Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/9xzGsccraeCaP4X56bn0tcdnUxg.roa
File: 9xzGsccraeCaP4X56bn0tcdnUxg.roa (raw, json)
Hash identifier: f6Dtfa0OBaTmc6GObZzJLy0mNFlhIr8oaDIJu9Ui/NI=
Subject key identifier: F7:1C:C6:B1:C7:2B:69:E0:9A:3F:85:F9:E9:B9:F4:B5:C7:67:53:18
Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial: 018CC64B7D6487EBAC546E04CD9510E22EBE
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/9xzGsccraeCaP4X56bn0tcdnUxg.roa
Signing time: Mon 01 Jan 2024 18:31:25 +0000
ROA not before: Mon 01 Jan 2024 18:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210089
IP address blocks: 79.110.169.0/24 maxlen: 24
2a0d:1a45::/32 maxlen: 48
2a06:1e83:caff::/48 maxlen: 48
2a06:1e86:babe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:7d:64:87:eb:ac:54:6e:04:cd:95:10:e2:2e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Validity
Not Before: Jan 1 18:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f71cc6b1c72b69e09a3f85f9e9b9f4b5c7675318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e4:7b:ed:b9:8f:37:a2:ea:ae:9f:aa:17:81:
b6:8a:fb:e9:08:77:6c:38:67:b3:a8:18:af:da:20:
82:61:cd:8b:3d:02:68:a6:92:15:52:ee:e6:c5:6d:
5d:61:99:d2:e1:01:17:9c:23:8f:15:e9:63:a5:32:
f1:41:a3:21:ba:0f:71:1f:1c:8d:5b:fd:21:51:ce:
ef:3d:88:2f:c1:dd:35:48:d1:0b:5a:48:a7:9a:25:
4e:56:80:05:fe:4a:a5:b7:6f:cb:dc:6d:f5:09:4c:
40:a0:f6:51:79:2a:c6:a5:e4:21:e7:d9:07:e7:7c:
00:ad:0d:a2:cb:0b:a1:28:95:0d:f3:80:89:ae:65:
b0:8e:1d:21:66:28:60:68:90:d4:cb:d7:a5:e0:7a:
b6:d9:07:1a:fd:d4:dd:6d:06:4d:c6:dc:05:82:bc:
e1:95:88:a9:a0:65:08:d4:89:12:20:09:76:4b:65:
1d:cd:71:65:30:93:22:11:8b:89:af:e2:00:21:ed:
d5:cb:23:4f:a1:35:14:69:f6:6c:c3:1a:bb:61:8a:
7f:1a:4d:d8:4f:3d:ab:5f:97:7c:2c:e4:b7:e1:d1:
f5:37:c1:b1:2f:60:2c:cc:b9:9a:00:bd:b1:7f:8b:
36:72:1a:22:98:e4:db:43:42:71:fe:c0:03:98:60:
20:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1C:C6:B1:C7:2B:69:E0:9A:3F:85:F9:E9:B9:F4:B5:C7:67:53:18
X509v3 Authority Key Identifier:
keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/9xzGsccraeCaP4X56bn0tcdnUxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.169.0/24
IPv6:
2a06:1e83:caff::/48
2a06:1e86:babe::/48
2a0d:1a45::/32
Signature Algorithm: sha256WithRSAEncryption
3c:95:01:92:5f:2e:dd:32:f1:b3:fa:6e:98:99:29:8f:28:47:
58:6f:e9:03:45:18:b8:44:d9:29:7f:62:8b:d4:52:18:67:df:
81:05:01:18:e1:3d:95:fe:df:70:59:7f:32:b2:3f:fb:85:6c:
92:a2:26:b9:81:7c:f3:0c:dd:e6:92:21:33:0c:e2:a1:e3:06:
f1:b6:1c:a3:1f:e5:96:ad:a2:fc:95:00:a0:1d:71:17:8b:ac:
53:b4:90:bd:a2:d3:4f:79:6f:2c:93:5c:28:06:3a:77:4a:a2:
4a:df:03:f0:ec:c7:86:93:c3:82:f1:aa:09:07:94:39:c1:c8:
59:32:9b:61:fe:f3:52:15:4f:ac:30:7d:27:3e:39:88:69:8a:
c4:a9:77:14:66:a2:4a:58:7e:6a:7b:57:7c:8b:0b:0a:63:03:
e8:fa:e0:4d:f2:9f:80:16:05:97:63:9d:f6:a6:fd:1f:fb:36:
60:b0:68:00:8e:77:4e:0e:e4:78:c2:31:7d:42:98:5f:0b:4b:
e4:af:b7:c2:68:57:44:cc:c3:34:f8:27:cc:80:c4:5a:43:dc:
06:6f:73:58:ab:10:e8:c4:95:c0:9b:0c:fa:39:82:24:4c:ec:
a3:7c:5a:a4:4c:06:44:0d:23:45:c7:43:82:9b:95:d3:50:8f:
93:07:46:a1
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYzGS31kh+usVG4EzZUQ4i6+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm
YTYyZDIwHhcNMjQwMTAxMTgzMTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzFjYzZiMWM3MmI2OWUwOWEzZjg1ZjllOWI5ZjRiNWM3Njc1MzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+R77bmPN6Lqrp+qF4G2ivvpCHds
OGezqBiv2iCCYc2LPQJoppIVUu7mxW1dYZnS4QEXnCOPFeljpTLxQaMhug9xHxyN
W/0hUc7vPYgvwd01SNELWkinmiVOVoAF/kqlt2/L3G31CUxAoPZReSrGpeQh59kH
53wArQ2iywuhKJUN84CJrmWwjh0hZihgaJDUy9el4Hq22Qca/dTdbQZNxtwFgrzh
lYipoGUI1IkSIAl2S2UdzXFlMJMiEYuJr+IAIe3VyyNPoTUUafZswxq7YYp/Gk3Y
Tz2rX5d8LOS34dH1N8GxL2AszLmaAL2xf4s2choimOTbQ0Jx/sADmGAgXQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFPccxrHHK2ngmj+F+em59LXHZ1MYMB8GA1UdIwQY
MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt
OTI4MTlkZThhMDM2LzEvOXh6R3NjY3JhZUNhUDRYNTZibjB0Y2RuVXhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2
LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAMBAIAATAGAwQAT26pMB8E
AgACMBkDBwAqBh6Dyv8DBwAqBh6Gur4DBQAqDRpFMA0GCSqGSIb3DQEBCwUAA4IB
AQA8lQGSXy7dMvGz+m6YmSmPKEdYb+kDRRi4RNkpf2KL1FIYZ9+BBQEY4T2V/t9w
WX8ysj/7hWySoia5gXzzDN3mkiEzDOKh4wbxthyjH+WWraL8lQCgHXEXi6xTtJC9
otNPeW8sk1woBjp3SqJK3wPw7MeGk8OC8aoJB5Q5wchZMpth/vNSFU+sMH0nPjmI
aYrEqXcUZqJKWH5qe1d8iwsKYwPo+uBN8p+AFgWXY532pv0f+zZgsGgAjndODuR4
wjF9QphfC0vkr7fCaFdEzMM0+CfMgMRaQ9wGb3NYqxDoxJXAmwz6OYIkTOyjfFqk
TAZEDSNFx0OCm5XTUI+TB0ah
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:06:49 2024 by rpki-client on console-fra.rpki-client.org