Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/ItXt0X5y_ht75FWOOmB7TnjWSOI.roa
File: ItXt0X5y_ht75FWOOmB7TnjWSOI.roa (raw, json)
Hash identifier: pEMmm4jrtFMMDfjOqYNWHxNm7YJ1vjesOlFGgzJDZZc=
Subject key identifier: 22:D5:ED:D1:7E:72:FE:1B:7B:E4:55:8E:3A:60:7B:4E:78:D6:48:E2
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 018CC9BCA496C88012F619B5BC60177A1446
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/ItXt0X5y_ht75FWOOmB7TnjWSOI.roa
Signing time: Tue 02 Jan 2024 10:33:52 +0000
ROA not before: Tue 02 Jan 2024 10:33:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2686
IP address blocks: 145.139.78.0/24 maxlen: 24
145.139.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:a4:96:c8:80:12:f6:19:b5:bc:60:17:7a:14:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 2 10:33:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22d5edd17e72fe1b7be4558e3a607b4e78d648e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ad:85:8b:ff:81:8b:1c:d8:b3:7a:88:e5:29:
d0:1f:df:23:b2:cc:da:11:20:f0:7e:3a:7b:95:a9:
58:3e:71:c7:e2:0e:32:8f:06:39:d3:d3:47:d5:b0:
74:cb:bb:1f:e2:51:69:4d:72:1a:a0:8d:2e:39:5f:
24:86:bb:9e:fb:48:75:42:74:13:bb:88:c8:85:c6:
45:2d:3c:b1:ad:7a:56:65:66:33:2e:cb:14:5a:5a:
a9:84:5d:e7:1a:8b:e4:bb:7b:9d:d8:37:5c:58:f0:
0c:2d:12:6c:bc:dc:c0:98:35:54:dc:3a:6b:df:74:
27:f0:00:8c:d7:07:49:d3:47:76:2a:5f:0f:c3:4f:
47:83:6f:f1:5a:bd:5c:18:2f:96:1f:a5:f0:e9:59:
48:a0:f1:af:8d:c1:7f:44:2f:ce:4b:8c:71:ea:6f:
fd:63:a3:f1:d0:aa:23:0b:6c:bf:0a:f7:f5:61:24:
fa:d5:63:30:10:e3:9a:5a:29:f2:d9:59:a5:05:63:
3c:1e:51:09:c3:fe:ec:ef:7e:3e:00:e8:c1:4f:52:
dd:7f:d3:83:87:cd:97:16:d5:bf:12:aa:23:a2:b5:
3b:75:07:40:ca:38:49:93:31:81:50:cc:1a:6a:bb:
f4:d3:3e:d1:c9:a8:54:14:b3:71:b6:fa:83:02:76:
2c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D5:ED:D1:7E:72:FE:1B:7B:E4:55:8E:3A:60:7B:4E:78:D6:48:E2
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/ItXt0X5y_ht75FWOOmB7TnjWSOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.139.77.0-145.139.78.255
Signature Algorithm: sha256WithRSAEncryption
18:96:94:96:cc:99:07:25:80:11:98:56:98:99:f8:be:0e:9e:
b8:5f:f1:e9:a2:57:ad:37:ba:f5:b8:07:a4:b1:1f:0e:76:f7:
78:90:0a:42:7b:f2:65:d5:c8:a9:95:e0:6b:a6:c1:c6:76:77:
f6:a5:7b:02:a0:76:71:f7:c2:3d:15:4f:d5:74:de:77:3d:64:
bb:cc:27:76:b8:04:b6:83:f0:76:ae:c0:47:03:65:42:03:0c:
d3:8c:fd:c6:85:03:75:8e:64:b5:b0:b3:c5:ac:21:17:c0:e7:
a5:24:97:34:48:4b:83:18:f4:cb:ce:fe:5e:c8:ad:55:24:20:
c3:de:ac:cb:50:7f:18:7c:23:89:a0:17:f0:f2:8c:a9:59:a3:
60:92:b9:f3:93:ff:82:32:1a:cf:8d:af:d2:51:34:ba:e9:bf:
0c:b2:56:13:46:51:ba:02:80:21:96:58:e9:d4:3c:06:b0:9d:
73:7f:b3:dc:4b:91:f9:d5:27:02:97:93:2b:0f:7e:14:5d:f3:
13:c8:7d:ef:04:61:be:45:c6:f0:c0:f9:b2:30:8e:44:34:8c:
cf:d7:18:ad:9e:e3:9f:f0:f5:d9:97:9e:8c:f1:cb:88:11:3c:
2f:40:fc:8e:14:3d:43:7c:92:c5:51:05:98:08:f0:30:b2:11:
b6:fd:bc:90
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzJvKSWyIAS9hm1vGAXehRGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjQwMTAyMTAzMzUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmQ1ZWRkMTdlNzJmZTFiN2JlNDU1OGUzYTYwN2I0ZTc4ZDY0OGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK2Fi/+BixzYs3qI5SnQH98jssza
ESDwfjp7lalYPnHH4g4yjwY509NH1bB0y7sf4lFpTXIaoI0uOV8khrue+0h1QnQT
u4jIhcZFLTyxrXpWZWYzLssUWlqphF3nGovku3ud2DdcWPAMLRJsvNzAmDVU3Dpr
33Qn8ACM1wdJ00d2Kl8Pw09Hg2/xWr1cGC+WH6Xw6VlIoPGvjcF/RC/OS4xx6m/9
Y6Px0KojC2y/Cvf1YST61WMwEOOaWiny2VmlBWM8HlEJw/7s734+AOjBT1Ldf9OD
h82XFtW/EqojorU7dQdAyjhJkzGBUMwaarv00z7RyahUFLNxtvqDAnYsLQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFCLV7dF+cv4be+RVjjpge0541kjiMB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEvSXRYdDBYNXlfaHQ3NUZXT09tQjdUbmpXU09JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACRi00D
BACRi04wDQYJKoZIhvcNAQELBQADggEBABiWlJbMmQclgBGYVpiZ+L4Onrhf8emi
V603uvW4B6SxHw5293iQCkJ78mXVyKmV4GumwcZ2d/alewKgdnH3wj0VT9V03nc9
ZLvMJ3a4BLaD8HauwEcDZUIDDNOM/caFA3WOZLWws8WsIRfA56UklzRIS4MY9MvO
/l7IrVUkIMPerMtQfxh8I4mgF/DyjKlZo2CSufOT/4IyGs+Nr9JRNLrpvwyyVhNG
UboCgCGWWOnUPAawnXN/s9xLkfnVJwKXkysPfhRd8xPIfe8EYb5FxvDA+bIwjkQ0
jM/XGK2e45/w9dmXnozxy4gRPC9A/I4UPUN8ksVRBZgI8DCyEbb9vJA=
-----END CERTIFICATE-----
Generated at Sun Jun 2 04:34:59 2024 by rpki-client on console-ams.rpki-client.org