Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/s1EaQ-YL_sgjCndIS6g3bXrXxIY.roa
File: s1EaQ-YL_sgjCndIS6g3bXrXxIY.roa (raw, json)
Hash identifier: +8Pq6Wxmq7kvchQzxKBoNTOpN70O8J+c8N8Rb29Hhho=
Subject key identifier: B3:51:1A:43:E6:0B:FE:C8:23:0A:77:48:4B:A8:37:6D:7A:D7:C4:86
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 019097828F70D513862485D4D767583D698D
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/s1EaQ-YL_sgjCndIS6g3bXrXxIY.roa
Signing time: Tue 09 Jul 2024 12:40:34 +0000
ROA not before: Tue 09 Jul 2024 12:40:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206680
IP address blocks: 80.72.22.0/23 maxlen: 32
2a00:8740:700::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:97:82:8f:70:d5:13:86:24:85:d4:d7:67:58:3d:69:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Jul 9 12:40:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3511a43e60bfec8230a77484ba8376d7ad7c486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a9:8e:8a:35:b7:58:a7:0e:da:9e:1f:5f:b2:
7f:96:c7:51:04:15:66:9c:17:12:36:90:1f:43:7b:
85:d7:3a:5e:15:0c:08:d1:c6:f5:a9:52:05:72:34:
23:ee:64:86:1f:1a:3c:99:17:ab:27:22:ba:47:da:
74:a7:8e:28:1f:9c:77:10:da:a9:85:c5:1a:d1:30:
60:9f:47:e6:8d:a3:7c:20:f4:c6:d9:76:17:db:19:
84:de:a9:e6:be:a1:af:64:fe:e5:7b:ca:f3:60:66:
88:a7:ec:68:0e:fc:42:f1:c3:2b:c6:f9:e3:11:60:
f8:fe:3e:f9:bf:8e:92:3e:5c:83:40:f5:8b:1e:08:
5b:49:48:18:be:5a:c4:03:57:05:38:16:e9:fb:e8:
e7:1c:6f:20:4e:a3:13:88:5a:6b:6f:08:cd:3a:95:
ef:07:9f:17:da:ba:b8:3a:39:b2:e6:85:33:58:ce:
ae:01:b9:a2:b8:52:d1:b2:20:b7:bb:81:b9:ff:69:
5d:ab:52:eb:1b:1c:62:e5:6e:66:90:57:fb:a8:76:
78:ad:d5:b0:6e:3c:5b:6b:61:6f:36:62:b3:96:07:
ec:c0:b4:da:38:cf:8f:01:b0:02:a2:b5:24:cd:80:
69:9c:9f:a9:56:83:37:41:a9:aa:4c:5e:29:a2:bd:
34:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:51:1A:43:E6:0B:FE:C8:23:0A:77:48:4B:A8:37:6D:7A:D7:C4:86
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/s1EaQ-YL_sgjCndIS6g3bXrXxIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.72.22.0/23
IPv6:
2a00:8740:700::/40
Signature Algorithm: sha256WithRSAEncryption
14:ec:63:1b:63:7a:94:a8:40:8b:49:8d:fa:37:0a:24:30:21:
2f:c9:2a:b3:f9:01:78:cb:a6:ca:9e:1f:bc:9d:a0:1c:98:cf:
c8:b7:3c:80:f7:38:9a:57:d6:e6:42:b9:4c:72:15:20:43:7f:
05:2d:3e:16:1c:37:62:70:a9:96:04:c3:06:6c:59:a5:44:5c:
c5:65:5f:44:ea:a3:19:a6:93:18:9e:8d:22:77:08:63:8f:2a:
b2:a7:d0:74:ab:88:2f:69:c1:a1:88:a9:d8:d7:c1:f4:ae:27:
b5:96:b3:df:97:26:06:d3:30:b2:63:15:0f:33:9f:08:db:d5:
ec:75:6b:f3:5a:5d:2c:0b:39:07:b6:e4:be:f1:2e:f6:05:d1:
50:69:80:21:1a:e6:6b:57:ab:7f:7a:91:40:00:9a:dc:d1:18:
97:aa:2e:7c:94:64:e2:7b:6a:d0:0e:db:d8:68:51:fa:29:4b:
11:15:8b:ea:c3:77:cb:21:48:76:2b:98:44:56:13:7a:d8:37:
2a:96:f6:d7:5c:c4:be:14:6a:1b:4b:c3:94:71:ed:4e:b3:12:
a7:d6:ed:fd:fb:ba:b8:e4:90:03:4c:2e:52:d5:22:6e:74:5f:
85:00:a0:01:61:ae:81:43:21:bd:c5:98:28:53:e5:84:0b:ca:
3e:2a:e5:fb
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZCXgo9w1ROGJIXU12dYPWmNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5
M2NiZWEwHhcNMjQwNzA5MTI0MDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzUxMWE0M2U2MGJmZWM4MjMwYTc3NDg0YmE4Mzc2ZDdhZDdjNDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6mOijW3WKcO2p4fX7J/lsdRBBVm
nBcSNpAfQ3uF1zpeFQwI0cb1qVIFcjQj7mSGHxo8mRerJyK6R9p0p44oH5x3ENqp
hcUa0TBgn0fmjaN8IPTG2XYX2xmE3qnmvqGvZP7le8rzYGaIp+xoDvxC8cMrxvnj
EWD4/j75v46SPlyDQPWLHghbSUgYvlrEA1cFOBbp++jnHG8gTqMTiFprbwjNOpXv
B58X2rq4Ojmy5oUzWM6uAbmiuFLRsiC3u4G5/2ldq1LrGxxi5W5mkFf7qHZ4rdWw
bjxba2FvNmKzlgfswLTaOM+PAbACorUkzYBpnJ+pVoM3QamqTF4por00TQIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFLNRGkPmC/7IIwp3SEuoN21618SGMB8GA1UdIwQY
MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt
ZGJmOWQ0MWYxNzk4LzEvczFFYVEtWUxfc2dqQ25kSVM2ZzNiWHJYeElZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4
LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBUEgWMA4E
AgACMAgDBgAqAIdABzANBgkqhkiG9w0BAQsFAAOCAQEAFOxjG2N6lKhAi0mN+jcK
JDAhL8kqs/kBeMumyp4fvJ2gHJjPyLc8gPc4mlfW5kK5THIVIEN/BS0+Fhw3YnCp
lgTDBmxZpURcxWVfROqjGaaTGJ6NIncIY48qsqfQdKuIL2nBoYip2NfB9K4ntZaz
35cmBtMwsmMVDzOfCNvV7HVr81pdLAs5B7bkvvEu9gXRUGmAIRrma1erf3qRQACa
3NEYl6oufJRk4ntq0A7b2GhR+ilLERWL6sN3yyFIdiuYRFYTetg3Kpb211zEvhRq
G0vDlHHtTrMSp9bt/fu6uOSQA0wuUtUibnRfhQCgAWGugUMhvcWYKFPlhAvKPirl
+w==
-----END CERTIFICATE-----
Generated at Sat Sep 28 14:12:29 2024 by rpki-client on console-fra.rpki-client.org