN2JmMGYtNjkxYS00Y2VjLWI1Y2Ut
NzYwM2U1ZGQ1NzA3LzEvMS1DRWJWWDlxOXNyODgtR1RHa0FuYmd0alpNdy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMjkvZDdiZjBmLTY5MWEtNGNlYy1iNWNlLTc2MDNlNWRkNTcw
Ny8xL0l2OWJ6M09iQnpMN0c4MjNGLXh4ZjI4Y3NPSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBpBggrBgEFBQcBBwEB/wRaMFgwFAQCAAEwDjAMAwQAuU3F
AwQDuU3AMEAEAgACMDoDBgAqAxmAAAMHACoDGYDQ/zARAwcAKgMZgNH/AwYAKgMZ
gNIDBgAqAxmA1AMFACoDGYEDBQAqAxmEMA0GCSqGSIb3DQEBCwUAA4IBAQD1Oys7
BchlPBm1nL3qmAyikIOv3ZOyb4POyWRalThTV5Ha5tQO05ukOkwyzePxusE1zxaR
Q7AQOBHocACvrmzsR5E8b9s7/KE8ZhhOD+NIGLtJi8dCP6RfCAYESA9MVANzyNJe
z3cXp3qKjsFOXeGSt0HXAoZWPMxZkLWaVe4vJXMYFYKzShsjZOy8TXbYh0Cl7UWp
ajdpR4m8KrjcoO+8sLmzn1GXnA3wNPT8sSWzH9fNDtefYJRkkTKsIb0fen87RSYj
c4cm6MIWkW6Hd8QGYBIdCDVGJo1GCguwmccSk2UgdSTuYd++TmGk+L1EM0+N68LS
C3UDF4rByQf+KGJK
-----END CERTIFICATE-----
Generated at Fri Jun 21 05:26:55 2024 by rpki-client on console-fra.rpki-client.org