Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/0uuOdlt_xNgYwMVhpQMcQjzBbyQ.roa
File: 0uuOdlt_xNgYwMVhpQMcQjzBbyQ.roa (raw, json)
Hash identifier: zKyTe4bYYEvd1L3VcY53uqgFRv0kEqW2oaoBtYgHNxw=
Subject key identifier: D2:EB:8E:76:5B:7F:C4:D8:18:C0:C5:61:A5:03:1C:42:3C:C1:6F:24
Certificate issuer: /CN=30683cffa061f28a9e1135c9fc30376a6474cbf4
Certificate serial: 018CC5DC7A8DC48B87CE0FC1A00767617376
Authority key identifier: 30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/0uuOdlt_xNgYwMVhpQMcQjzBbyQ.roa
Signing time: Mon 01 Jan 2024 16:30:10 +0000
ROA not before: Mon 01 Jan 2024 16:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8426
IP address blocks: 213.221.64.0/18 maxlen: 18
62.80.62.0/24 maxlen: 24
195.170.96.0/19 maxlen: 19
212.66.0.0/19 maxlen: 19
212.82.224.0/19 maxlen: 19
62.24.0.0/19 maxlen: 19
62.80.0.0/18 maxlen: 18
62.176.128.0/19 maxlen: 19
195.38.128.0/19 maxlen: 19
212.6.128.0/17 maxlen: 17
2a00:1798::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:7a:8d:c4:8b:87:ce:0f:c1:a0:07:67:61:73:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30683cffa061f28a9e1135c9fc30376a6474cbf4
Validity
Not Before: Jan 1 16:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2eb8e765b7fc4d818c0c561a5031c423cc16f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:27:6d:18:93:7e:95:99:78:bc:12:48:cb:a6:
fb:53:77:95:b5:65:b6:0e:91:d1:7a:7e:de:a0:b8:
c2:f9:09:a6:79:e1:b8:01:49:65:19:48:8d:c4:cf:
42:43:bb:ef:3c:ce:7d:3a:01:74:f9:75:2c:3a:5c:
4b:10:56:30:2e:e2:bb:29:6f:7d:03:fb:08:49:68:
dc:27:f3:c5:f3:fa:98:13:2e:37:2a:cd:cb:a9:c1:
34:ec:dc:5c:f6:37:e1:26:c5:ee:cb:e7:79:80:00:
99:70:f1:d2:7b:98:09:11:ab:e4:a0:9a:b9:62:73:
a4:0b:4c:69:8c:da:c0:47:f4:10:57:ce:ef:6a:a0:
e6:78:61:f5:1a:22:ea:7c:9b:0f:dc:b7:9e:0e:6c:
50:30:bf:3c:d9:39:4e:af:89:d0:89:38:5e:e3:f8:
5f:82:f7:6a:50:43:91:de:28:c8:14:cf:86:be:5d:
47:61:fb:5f:25:83:e7:74:5e:f0:03:15:67:7a:7b:
5a:7e:11:a6:7b:fe:a0:46:95:43:e5:94:cb:75:66:
49:63:ec:b9:7e:d1:1e:2b:ef:98:0d:27:f3:1f:92:
2f:a4:5e:fc:cb:45:b9:0b:d9:d6:87:52:b5:3e:cf:
80:68:3e:dd:29:40:52:6c:ec:dc:13:68:6d:fd:39:
6d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EB:8E:76:5B:7F:C4:D8:18:C0:C5:61:A5:03:1C:42:3C:C1:6F:24
X509v3 Authority Key Identifier:
keyid:30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/0uuOdlt_xNgYwMVhpQMcQjzBbyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.24.0.0/19
62.80.0.0/18
62.176.128.0/19
195.38.128.0/19
195.170.96.0/19
212.6.128.0/17
212.66.0.0/19
212.82.224.0/19
213.221.64.0/18
IPv6:
2a00:1798::/32
Signature Algorithm: sha256WithRSAEncryption
