Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/L08F6cOP4t2Mg4QDlb5kEqDtx0U.roa
File: L08F6cOP4t2Mg4QDlb5kEqDtx0U.roa (raw, json)
Hash identifier: 72hgUCMg3VGXf9gRs3YUxCm6cJQOO4z0AHC+3Xx6OXk=
Subject key identifier: 2F:4F:05:E9:C3:8F:E2:DD:8C:83:84:03:95:BE:64:12:A0:ED:C7:45
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 018CC4254A31D94F39B4BC9329253BDB6A0F
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/L08F6cOP4t2Mg4QDlb5kEqDtx0U.roa
Signing time: Mon 01 Jan 2024 08:30:27 +0000
ROA not before: Mon 01 Jan 2024 08:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50349
IP address blocks: 217.11.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4a:31:d9:4f:39:b4:bc:93:29:25:3b:db:6a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: Jan 1 08:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f4f05e9c38fe2dd8c83840395be6412a0edc745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a4:59:19:23:eb:f7:1b:19:09:b8:15:43:89:
17:b7:60:e0:f2:55:30:56:9f:c7:14:fa:65:2c:f0:
a6:7a:aa:4f:90:6a:91:37:d3:cf:14:38:35:0b:04:
89:88:a2:f4:1f:4a:fb:f6:c0:a4:f5:0a:59:b0:c4:
a1:d5:5d:65:ed:3f:1a:9d:5b:62:dd:13:4a:e4:f8:
fb:42:36:f8:1b:cc:19:af:15:86:62:e2:c4:47:f8:
56:ed:9e:cb:c4:f9:50:18:d5:77:49:b1:89:f4:c1:
18:58:ae:6f:29:01:42:b4:fd:17:ac:65:26:f3:45:
cd:5d:0e:a6:bd:5d:5c:10:a4:f2:25:9b:06:c0:c5:
0f:06:b5:89:4a:a9:94:03:dc:c3:94:78:54:af:f1:
ff:23:95:ad:25:7e:db:0b:00:7f:b7:58:31:1c:ec:
be:43:37:79:3c:c9:0a:34:21:88:b8:e9:ea:74:b0:
92:c4:ab:ea:71:36:72:6d:96:c8:2c:d9:c4:d2:f9:
52:2f:2d:90:a7:b4:45:3b:2c:ec:3d:df:57:9a:74:
97:44:a4:46:54:5b:7b:cc:f0:49:0e:85:c7:d1:fe:
f6:d2:15:e3:9c:34:b6:d8:fd:c1:e9:ab:08:06:ee:
44:e1:37:1e:15:09:10:a3:fc:c9:2f:45:02:e3:dd:
53:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4F:05:E9:C3:8F:E2:DD:8C:83:84:03:95:BE:64:12:A0:ED:C7:45
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/L08F6cOP4t2Mg4QDlb5kEqDtx0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.11.128.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:2d:cb:14:46:17:e7:a5:67:12:ab:17:39:03:f2:69:f5:4e:
0c:63:b9:c6:ea:92:cb:61:05:6e:99:dc:5b:73:76:5c:c8:0e:
3a:4c:ca:bb:81:30:36:09:a4:4a:03:ea:33:0e:27:13:a7:35:
44:22:32:73:8e:d8:62:dd:f7:9b:5a:34:35:ba:a6:7a:a8:b2:
26:b0:86:76:77:4a:fa:66:d6:bc:3b:cb:db:fa:00:df:14:f1:
f8:87:2a:7d:16:93:ef:68:d3:50:be:5f:59:cf:60:20:45:3d:
0b:fa:09:0d:f2:76:59:a3:8f:54:b3:c0:fc:16:3c:ae:21:3c:
3a:84:8c:76:82:24:b6:35:06:fd:13:2e:8f:d4:6a:91:db:5a:
47:32:be:d5:77:48:70:b2:9a:7f:02:36:d1:e3:89:42:aa:24:
6a:ec:cc:35:89:89:b5:47:08:b5:73:dd:6d:ac:b6:ee:2b:70:
f2:b3:9b:91:95:d8:87:9a:e1:9c:cd:2d:c8:86:95:a1:5c:96:
32:d6:1b:3d:a3:8d:19:9c:a7:88:46:f1:e0:d8:b9:c3:ea:38:
39:24:bc:f1:77:d7:5a:b8:a4:ca:f1:e5:0b:a2:d1:88:da:5c:
2c:38:5d:f2:66:af:ce:cd:e5:79:b1:d2:38:0c:84:34:48:c7:
e2:02:b8:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJUox2U85tLyTKSU722oPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMGExMjMxZDFjMjdhNzU0ZTQ2ZWYxMGU5MmE3MzBhZTE1
ZDBmNTUwHhcNMjQwMTAxMDgzMDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjRmMDVlOWMzOGZlMmRkOGM4Mzg0MDM5NWJlNjQxMmEwZWRjNzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaRZGSPr9xsZCbgVQ4kXt2Dg8lUw
Vp/HFPplLPCmeqpPkGqRN9PPFDg1CwSJiKL0H0r79sCk9QpZsMSh1V1l7T8anVti
3RNK5Pj7Qjb4G8wZrxWGYuLER/hW7Z7LxPlQGNV3SbGJ9MEYWK5vKQFCtP0XrGUm
80XNXQ6mvV1cEKTyJZsGwMUPBrWJSqmUA9zDlHhUr/H/I5WtJX7bCwB/t1gxHOy+
Qzd5PMkKNCGIuOnqdLCSxKvqcTZybZbILNnE0vlSLy2Qp7RFOyzsPd9XmnSXRKRG
VFt7zPBJDoXH0f720hXjnDS22P3B6asIBu5E4TceFQkQo/zJL0UC491TVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC9PBenDj+LdjIOEA5W+ZBKg7cdFMB8GA1UdIwQY
MBaAFHAKEjHRwnp1TkbvEOkqcwrhXQ9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgt
YWI3OWEzNzg5ZjhmLzEvTDA4RjZjT1A0dDJNZzRRRGxiNWtFcUR0eDBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgtYWI3OWEzNzg5Zjhm
LzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2QuAMA0G
CSqGSIb3DQEBCwUAA4IBAQB/LcsURhfnpWcSqxc5A/Jp9U4MY7nG6pLLYQVumdxb
c3ZcyA46TMq7gTA2CaRKA+ozDicTpzVEIjJzjthi3febWjQ1uqZ6qLImsIZ2d0r6
Zta8O8vb+gDfFPH4hyp9FpPvaNNQvl9Zz2AgRT0L+gkN8nZZo49Us8D8FjyuITw6
hIx2giS2NQb9Ey6P1GqR21pHMr7Vd0hwspp/AjbR44lCqiRq7Mw1iYm1Rwi1c91t
rLbuK3Dys5uRldiHmuGczS3IhpWhXJYy1hs9o40ZnKeIRvHg2LnD6jg5JLzxd9da
uKTK8eULotGI2lwsOF3yZq/OzeV5sdI4DIQ0SMfiAriw
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:52:05 2024 by rpki-client on console-fra.rpki-client.org