Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/BxyJbnzf2UZJQQhNQkBeaR9vzO0.roa
File: BxyJbnzf2UZJQQhNQkBeaR9vzO0.roa (raw, json)
Hash identifier: AXhYf7jWQjxF4uQyIZ1+gzKiw79bUT3Bi2rOWLo4sBI=
Subject key identifier: 07:1C:89:6E:7C:DF:D9:46:49:41:08:4D:42:40:5E:69:1F:6F:CC:ED
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 018CC9BC9096EADD08A95272E276DB015DBF
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/BxyJbnzf2UZJQQhNQkBeaR9vzO0.roa
Signing time: Tue 02 Jan 2024 10:33:47 +0000
ROA not before: Tue 02 Jan 2024 10:33:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44568
IP address blocks: 83.217.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:90:96:ea:dd:08:a9:52:72:e2:76:db:01:5d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Jan 2 10:33:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=071c896e7cdfd9464941084d42405e691f6fcced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3a:93:24:b8:77:9f:97:19:4a:b5:bb:3c:80:
b3:d7:16:29:21:92:42:fa:f3:4f:3a:82:b5:41:b3:
17:6b:12:bd:04:bb:cd:e6:b3:1a:5a:6c:a1:3c:ef:
4c:c1:3f:2f:7f:1f:dd:f1:59:13:09:be:3f:f9:1a:
49:e6:86:87:8e:8c:12:f9:74:02:c9:fc:64:48:96:
c4:06:62:e7:18:aa:84:90:22:84:30:2e:2b:37:62:
44:25:f3:54:f9:d6:39:36:04:cb:84:97:d9:5a:3f:
4a:d1:59:fb:f3:53:a1:67:c6:91:b1:c0:4d:bf:39:
09:d6:24:03:38:a3:1d:dd:7f:31:22:47:24:ea:4b:
8c:70:98:38:ca:98:e7:3b:5d:2c:43:85:29:4e:ef:
5f:79:3b:46:92:bb:4c:88:bd:ca:be:e2:b2:60:35:
c9:9f:22:3c:ab:bf:88:a6:a2:e3:1d:37:9b:29:09:
98:56:75:05:d3:23:dc:d8:67:92:ae:db:b8:f8:2d:
2d:df:29:d8:75:da:0b:2d:91:78:e7:83:93:38:f5:
ce:de:9f:0a:ac:66:09:3a:ad:ce:7a:4d:a9:47:a8:
dc:29:8e:d5:3b:b2:18:10:8a:6f:3c:bb:d8:23:7a:
0a:f4:d6:8a:4e:0f:ba:77:6f:2c:62:b8:55:57:bb:
f0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1C:89:6E:7C:DF:D9:46:49:41:08:4D:42:40:5E:69:1F:6F:CC:ED
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/BxyJbnzf2UZJQQhNQkBeaR9vzO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.252.0/22
Signature Algorithm: sha256WithRSAEncryption
99:8a:45:5d:68:7f:fd:6b:29:86:7a:b4:ad:65:ce:9e:e0:a0:
fa:66:9e:46:c2:9f:24:5b:df:8a:d9:ad:45:f5:35:a2:5c:88:
82:c1:e0:37:4b:1f:8c:64:34:e2:be:2b:81:64:90:e3:96:6f:
85:b4:0a:be:b3:32:f3:71:90:15:e1:08:05:72:f6:38:92:de:
3c:ba:5c:2f:d5:d8:d8:19:89:97:bb:d8:a5:8c:b6:80:7a:e6:
e9:7e:88:56:9a:43:b0:3b:ad:7e:d7:b0:b7:42:fa:29:6a:42:
1c:57:60:6a:94:72:9b:91:ff:05:7e:80:0f:6e:c5:09:a3:59:
f0:cc:d0:f8:46:5b:e1:53:f6:41:8a:17:60:bc:d4:1d:c6:b4:
4b:e9:12:a2:98:c0:f2:ed:bf:a5:c4:b8:2d:02:10:02:98:45:
c5:ec:47:01:24:68:3d:09:df:1a:57:d5:7d:ed:4d:c7:aa:8c:
a9:b8:04:83:69:0d:71:88:1b:22:73:43:fa:ad:5a:6c:47:82:
5f:40:d6:ef:48:a1:83:a4:91:b1:f4:fd:78:1b:8d:78:fb:31:
cf:df:e8:87:05:c7:fd:46:88:34:7d:ec:f1:c1:75:0c:b4:97:
19:31:36:7e:c3:0f:74:64:3e:23:7b:61:31:93:2c:40:25:9d:
38:98:4b:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvJCW6t0IqVJy4nbbAV2/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4
ZDIyZmQwHhcNMjQwMTAyMTAzMzQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzFjODk2ZTdjZGZkOTQ2NDk0MTA4NGQ0MjQwNWU2OTFmNmZjY2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzqTJLh3n5cZSrW7PICz1xYpIZJC
+vNPOoK1QbMXaxK9BLvN5rMaWmyhPO9MwT8vfx/d8VkTCb4/+RpJ5oaHjowS+XQC
yfxkSJbEBmLnGKqEkCKEMC4rN2JEJfNU+dY5NgTLhJfZWj9K0Vn781OhZ8aRscBN
vzkJ1iQDOKMd3X8xIkck6kuMcJg4ypjnO10sQ4UpTu9feTtGkrtMiL3KvuKyYDXJ
nyI8q7+IpqLjHTebKQmYVnUF0yPc2GeSrtu4+C0t3ynYddoLLZF454OTOPXO3p8K
rGYJOq3Oek2pR6jcKY7VO7IYEIpvPLvYI3oK9NaKTg+6d28sYrhVV7vwOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAcciW5839lGSUEITUJAXmkfb8ztMB8GA1UdIwQY
MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt
NzgwYTI1Y2QwZGQ5LzEvQnh5SmJuemYyVVpKUVFoTlFrQmVhUjl2ek8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5
LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU9n8MA0G
CSqGSIb3DQEBCwUAA4IBAQCZikVdaH/9aymGerStZc6e4KD6Zp5Gwp8kW9+K2a1F
9TWiXIiCweA3Sx+MZDTiviuBZJDjlm+FtAq+szLzcZAV4QgFcvY4kt48ulwv1djY
GYmXu9iljLaAeubpfohWmkOwO61+17C3QvopakIcV2BqlHKbkf8FfoAPbsUJo1nw
zND4RlvhU/ZBihdgvNQdxrRL6RKimMDy7b+lxLgtAhACmEXF7EcBJGg9Cd8aV9V9
7U3HqoypuASDaQ1xiBsic0P6rVpsR4JfQNbvSKGDpJGx9P14G414+zHP3+iHBcf9
Rog0fezxwXUMtJcZMTZ+ww90ZD4je2ExkyxAJZ04mEsv
-----END CERTIFICATE-----
Generated at Mon May 20 04:54:02 2024 by rpki-client on console-ams.rpki-client.org