Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/1-IKn6hru-Vwt11SD0r5FnCDg7_0.roa
File: 1-IKn6hru-Vwt11SD0r5FnCDg7_0.roa (raw, json)
Hash identifier: dt+/ruy0xTGPOHq4himiGyFCNZLRd+UGm0eAWfC03PM=
Subject key identifier: F8:82:A7:EA:1A:EE:F9:5C:2D:D7:54:83:D2:BE:45:9C:20:E0:EF:FD
Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Certificate serial: 018CC26D836D80049C16D0890EAC52BC1486
Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/1-IKn6hru-Vwt11SD0r5FnCDg7_0.roa
Signing time: Mon 01 Jan 2024 00:30:05 +0000
ROA not before: Mon 01 Jan 2024 00:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43586
IP address blocks: 78.24.75.0/24 maxlen: 24
78.24.76.0/24 maxlen: 24
78.24.77.0/24 maxlen: 24
78.24.72.0/24 maxlen: 24
78.24.78.0/24 maxlen: 24
2a00:1908:e47::/48 maxlen: 48
2a00:1908:6000::/35 maxlen: 35
2a00:1908:8000::/35 maxlen: 35
2a00:1908::/35 maxlen: 35
2a00:1908:2000::/35 maxlen: 35
2a00:1908:4000::/35 maxlen: 35
2a00:1908:c000::/35 maxlen: 35
2a00:1908:a000::/35 maxlen: 35
2a00:1908:d000::/36 maxlen: 36
2a00:1908:c000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 07:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:83:6d:80:04:9c:16:d0:89:0e:ac:52:bc:14:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Validity
Not Before: Jan 1 00:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f882a7ea1aeef95c2dd75483d2be459c20e0effd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bb:70:ab:ca:ce:d2:17:20:1f:26:60:36:9c:
54:1b:f8:63:9b:c1:ae:d7:99:f5:86:3e:9d:d0:3a:
76:5f:05:7f:69:60:13:56:d6:6f:ca:84:5a:6e:b6:
8b:36:bc:a4:7c:a8:b8:e6:eb:23:4d:91:2d:68:38:
e6:92:31:5e:75:30:e6:dd:88:93:c7:f2:f5:88:f7:
12:4e:6e:c6:b9:c1:39:33:2e:11:56:1f:2a:10:fd:
07:da:c4:a8:64:09:bf:2b:84:b2:18:1f:8c:07:ff:
d2:4c:be:87:37:7d:f5:2b:87:61:f0:1a:5a:bf:0f:
41:04:c2:ee:e6:1c:97:17:9f:0a:17:0d:d5:11:6c:
84:a4:b7:d4:2f:2b:d3:60:1f:0c:4f:93:e8:50:66:
d8:d5:b1:c2:68:58:21:9e:a9:df:2d:87:c5:3e:9c:
b1:03:35:1d:ad:bc:09:0f:f3:2c:68:e7:f6:8a:db:
56:19:ce:43:ef:e5:80:77:b1:57:14:c1:4d:1b:61:
45:6b:5b:b2:16:0c:53:d5:1e:84:01:70:31:b6:4a:
a0:a2:4e:38:13:c1:95:cf:45:1f:a9:17:8b:ea:c0:
b4:2a:20:9f:ae:1e:78:68:76:93:66:77:8b:63:a9:
da:3b:b2:20:0d:3f:46:a1:ac:aa:93:52:93:fa:f0:
70:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:82:A7:EA:1A:EE:F9:5C:2D:D7:54:83:D2:BE:45:9C:20:E0:EF:FD
X509v3 Authority Key Identifier:
keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/1-IKn6hru-Vwt11SD0r5FnCDg7_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.72.0/24
78.24.75.0-78.24.78.255
IPv6:
2a00:1908::-2a00:1908:dfff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
