Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/EX44NIcEjAD6PZ12OCDPpP-Jiv4.roa
File: EX44NIcEjAD6PZ12OCDPpP-Jiv4.roa (raw, json)
Hash identifier: 6W4hzLcVlAUjZ6M6SljKI+zlwB7g4pOMiRImC5/V+Tw=
Subject key identifier: 11:7E:38:34:87:04:8C:00:FA:3D:9D:76:38:20:CF:A4:FF:89:8A:FE
Certificate issuer: /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Certificate serial: 018FAB4A45EB0451F545367591BB77F7B842
Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/EX44NIcEjAD6PZ12OCDPpP-Jiv4.roa
Signing time: Fri 24 May 2024 15:48:42 +0000
ROA not before: Fri 24 May 2024 15:48:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44515
IP address blocks: 82.221.0.0/17 maxlen: 17
82.221.0.0/21 maxlen: 21
82.221.22.0/24 maxlen: 24
82.221.28.0/24 maxlen: 24
82.221.46.0/23 maxlen: 23
82.221.64.0/22 maxlen: 22
82.221.68.0/22 maxlen: 22
82.221.80.0/21 maxlen: 21
82.221.80.0/24 maxlen: 24
82.221.81.0/24 maxlen: 24
82.221.84.0/24 maxlen: 24
82.221.88.0/22 maxlen: 22
82.221.92.0/22 maxlen: 22
82.221.161.0/24 maxlen: 24
82.221.162.0/24 maxlen: 24
82.221.165.0/24 maxlen: 24
82.221.166.0/24 maxlen: 24
212.30.224.0/19 maxlen: 19
212.30.229.0/24 maxlen: 24
212.30.242.0/24 maxlen: 24
2a02:f48::/40 maxlen: 40
2a02:f48:2100::/40 maxlen: 40
2a02:f48:2104::/48 maxlen: 48
2a02:f48:2105::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ab:4a:45:eb:04:51:f5:45:36:75:91:bb:77:f7:b8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Validity
Not Before: May 24 15:48:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=117e383487048c00fa3d9d763820cfa4ff898afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5b:e6:9e:99:07:73:62:58:32:22:33:ad:5c:
ff:4d:23:81:41:f5:1e:75:68:d5:7f:19:f6:83:ea:
a9:30:c4:9d:13:d7:e2:c7:72:90:f2:c8:bd:21:5c:
c0:d3:7b:f6:30:6f:8c:25:50:bb:16:e7:3a:8d:10:
63:ac:d6:38:e2:bb:91:3d:7a:22:27:7d:e1:63:87:
02:14:4d:e4:64:dc:f0:aa:4a:72:89:eb:d5:12:0a:
d3:df:02:b4:53:4e:f4:d3:28:55:48:b3:e1:50:dc:
2c:8e:aa:15:83:d8:6c:25:dd:cd:4c:a6:fa:d8:1e:
54:64:a0:88:d0:a8:d6:3b:3c:e8:c4:58:62:1c:53:
8c:c0:5b:48:a4:ce:4d:69:53:1d:14:13:ce:33:a0:
af:e9:61:80:f2:36:4a:9d:8d:cd:3d:71:e4:88:69:
90:fa:ff:8b:88:6f:6b:07:8f:e5:c1:d8:66:1f:66:
e6:3d:50:9b:61:63:01:0e:cc:9e:f8:18:70:a6:0f:
2d:a0:d8:82:5e:d9:81:0e:a6:08:92:1a:c5:3a:50:
e8:fb:4c:cf:b6:e7:5d:a8:3b:84:d6:2c:de:1b:51:
18:96:28:d2:dd:c0:e1:65:4b:3b:22:87:4b:42:03:
14:07:8d:47:bf:b4:8f:d8:7b:52:b8:f3:e4:20:33:
dc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7E:38:34:87:04:8C:00:FA:3D:9D:76:38:20:CF:A4:FF:89:8A:FE
X509v3 Authority Key Identifier:
keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/EX44NIcEjAD6PZ12OCDPpP-Jiv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.221.0.0/17