20:02:d3:58:8e:94:a9:aa:b8:99:9f:3f:e2:42:83:0b:c3:65:
57:8a:88:f1:2b:0a:7b:d0:85:4f:0c:6b:5a:c8:c4:db:85:fa:
bd:ef:0a:55:94:95:bf:e6:ce:a5:22:91:ca:2f:20:4a:ab:55:
f4:95:3c:73:a6:85:33:36:6f:b8:27:dd:94:82:41:0f:6a:7d:
d1:5d:a7:43:1f:c5:27:4f:bd:2a:7c:2c:ad:69:1c:ee:b5:78:
f8:0c:3f:96:0f:2b:14:9e:29:96:f0:77:07:5b:c1:db:57:2d:
38:ff:7c:65:9f:12:ea:c2:6a:09:79:db:01:cf:08:97:ed:57:
ce:28:3a:14:00:6f:27:c6:c9:55:4b:00:ff:14:04:81:ec:2c:
f3:63:cf:f6:72:6a:08:9c:29:97:b6:0e:88:6e:bb:7e:30:a4:
81:a5:a9:01:cd:4e:8b:f3:92:32:62:9b:b4:e8:d8:50:c6:de:
88:29:f1:15:4a:63:3e:bd:84:44:cc:46:ff:7f:ff:3c:92:94:
6d:43:05:9e:13:d1:19:9c:71:1d:14:98:ac:5e:f4:75:7c:0b:
09:92:ba:40:b6:33:ae:12:20:80:a7:dd:67:4e:c0:89:b2:9e:
a7:dc:b8:1c:25:e7:48:14:b7:da:26:61:fe:bf:18:ca:c8:fc:
5b:7c:4f:cd
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAYzF3HqNxIuHzg/BoAdnYXN2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNjgzY2ZmYTA2MWYyOGE5ZTExMzVjOWZjMzAzNzZhNjQ3
NGNiZjQwHhcNMjQwMTAxMTYzMDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmViOGU3NjViN2ZjNGQ4MThjMGM1NjFhNTAzMWM0MjNjYzE2ZjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSdtGJN+lZl4vBJIy6b7U3eVtWW2
DpHRen7eoLjC+QmmeeG4AUllGUiNxM9CQ7vvPM59OgF0+XUsOlxLEFYwLuK7KW99
A/sISWjcJ/PF8/qYEy43Ks3LqcE07Nxc9jfhJsXuy+d5gACZcPHSe5gJEavkoJq5
YnOkC0xpjNrAR/QQV87vaqDmeGH1GiLqfJsP3LeeDmxQML882TlOr4nQiThe4/hf
gvdqUEOR3ijIFM+Gvl1HYftfJYPndF7wAxVnentafhGme/6gRpVD5ZTLdWZJY+y5
ftEeK++YDSfzH5IvpF78y0W5C9nWh1K1Ps+AaD7dKUBSbOzcE2ht/TltlwIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFNLrjnZbf8TYGMDFYaUDHEI8wW8kMB8GA1UdIwQY
MBaAFDBoPP+gYfKKnhE1yfwwN2pkdMv0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUdnOF82Qmg4b3FlRVRYSl9EQTNhbVIweV9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wMWY2ZWQtN2I4Ni00Zjc2LTgyOGYt
NGUxOTIzOWYwYzM1LzEvMHV1T2RsdF94TmdZd01WaHBRTWNRanpCYnlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8wMWY2ZWQtN2I4Ni00Zjc2LTgyOGYtNGUxOTIzOWYwYzM1
LzEvTUdnOF82Qmg4b3FlRVRYSl9EQTNhbVIweV9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQFPhgAAwQG
PlAAAwQFPrCAAwQFwyaAAwQFw6pgAwQH1AaAAwQF1EIAAwQF1FLgAwQG1d1AMA0E
AgACMAcDBQAqABeYMA0GCSqGSIb3DQEBCwUAA4IBAQAgAtNYjpSpqriZnz/iQoML
w2VXiojxKwp70IVPDGtayMTbhfq97wpVlJW/5s6lIpHKLyBKq1X0lTxzpoUzNm+4
J92UgkEPan3RXadDH8UnT70qfCytaRzutXj4DD+WDysUnimW8HcHW8HbVy04/3xl
nxLqwmoJedsBzwiX7VfOKDoUAG8nxslVSwD/FASB7CzzY8/2cmoInCmXtg6Ibrt+
MKSBpakBzU6L85IyYpu06NhQxt6IKfEVSmM+vYREzEb/f/88kpRtQwWeE9EZnHEd
FJisXvR1fAsJkrpAtjOuEiCAp91nTsCJsp6n3LgcJedIFLfaJmH+vxjKyPxbfE/N
-----END CERTIFICATE-----
Generated at Sun Jun 2 05:01:57 2024 by rpki-client on console-fra.rpki-client.org