78:dd:b3:0e:ba:f3:a1:d0:79:aa:10:1c:a3:c9:81:b2:e4:4a:
72:78:c9:55:e5:78:a5:85:c1:c1:54:51:33:e6:d9:2d:77:ec:
df:7d:b0:12:e4:35:b8:f0:12:03:12:61:a9:17:69:15:39:06:
c5:60:47:bf:38:ac:de:24:c4:dc:2f:5a:b5:51:db:c7:81:e3:
d8:cf:b3:6f:c3:d1:88:bd:bd:4f:f8:ce:79:7d:cf:92:fb:fe:
f5:64:03:1f:1e:aa:02:d8:45:2b:6b:0a:b3:fc:db:c8:0f:50:
de:e0:af:c5:0b:10:df:40:67:21:d6:9d:a2:8d:63:06:61:5a:
f1:62:65:7e:77:60:c1:6c:02:50:a4:14:e0:3a:b0:88:5d:7a:
11:8e:2c:8b:44:eb:9b:e1:81:6c:12:0e:52:c7:4d:51:52:d8:
c8:61:d6:3c:9d:4e:ba:b5:be:5f:8d:61:8d:86:78:45:a3:a8:
63:01:51:dd:9b:0c:75:68:ad:db:01:4d:ea:d0:4d:4a:8e:05:
89:5e:4e:6e:6d:fd:a6:c6:04:d3:1a:37:99:b2:c4:41:2c:03:
02:c2:2a:e6:d9:09:b0:c5:b0:f3:79:9a:56:ec:da:49:26:76:
ee:73:c1:ad:57:d1:7c:b6:54:34:00:ac:da:db:04:d9:96:03:
bb:63:35:69
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAYzCbYNtgAScFtCJDqxSvBSGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZTQ0OGI0YTA4ZjBlNGM1OGEyODNkODA3MzVhOGE4MDNl
MTBkNGUwHhcNMjQwMTAxMDAzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODgyYTdlYTFhZWVmOTVjMmRkNzU0ODNkMmJlNDU5YzIwZTBlZmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbtwq8rO0hcgHyZgNpxUG/hjm8Gu
15n1hj6d0Dp2XwV/aWATVtZvyoRabraLNrykfKi45usjTZEtaDjmkjFedTDm3YiT
x/L1iPcSTm7GucE5My4RVh8qEP0H2sSoZAm/K4SyGB+MB//STL6HN331K4dh8Bpa
vw9BBMLu5hyXF58KFw3VEWyEpLfULyvTYB8MT5PoUGbY1bHCaFghnqnfLYfFPpyx
AzUdrbwJD/MsaOf2ittWGc5D7+WAd7FXFMFNG2FFa1uyFgxT1R6EAXAxtkqgok44
E8GVz0UfqReL6sC0KiCfrh54aHaTZneLY6naO7IgDT9Goayqk1KT+vBwkwIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFPiCp+oa7vlcLddUg9K+RZwg4O/9MB8GA1UdIwQY
MBaAFLLkSLSgjw5MWKKD2Ac1qKgD4Q1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3VSSXRLQ1BEa3hZb29QWUJ6V29xQVBoRFU0LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hNzA2OGEtOTJiYS00MmVhLTk5NjYt
MjA1NGQ0ZTkwM2JjLzEvMS1JS242aHJ1LVZ3dDExU0QwcjVGbkNEZzdfMC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYTgvYTcwNjhhLTkyYmEtNDJlYS05OTY2LTIwNTRkNGU5MDNi
Yy8xL3N1Ukl0S0NQRGt4WW9vUFlCeldvcUFQaERVNC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBGBggrBgEFBQcBBwEB/wQ3MDUwGgQCAAEwFAMEAE4YSDAM
AwQAThhLAwQAThhOMBcEAgACMBEwDwMFAyoAGQgDBgUqABkIwDANBgkqhkiG9w0B
AQsFAAOCAQEAeN2zDrrzodB5qhAco8mBsuRKcnjJVeV4pYXBwVRRM+bZLXfs332w
EuQ1uPASAxJhqRdpFTkGxWBHvzis3iTE3C9atVHbx4Hj2M+zb8PRiL29T/jOeX3P
kvv+9WQDHx6qAthFK2sKs/zbyA9Q3uCvxQsQ30BnIdadoo1jBmFa8WJlfndgwWwC
UKQU4DqwiF16EY4si0Trm+GBbBIOUsdNUVLYyGHWPJ1OurW+X41hjYZ4RaOoYwFR
3ZsMdWit2wFN6tBNSo4FiV5Obm39psYE0xo3mbLEQSwDAsIq5tkJsMWw83maVuza
SSZ27nPBrVfRfLZUNACs2tsE2ZYDu2M1aQ==
-----END CERTIFICATE-----
Generated at Mon Jul 1 10:45:29 2024 by rpki-client on console-ams.rpki-client.org