Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/bebc33-e901-4559-bdd0-b53204d93c33/1/DxFc_wpL4vC5O5msqkBfzcNEAB4.roa
File: DxFc_wpL4vC5O5msqkBfzcNEAB4.roa (raw, json)
Hash identifier: mvVJj7RL1FXCt24iDFGpu5LKDWCmIu1X0XiO4+Jz0PM=
Subject key identifier: 0F:11:5C:FF:0A:4B:E2:F0:B9:3B:99:AC:AA:40:5F:CD:C3:44:00:1E
Certificate issuer: /CN=81e34878f96b3997aa78f4c7fb695ef0dbc6d360
Certificate serial: 018CCA2942717125606F9292A2D68AF58A3E
Authority key identifier: 81:E3:48:78:F9:6B:39:97:AA:78:F4:C7:FB:69:5E:F0:DB:C6:D3:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/geNIePlrOZeqePTH-2le8NvG02A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/bebc33-e901-4559-bdd0-b53204d93c33/1/DxFc_wpL4vC5O5msqkBfzcNEAB4.roa
Signing time: Tue 02 Jan 2024 12:32:30 +0000
ROA not before: Tue 02 Jan 2024 12:32:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209281
IP address blocks: 185.20.108.0/22 maxlen: 22
2a00:4de0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/bebc33-e901-4559-bdd0-b53204d93c33/1/geNIePlrOZeqePTH-2le8NvG02A.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/bebc33-e901-4559-bdd0-b53204d93c33/1/geNIePlrOZeqePTH-2le8NvG02A.mft
rsync://rpki.ripe.net/repository/DEFAULT/geNIePlrOZeqePTH-2le8NvG02A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 19:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:42:71:71:25:60:6f:92:92:a2:d6:8a:f5:8a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e34878f96b3997aa78f4c7fb695ef0dbc6d360
Validity
Not Before: Jan 2 12:32:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f115cff0a4be2f0b93b99acaa405fcdc344001e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:19:34:e2:cc:18:fc:c9:f5:14:d4:14:05:58:
ae:e3:f1:6f:f7:f9:b1:a0:73:93:02:d4:a4:3c:4d:
08:14:b1:93:54:2a:97:12:cb:74:ac:87:b3:75:74:
56:8d:9b:5a:e6:41:97:7c:ac:7b:13:6a:11:26:c4:
31:91:77:90:9a:18:31:46:06:b2:33:50:86:b0:e9:
66:54:05:76:b4:8d:e5:f8:c7:cb:87:6b:b7:e9:31:
76:82:e0:99:d1:1c:a0:a9:94:e0:d1:1b:4d:82:4c:
84:37:50:d2:0d:54:94:5f:cf:f3:2e:59:a9:0c:09:
88:c6:73:d6:1a:f3:e5:f2:3c:b0:70:d0:00:c4:07:
cf:3e:d2:1b:01:4b:14:39:cf:c8:58:ad:a1:20:8b:
6c:58:ad:2e:c3:4f:2a:32:30:fc:ba:1a:80:8b:f3:
ab:54:13:d3:6d:84:41:b6:fb:76:50:17:04:25:ec:
64:5e:e1:eb:dc:a8:7a:31:f5:a3:d3:44:b9:23:83:
ba:58:91:77:3b:53:85:64:97:76:b5:f1:99:ad:24:
f3:f7:28:74:f7:7f:41:75:4e:bb:20:07:8f:78:ad:
c5:5d:9f:f4:36:56:a6:d4:49:16:32:8d:02:70:45:
e9:95:e5:ed:3f:dc:5e:a4:fc:a8:40:11:1d:97:45:
bf:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:11:5C:FF:0A:4B:E2:F0:B9:3B:99:AC:AA:40:5F:CD:C3:44:00:1E
X509v3 Authority Key Identifier:
keyid:81:E3:48:78:F9:6B:39:97:AA:78:F4:C7:FB:69:5E:F0:DB:C6:D3:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/geNIePlrOZeqePTH-2le8NvG02A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bebc33-e901-4559-bdd0-b53204d93c33/1/DxFc_wpL4vC5O5msqkBfzcNEAB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bebc33-e901-4559-bdd0-b53204d93c33/1/geNIePlrOZeqePTH-2le8NvG02A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.108.0/22