82.221.161.0-82.221.162.255
82.221.165.0-82.221.166.255
212.30.224.0/19
IPv6:
2a02:f48::/40
2a02:f48:2100::/40
Signature Algorithm: sha256WithRSAEncryption
68:ff:0d:f9:f0:04:85:d6:f1:c2:13:77:32:10:6b:ab:63:e7:
20:eb:33:c2:da:db:aa:85:65:0b:04:ce:5b:31:88:b5:90:58:
1f:c8:cd:57:d5:f1:69:b9:25:3f:2a:04:74:40:dd:24:18:60:
3c:fd:3d:0d:6a:c2:c2:b2:f1:b3:5f:69:2c:28:58:1e:4f:c7:
95:8c:f5:82:56:29:2d:ef:2f:1c:c2:e9:53:40:fa:fc:89:09:
93:81:63:48:b4:27:b2:0f:ec:4b:9c:b9:77:0d:82:83:a0:98:
25:34:0c:66:9f:2d:b6:9a:56:b7:82:60:41:a2:a5:16:72:44:
11:e7:b0:07:6c:bf:d5:60:45:03:47:f3:f3:15:fc:b8:f9:5c:
b4:85:85:e5:ca:a4:e7:54:b4:70:21:80:65:5b:a0:f7:1e:66:
53:ad:ac:c7:3c:4f:54:bd:a5:4c:6d:5e:7f:14:db:77:0b:6f:
f1:f3:a3:60:79:78:d8:23:40:cf:9c:49:a1:11:a1:b9:78:54:
83:0c:1c:e3:c0:29:35:25:9d:d4:c0:b6:26:89:94:4e:2a:8a:
31:43:16:5f:45:fe:e1:e3:01:a7:9d:f0:6b:16:20:b7:fa:4a:
25:41:bb:38:fc:ea:27:25:5f:bc:ae:85:46:1f:a2:ea:64:3f:
c8:37:11:87
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAY+rSkXrBFH1RTZ1kbt397hCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwODAyNWM3ZGUwNDAwZTBmM2M4OGQ0YTEyMmEzMTdlMzJj
NWUyMWMwHhcNMjQwNTI0MTU0ODQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTdlMzgzNDg3MDQ4YzAwZmEzZDlkNzYzODIwY2ZhNGZmODk4YWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFvmnpkHc2JYMiIzrVz/TSOBQfUe
dWjVfxn2g+qpMMSdE9fix3KQ8si9IVzA03v2MG+MJVC7Fuc6jRBjrNY44ruRPXoi
J33hY4cCFE3kZNzwqkpyievVEgrT3wK0U0700yhVSLPhUNwsjqoVg9hsJd3NTKb6
2B5UZKCI0KjWOzzoxFhiHFOMwFtIpM5NaVMdFBPOM6Cv6WGA8jZKnY3NPXHkiGmQ
+v+LiG9rB4/lwdhmH2bmPVCbYWMBDsye+Bhwpg8toNiCXtmBDqYIkhrFOlDo+0zP
tuddqDuE1izeG1EYlijS3cDhZUs7IodLQgMUB41Hv7SP2HtSuPPkIDPc6QIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFBF+ODSHBIwA+j2ddjggz6T/iYr+MB8GA1UdIwQY
MBaAFECAJcfeBADg88iNShIqMX4yxeIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy81OTMwM2QtNzQ4YS00Nzk3LTgxMWUt
ZmVlMmU4ZDQwODRmLzEvRVg0NE5JY0VqQUQ2UFoxMk9DRFBwUC1KaXY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy81OTMwM2QtNzQ4YS00Nzk3LTgxMWUtZmVlMmU4ZDQwODRm
LzEvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAuBAIAATAoAwQHUt0AMAwD
BABS3aEDBABS3aIwDAMEAFLdpQMEAFLdpgMEBdQe4DAWBAIAAjAQAwYAKgIPSAAD
BgAqAg9IITANBgkqhkiG9w0BAQsFAAOCAQEAaP8N+fAEhdbxwhN3MhBrq2PnIOsz
wtrbqoVlCwTOWzGItZBYH8jNV9XxabklPyoEdEDdJBhgPP09DWrCwrLxs19pLChY
Hk/HlYz1glYpLe8vHMLpU0D6/IkJk4FjSLQnsg/sS5y5dw2Cg6CYJTQMZp8ttppW
t4JgQaKlFnJEEeewB2y/1WBFA0fz8xX8uPlctIWF5cqk51S0cCGAZVug9x5mU62s
xzxPVL2lTG1efxTbdwtv8fOjYHl42CNAz5xJoRGhuXhUgwwc48ApNSWd1MC2JomU
TiqKMUMWX0X+4eMBp53waxYgt/pKJUG7OPzqJyVfvK6FRh+i6mQ/yDcRhw==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:46:50 2024 by rpki-client on console-ams.rpki-client.org