Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/x2KDfPyJwIh-0w0jyfNzdui0oHM.roa
File: x2KDfPyJwIh-0w0jyfNzdui0oHM.roa (raw, json)
Hash identifier: pDNrLc2VrxPQnvev2VGcbhu5C/JVHIkDo2HoNpz9nLg=
Subject key identifier: C7:62:83:7C:FC:89:C0:88:7E:D3:0D:23:C9:F3:73:76:E8:B4:A0:73
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 018CC79447E2E567B991781CAE6DA8173B31
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/x2KDfPyJwIh-0w0jyfNzdui0oHM.roa
Signing time: Tue 02 Jan 2024 00:30:32 +0000
ROA not before: Tue 02 Jan 2024 00:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49849
IP address blocks: 87.119.112.0/24 maxlen: 24
87.119.108.0/22 maxlen: 24
87.119.114.0/24 maxlen: 24
87.119.115.0/24 maxlen: 24
87.119.113.0/24 maxlen: 24
87.119.118.0/24 maxlen: 24
87.119.116.0/24 maxlen: 24
87.119.117.0/24 maxlen: 24
87.119.112.0/21 maxlen: 21
87.119.119.0/24 maxlen: 24
77.77.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:47:e2:e5:67:b9:91:78:1c:ae:6d:a8:17:3b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 2 00:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c762837cfc89c0887ed30d23c9f37376e8b4a073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:d6:5f:c7:ad:ec:2e:bb:d3:70:07:61:46:
25:96:a8:f4:07:b4:65:7e:db:ea:f9:ed:7f:1c:9f:
5d:5a:b7:74:9e:90:ae:66:b6:b9:4b:0f:4f:46:e7:
90:60:44:eb:57:2a:9e:b3:48:13:46:36:1e:38:fc:
97:04:cf:c8:6b:50:69:5b:33:c8:b6:ba:b7:4f:a5:
66:27:2e:10:3e:35:e8:17:10:5b:27:9f:2b:5a:a5:
b4:a3:c4:98:56:c4:76:f9:73:e2:42:ca:58:8c:d1:
ff:06:77:df:c8:77:38:7a:f7:ed:ca:c5:33:28:7a:
2e:c9:5e:1a:c0:d0:33:c8:36:50:2c:58:ea:c7:47:
44:75:9d:2b:fb:74:54:ab:32:cd:92:60:2a:ec:5d:
06:27:31:34:41:fd:57:41:26:db:5f:85:db:3c:64:
29:ca:c9:77:10:3e:3b:0b:85:ba:e9:57:c4:8c:eb:
91:93:c4:e5:8c:5e:a4:c0:af:90:bd:7d:7c:2c:ad:
6e:8b:5b:20:32:1a:57:ae:f9:40:80:de:89:66:92:
58:14:56:76:1f:53:ef:40:c6:7a:36:7b:ce:0a:7b:
dc:32:78:2e:7b:2e:bd:2f:88:4e:f7:b5:bd:23:c6:
82:63:2a:bd:67:8d:1c:9d:d8:30:90:7f:d5:aa:25:
d6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:62:83:7C:FC:89:C0:88:7E:D3:0D:23:C9:F3:73:76:E8:B4:A0:73
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/x2KDfPyJwIh-0w0jyfNzdui0oHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.77.128.0/21
87.119.108.0-87.119.119.255
Signature Algorithm: sha256WithRSAEncryption
26:2b:8d:8f:01:7c:4d:65:61:41:e6:3b:64:b5:95:19:7c:f8:
de:5c:78:03:b6:ef:5b:6d:bf:9f:4c:9d:9a:4e:70:dd:21:e4:
38:30:de:f6:f5:99:c9:e6:39:94:6c:3e:b2:91:28:33:d9:c0:
0d:96:51:17:cd:3f:5a:44:69:b6:17:79:04:36:87:aa:50:c9:
e4:f7:86:2c:b9:16:4e:a9:4f:a1:6c:f1:98:54:38:12:c4:9a:
43:0a:fb:da:48:ce:24:9b:2c:f9:c2:ef:f5:fe:38:35:3f:cb:
ff:23:28:e6:1c:6a:d2:e3:7a:d5:b0:e3:6f:51:73:f1:a7:50:
70:62:78:f0:1b:e7:fd:51:83:7a:19:44:11:d1:61:80:64:67:
b1:4f:d8:a4:af:fa:69:8f:e0:db:e7:5b:5d:79:fd:a4:9e:2a:
5f:dd:5e:35:9a:de:1e:70:f9:cb:c1:9b:34:ba:fc:6c:88:f3:
13:c6:ba:b3:e8:a5:34:51:c6:a7:8a:92:3c:dd:99:b8:0b:07:
e2:a5:24:f8:fe:07:9a:0a:03:7f:16:0b:4a:fc:33:2f:c9:aa:
01:b1:91:78:16:63:09:d3:2d:3c:e4:f6:b0:3f:0a:73:68:09:
79:41:4f:f6:1d:14:da:56:9a:10:9d:0f:d2:ba:d8:c1:73:a5:
56:19:e7:9f
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYzHlEfi5We5kXgcrm2oFzsxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjQwMTAyMDAzMDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzYyODM3Y2ZjODljMDg4N2VkMzBkMjNjOWYzNzM3NmU4YjRhMDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoHWX8et7C6703AHYUYllqj0B7Rl
ftvq+e1/HJ9dWrd0npCuZra5Sw9PRueQYETrVyqes0gTRjYeOPyXBM/Ia1BpWzPI
trq3T6VmJy4QPjXoFxBbJ58rWqW0o8SYVsR2+XPiQspYjNH/BnffyHc4evftysUz
KHouyV4awNAzyDZQLFjqx0dEdZ0r+3RUqzLNkmAq7F0GJzE0Qf1XQSbbX4XbPGQp
ysl3ED47C4W66VfEjOuRk8TljF6kwK+QvX18LK1ui1sgMhpXrvlAgN6JZpJYFFZ2
H1PvQMZ6NnvOCnvcMnguey69L4hO97W9I8aCYyq9Z40cndgwkH/VqiXWQQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFMdig3z8icCIftMNI8nzc3botKBzMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEveDJLRGZQeUp3SWgtMHcwanlmTnpkdWkwb0hNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQDTU2AMAwD
BAJXd2wDBANXd3AwDQYJKoZIhvcNAQELBQADggEBACYrjY8BfE1lYUHmO2S1lRl8
+N5ceAO271ttv59MnZpOcN0h5Dgw3vb1mcnmOZRsPrKRKDPZwA2WURfNP1pEabYX
eQQ2h6pQyeT3hiy5Fk6pT6Fs8ZhUOBLEmkMK+9pIziSbLPnC7/X+ODU/y/8jKOYc
atLjetWw429Rc/GnUHBiePAb5/1Rg3oZRBHRYYBkZ7FP2KSv+mmP4NvnW115/aSe
Kl/dXjWa3h5w+cvBmzS6/GyI8xPGurPopTRRxqeKkjzdmbgLB+KlJPj+B5oKA38W
C0r8My/JqgGxkXgWYwnTLTzk9rA/CnNoCXlBT/YdFNpWmhCdD9K62MFzpVYZ558=
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:15:54 2024 by rpki-client on console-ams.rpki-client.org