IPv6:
2a00:4de0::/29
Signature Algorithm: sha256WithRSAEncryption
a1:87:16:94:da:16:64:ca:fa:f1:b9:69:50:1b:df:c3:57:cb:
bd:c6:b1:6b:7c:37:be:04:70:00:c0:1e:3f:c3:51:72:98:90:
ec:28:fa:b7:38:fb:1b:7d:ea:80:4b:ef:4c:be:f5:48:04:e8:
ab:b7:cf:22:86:4d:ee:5d:50:62:2c:09:ab:4d:6c:93:1d:a4:
d4:b9:12:cd:d9:df:b5:46:f9:63:24:48:35:f0:ee:00:2b:5e:
13:39:57:65:18:eb:41:43:c3:b9:d1:57:27:80:4f:67:3c:2f:
08:13:3b:ed:7e:03:97:9a:e2:34:0e:81:0e:ab:b2:1a:e9:75:
9e:60:16:ef:b0:fe:aa:01:cf:57:fd:36:c3:7e:cc:3b:d4:42:
ce:fa:8f:de:2d:d1:b9:10:af:15:4f:28:87:ee:3d:2a:c5:5f:
21:5c:a0:4f:8d:6a:cf:25:5a:34:9b:2a:7f:84:38:1a:fd:ea:
13:d7:12:71:fe:91:4c:da:70:ce:be:5e:c9:e5:49:6b:71:14:
b9:57:60:ca:24:99:ca:dc:6e:cc:91:d5:9f:f5:21:fc:9a:d3:
4d:8e:53:e8:86:24:83:fa:13:2e:31:42:27:00:6a:aa:b7:b3:
21:03:af:65:1b:bd:31:33:52:54:ce:3d:c6:de:a3:65:d7:74:
0e:4b:f3:70
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzKKUJxcSVgb5KSotaK9Yo+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZTM0ODc4Zjk2YjM5OTdhYTc4ZjRjN2ZiNjk1ZWYwZGJj
NmQzNjAwHhcNMjQwMTAyMTIzMjMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjExNWNmZjBhNGJlMmYwYjkzYjk5YWNhYTQwNWZjZGMzNDQwMDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhk04swY/Mn1FNQUBViu4/Fv9/mx
oHOTAtSkPE0IFLGTVCqXEst0rIezdXRWjZta5kGXfKx7E2oRJsQxkXeQmhgxRgay
M1CGsOlmVAV2tI3l+MfLh2u36TF2guCZ0RygqZTg0RtNgkyEN1DSDVSUX8/zLlmp
DAmIxnPWGvPl8jywcNAAxAfPPtIbAUsUOc/IWK2hIItsWK0uw08qMjD8uhqAi/Or
VBPTbYRBtvt2UBcEJexkXuHr3Kh6MfWj00S5I4O6WJF3O1OFZJd2tfGZrSTz9yh0
939BdU67IAePeK3FXZ/0Nlam1EkWMo0CcEXpleXtP9xepPyoQBEdl0W/2wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFA8RXP8KS+LwuTuZrKpAX83DRAAeMB8GA1UdIwQY
MBaAFIHjSHj5azmXqnj0x/tpXvDbxtNgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2VOSWVQbHJPWmVxZVBUSC0ybGU4TnZHMDJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9iZWJjMzMtZTkwMS00NTU5LWJkZDAt
YjUzMjA0ZDkzYzMzLzEvRHhGY193cEw0dkM1TzVtc3FrQmZ6Y05FQUI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9iZWJjMzMtZTkwMS00NTU5LWJkZDAtYjUzMjA0ZDkzYzMz
LzEvZ2VOSWVQbHJPWmVxZVBUSC0ybGU4TnZHMDJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuRRsMA0E
AgACMAcDBQMqAE3gMA0GCSqGSIb3DQEBCwUAA4IBAQChhxaU2hZkyvrxuWlQG9/D
V8u9xrFrfDe+BHAAwB4/w1FymJDsKPq3OPsbfeqAS+9MvvVIBOirt88ihk3uXVBi
LAmrTWyTHaTUuRLN2d+1RvljJEg18O4AK14TOVdlGOtBQ8O50VcngE9nPC8IEzvt
fgOXmuI0DoEOq7Ia6XWeYBbvsP6qAc9X/TbDfsw71ELO+o/eLdG5EK8VTyiH7j0q
xV8hXKBPjWrPJVo0myp/hDga/eoT1xJx/pFM2nDOvl7J5UlrcRS5V2DKJJnK3G7M
kdWf9SH8mtNNjlPohiSD+hMuMUInAGqqt7MhA69lG70xM1JUzj3G3qNl13QOS/Nw
-----END CERTIFICATE-----
Generated at Fri Jun 21 03:44:34 2024 by rpki-client on console-ams.rpki-client.org