Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/kn-yh8dX8qBKa3xX6zhDDhK2wyo.roa
File: kn-yh8dX8qBKa3xX6zhDDhK2wyo.roa (raw, json)
Hash identifier: AUWvLhdWpyFyPe2fqJwIUrK4cLD9wZbDF08v9sq1360=
Subject key identifier: 92:7F:B2:87:C7:57:F2:A0:4A:6B:7C:57:EB:38:43:0E:12:B6:C3:2A
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018CC26D69EF3D422BEAC562CCF0BF77AD27
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/kn-yh8dX8qBKa3xX6zhDDhK2wyo.roa
Signing time: Mon 01 Jan 2024 00:29:59 +0000
ROA not before: Mon 01 Jan 2024 00:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207371
IP address blocks: 77.85.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:69:ef:3d:42:2b:ea:c5:62:cc:f0:bf:77:ad:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 00:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=927fb287c757f2a04a6b7c57eb38430e12b6c32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b9:ae:e7:0b:7c:55:6c:d3:86:9e:35:f1:ad:
a5:a5:36:47:33:14:4e:71:95:06:c3:81:7d:8b:5b:
2d:c0:cc:c7:f3:d3:5e:9d:86:a0:38:ca:d1:96:30:
1f:70:1c:f0:9f:96:51:c6:67:77:78:9c:60:27:91:
09:42:87:9f:c2:30:e4:95:96:eb:88:78:68:6e:2d:
03:3e:aa:64:df:9c:fd:9c:31:cb:ba:3b:52:2e:78:
37:c2:5d:92:ac:c5:55:69:bf:a9:e4:3f:68:7d:34:
d9:75:00:1c:75:05:52:43:ec:60:3c:93:4d:20:c7:
5c:84:99:a7:72:17:85:4b:4a:7d:9d:61:90:07:f7:
c7:69:14:7c:e9:ca:20:8a:18:0e:02:97:c9:d0:a5:
28:4b:7f:51:ad:e5:bc:e5:b6:e4:19:fc:eb:75:35:
38:98:66:94:ad:b2:12:66:b4:39:bb:19:9d:e0:07:
cb:17:5c:1a:a4:73:be:cf:11:b5:cb:a8:e1:1b:f8:
4f:fd:9c:ee:69:98:cb:c0:37:70:3d:a0:fc:df:1e:
15:8e:72:26:66:c0:c1:a4:b0:2b:d8:85:71:81:22:
5f:7c:1c:59:64:8a:39:93:cf:80:41:2a:14:d7:ef:
b5:46:7f:63:9d:8b:a6:02:e2:47:24:9a:d5:d4:4d:
77:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7F:B2:87:C7:57:F2:A0:4A:6B:7C:57:EB:38:43:0E:12:B6:C3:2A
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/kn-yh8dX8qBKa3xX6zhDDhK2wyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.85.171.0/24
Signature Algorithm: sha256WithRSAEncryption
30:1c:9c:96:5c:c6:c2:25:05:75:8b:6f:83:ae:e4:95:0e:5a:
04:80:3a:1b:d7:b4:04:9a:f2:61:09:8d:91:48:d0:ae:ba:bd:
95:14:2a:91:bd:46:74:5e:9c:42:b8:cc:85:3b:dc:d7:bd:f3:
27:ce:b7:0d:66:80:60:9d:4b:85:b9:69:55:31:5f:85:8d:fa:
df:5b:eb:c2:62:98:38:94:e5:ba:03:f5:85:1f:00:86:a9:e4:
c1:3e:2b:74:43:1d:77:dd:5b:29:c3:a8:e3:a5:bc:1e:61:c3:
7b:49:44:d7:6d:ed:d5:92:6c:1b:31:f6:8f:de:6a:a8:2c:96:
e1:fd:e1:6a:47:b1:19:be:66:7d:ad:c3:89:0f:b3:58:70:00:
95:0b:61:19:f1:70:9a:b6:86:82:a4:7e:61:24:5f:b9:6d:ef:
ae:6b:d4:d1:c6:af:0c:fd:55:f6:9e:c2:3f:1f:39:81:57:87:
01:d3:d8:f3:4d:b6:bc:55:f9:df:8f:7b:56:d1:8e:42:9a:bd:
a5:17:10:ab:e9:3e:63:9a:63:5c:24:c2:31:db:7a:02:1c:20:
22:96:47:34:b9:ea:05:e5:8f:45:23:47:63:cf:cf:a9:a0:40:
82:e5:68:ff:08:09:3b:4e:d1:b8:2d:14:ec:24:0a:ac:c0:bb:
96:5f:6d:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbWnvPUIr6sVizPC/d60nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjQwMTAxMDAyOTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjdmYjI4N2M3NTdmMmEwNGE2YjdjNTdlYjM4NDMwZTEyYjZjMzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7mu5wt8VWzThp418a2lpTZHMxRO
cZUGw4F9i1stwMzH89NenYagOMrRljAfcBzwn5ZRxmd3eJxgJ5EJQoefwjDklZbr
iHhobi0DPqpk35z9nDHLujtSLng3wl2SrMVVab+p5D9ofTTZdQAcdQVSQ+xgPJNN
IMdchJmncheFS0p9nWGQB/fHaRR86cogihgOApfJ0KUoS39RreW85bbkGfzrdTU4
mGaUrbISZrQ5uxmd4AfLF1wapHO+zxG1y6jhG/hP/ZzuaZjLwDdwPaD83x4VjnIm
ZsDBpLAr2IVxgSJffBxZZIo5k8+AQSoU1++1Rn9jnYumAuJHJJrV1E13qwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJJ/sofHV/KgSmt8V+s4Qw4StsMqMB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEva24teWg4ZFg4cUJLYTN4WDZ6aEREaEsyd3lvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVWrMA0G
CSqGSIb3DQEBCwUAA4IBAQAwHJyWXMbCJQV1i2+DruSVDloEgDob17QEmvJhCY2R
SNCuur2VFCqRvUZ0XpxCuMyFO9zXvfMnzrcNZoBgnUuFuWlVMV+FjfrfW+vCYpg4
lOW6A/WFHwCGqeTBPit0Qx133Vspw6jjpbweYcN7SUTXbe3VkmwbMfaP3mqoLJbh
/eFqR7EZvmZ9rcOJD7NYcACVC2EZ8XCatoaCpH5hJF+5be+ua9TRxq8M/VX2nsI/
HzmBV4cB09jzTba8Vfnfj3tW0Y5Cmr2lFxCr6T5jmmNcJMIx23oCHCAilkc0ueoF
5Y9FI0djz8+poECC5Wj/CAk7TtG4LRTsJAqswLuWX20G
-----END CERTIFICATE-----
Generated at Mon Jun 24 12:11:17 2024 by rpki-client on console-ams.rpki-client.org