Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/K9Zr7ohh_aSv3H63GF2WqIuEj_I.roa
File: K9Zr7ohh_aSv3H63GF2WqIuEj_I.roa (raw, json)
Hash identifier: NDcB2Lj3lWEFFqr6Z5UtPwFp4vw9ju262VtOj5RDhV0=
Subject key identifier: 2B:D6:6B:EE:88:61:FD:A4:AF:DC:7E:B7:18:5D:96:A8:8B:84:8F:F2
Certificate issuer: /CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Certificate serial: 018E0E6459416EF96D84068646191A2F5CEE
Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/K9Zr7ohh_aSv3H63GF2WqIuEj_I.roa
Signing time: Tue 05 Mar 2024 11:34:01 +0000
ROA not before: Tue 05 Mar 2024 11:34:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205800
IP address blocks: 217.145.230.0/24 maxlen: 24
217.145.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0e:64:59:41:6e:f9:6d:84:06:86:46:19:1a:2f:5c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Validity
Not Before: Mar 5 11:34:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bd66bee8861fda4afdc7eb7185d96a88b848ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ac:65:9f:4a:40:58:24:b6:1c:db:c6:7f:f4:
5a:19:62:03:c4:5e:27:72:ac:23:96:ed:c3:f0:9c:
6b:34:33:18:8c:ba:85:d9:48:13:88:19:89:e9:99:
ab:c7:67:ce:7a:d6:ac:46:9b:a4:24:55:49:5c:80:
47:35:b4:27:a6:fb:5f:7c:fe:5f:8d:fe:c5:3e:0a:
5c:43:98:32:56:ac:89:e3:42:9f:59:33:00:53:f1:
27:d7:58:85:ad:0d:07:71:8b:bb:06:56:9a:d0:b3:
17:e4:dc:85:03:92:45:37:a0:61:ff:93:21:09:5c:
24:bc:a1:1e:c1:be:5d:fc:a9:be:a2:4c:a6:07:99:
76:f6:a0:6d:23:77:de:78:e7:53:d6:3c:0b:41:a3:
35:d5:35:27:46:e2:b4:d3:7c:f0:93:ce:e3:c9:49:
da:7c:3b:4e:a8:bc:90:2f:64:48:4a:29:fc:60:e3:
37:e7:e0:3a:bb:11:1a:04:84:65:9b:e4:92:38:e8:
55:ef:06:11:24:bc:1a:34:ec:17:95:ab:d5:39:fc:
4e:81:77:31:d6:c5:5a:f1:91:ed:eb:78:4a:97:33:
47:ae:99:a0:6d:4e:ba:61:5a:37:a4:17:76:28:af:
ee:fb:97:79:44:de:d4:ea:d8:13:1e:8f:ee:4a:b7:
9e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D6:6B:EE:88:61:FD:A4:AF:DC:7E:B7:18:5D:96:A8:8B:84:8F:F2
X509v3 Authority Key Identifier:
keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/K9Zr7ohh_aSv3H63GF2WqIuEj_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.145.230.0/23
Signature Algorithm: sha256WithRSAEncryption
e4:4f:7a:97:43:ef:e8:9a:c4:5a:25:7a:19:51:59:58:be:1c:
5e:0c:40:21:64:e5:af:56:32:ec:77:e7:4a:ee:76:2c:9b:37:
c6:10:02:09:61:b1:ec:a3:87:ee:e9:2e:c2:e8:28:90:19:16:
d8:16:a6:d6:cd:dc:c9:2f:3b:99:f3:7b:3b:d3:78:f9:90:9b:
a0:67:bc:96:cf:ef:98:fa:47:d7:8d:4a:37:f4:bd:8f:62:9d:
c7:93:48:50:52:4b:34:ad:f8:ec:5a:ac:b3:a5:bb:39:da:91:
ec:38:31:70:de:80:97:28:0f:9a:34:e1:12:1c:8e:23:38:3f:
5f:7a:8a:ab:cb:e8:8d:e6:29:28:c6:eb:66:b3:8d:07:dc:95:
c1:31:35:be:ac:00:f3:74:3c:7d:14:1d:7f:a6:fe:27:ec:73:
98:44:7a:01:ea:93:a9:f2:2b:c2:4e:dd:57:24:42:ca:57:3d:
a5:2e:07:32:11:23:1e:6f:cf:89:dc:a1:98:0e:e5:03:d5:64:
09:6b:5e:bd:b2:db:18:3d:b1:0b:79:1a:55:85:c9:76:b4:ec:
fd:20:15:2f:9e:c3:61:e6:c2:f9:2c:68:99:b3:51:a5:75:10:
6b:52:0f:ea:31:ea:43:14:8e:ed:c9:d7:ef:5e:b7:0b:ec:29:
57:45:01:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY4OZFlBbvlthAaGRhkaL1zuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMjhjZmEzZmQyZGE5Y2FhYTY1OTI4NDc1OGRlZTY3MDk5
OTM0ZjgwHhcNMjQwMzA1MTEzNDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmQ2NmJlZTg4NjFmZGE0YWZkYzdlYjcxODVkOTZhODhiODQ4ZmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqxln0pAWCS2HNvGf/RaGWIDxF4n
cqwjlu3D8JxrNDMYjLqF2UgTiBmJ6Zmrx2fOetasRpukJFVJXIBHNbQnpvtffP5f
jf7FPgpcQ5gyVqyJ40KfWTMAU/En11iFrQ0HcYu7Blaa0LMX5NyFA5JFN6Bh/5Mh
CVwkvKEewb5d/Km+okymB5l29qBtI3feeOdT1jwLQaM11TUnRuK003zwk87jyUna
fDtOqLyQL2RISin8YOM35+A6uxEaBIRlm+SSOOhV7wYRJLwaNOwXlavVOfxOgXcx
1sVa8ZHt63hKlzNHrpmgbU66YVo3pBd2KK/u+5d5RN7U6tgTHo/uSreeVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCvWa+6IYf2kr9x+txhdlqiLhI/yMB8GA1UdIwQY
MBaAFC0oz6P9LanKqmWShHWN7mcJmTT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFNqUG9fMHRxY3FxWlpLRWRZM3Vad21aTlBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mZWJhYjAtZDkzYS00NzA0LTlhNzEt
M2FkNTJlOGI5NjI4LzEvSzlacjdvaGhfYVN2M0g2M0dGMldxSXVFal9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9mZWJhYjAtZDkzYS00NzA0LTlhNzEtM2FkNTJlOGI5NjI4
LzEvTFNqUG9fMHRxY3FxWlpLRWRZM3Vad21aTlBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2ZHmMA0G
CSqGSIb3DQEBCwUAA4IBAQDkT3qXQ+/omsRaJXoZUVlYvhxeDEAhZOWvVjLsd+dK
7nYsmzfGEAIJYbHso4fu6S7C6CiQGRbYFqbWzdzJLzuZ83s703j5kJugZ7yWz++Y
+kfXjUo39L2PYp3Hk0hQUks0rfjsWqyzpbs52pHsODFw3oCXKA+aNOESHI4jOD9f
eoqry+iN5ikoxutms40H3JXBMTW+rADzdDx9FB1/pv4n7HOYRHoB6pOp8ivCTt1X
JELKVz2lLgcyESMeb8+J3KGYDuUD1WQJa169stsYPbELeRpVhcl2tOz9IBUvnsNh
5sL5LGiZs1GldRBrUg/qMepDFI7tydfvXrcL7ClXRQF4
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:28:19 2024 by rpki-client on console-fra.rpki-client.org