Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/0nDAvqShZDAHL_zbdbskZj5Fa2A.roa
File: 0nDAvqShZDAHL_zbdbskZj5Fa2A.roa (raw, json)
Hash identifier: uHtuuRNbapgExxF6tq0WfGyzVYRXyzTM/9jPs7SAV58=
Subject key identifier: D2:70:C0:BE:A4:A1:64:30:07:2F:FC:DB:75:BB:24:66:3E:45:6B:60
Certificate issuer: /CN=325e98947fc948d5b62dfb85a7cb3a72a0672656
Certificate serial: 018CC8DF424B4D1ADFF30A13B820854BECAD
Authority key identifier: 32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/0nDAvqShZDAHL_zbdbskZj5Fa2A.roa
Signing time: Tue 02 Jan 2024 06:32:03 +0000
ROA not before: Tue 02 Jan 2024 06:32:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24978
IP address blocks: 80.79.224.0/20 maxlen: 20
80.79.232.0/22 maxlen: 22
185.133.104.0/22 maxlen: 22
2a03:89c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:42:4b:4d:1a:df:f3:0a:13:b8:20:85:4b:ec:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325e98947fc948d5b62dfb85a7cb3a72a0672656
Validity
Not Before: Jan 2 06:32:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d270c0bea4a16430072ffcdb75bb24663e456b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:07:73:01:e6:11:25:38:9b:77:a1:2d:76:75:
e1:4e:8e:14:da:89:56:10:84:c3:ae:f1:f1:fa:ce:
e9:09:55:33:e5:5c:5d:f6:60:d2:63:b8:1e:28:7f:
29:01:3e:aa:e1:9c:9a:ff:e6:24:0a:98:e7:06:e2:
25:7b:e6:96:cf:ec:e9:7b:4e:29:88:d5:b8:02:25:
8a:f5:09:9f:34:4e:20:54:fe:2f:cf:d4:c4:69:48:
b3:1f:ba:f6:09:93:ec:dc:ee:6b:2a:41:02:84:be:
7f:da:8a:6d:7f:32:7d:28:d6:9c:c9:11:00:b4:cc:
bd:fe:f2:2d:15:c4:d2:29:f1:41:d6:2e:07:c5:ac:
35:4c:66:46:47:e3:27:a2:ed:3f:06:81:88:92:df:
ee:d7:06:88:b5:14:0d:ff:17:ef:da:75:7a:e2:a6:
dd:48:22:ab:42:15:81:57:c5:35:0c:8d:0d:6b:aa:
e3:e0:99:37:92:e0:fc:40:cf:44:66:00:b4:07:97:
e1:e4:13:b4:33:f5:c5:29:23:88:46:f5:0b:86:c9:
22:b0:aa:4f:13:6c:f4:a1:0c:eb:a8:19:72:d0:c1:
73:28:bb:43:04:b0:1c:d1:9d:2e:27:dc:36:5f:09:
9e:5a:e1:cf:ac:bc:61:80:e3:dd:d5:ba:c1:43:66:
b1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:70:C0:BE:A4:A1:64:30:07:2F:FC:DB:75:BB:24:66:3E:45:6B:60
X509v3 Authority Key Identifier:
keyid:32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/0nDAvqShZDAHL_zbdbskZj5Fa2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.224.0/20
185.133.104.0/22
IPv6:
2a03:89c0::/32
Signature Algorithm: sha256WithRSAEncryption
6d:17:41:8c:7e:3b:11:74:9a:f5:c3:04:92:6b:b8:da:92:08:
24:ab:e2:c3:f4:46:f9:ed:32:a5:1c:c1:5d:da:c3:3a:f4:c2:
1f:a3:47:c9:7c:30:a9:65:77:14:f0:96:cf:37:a7:9a:f6:7b:
2f:2a:56:ad:2b:c6:f8:ce:ea:e5:5b:75:de:22:80:29:bf:5d:
17:6b:76:c2:44:ac:29:b9:45:29:fd:46:54:e3:b0:40:31:d7:
c2:e6:17:f2:0c:54:19:ff:07:45:5b:d2:7f:31:6a:5d:cb:02:
f9:ba:c2:23:5d:b2:09:f1:89:ac:a2:0a:3a:ce:6e:c7:b3:2b:
82:6e:38:12:dc:f4:25:7e:16:d0:d6:92:2b:6a:7e:7f:ca:45:
ce:61:a1:78:50:94:31:1d:17:5a:25:5d:5d:8a:67:ef:ce:49:
d9:af:84:41:0a:6f:64:88:db:54:ea:9a:de:4e:eb:3f:2d:30:
bb:4c:c6:0a:be:2f:5e:18:99:b3:d3:6b:de:76:c1:bc:f3:6b:
1e:e7:79:8f:56:00:90:d6:c9:fe:c2:4e:be:36:27:f9:b2:4e:
3e:50:46:5e:8c:32:76:d7:c3:cd:e7:54:d1:5d:68:51:8e:21:
ba:72:0e:c1:3a:f9:44:a7:d9:a4:6d:91:ca:6f:5c:cd:74:a6:
5d:7c:cb:ea
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzI30JLTRrf8woTuCCFS+ytMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNWU5ODk0N2ZjOTQ4ZDViNjJkZmI4NWE3Y2IzYTcyYTA2
NzI2NTYwHhcNMjQwMTAyMDYzMjAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjcwYzBiZWE0YTE2NDMwMDcyZmZjZGI3NWJiMjQ2NjNlNDU2YjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgdzAeYRJTibd6EtdnXhTo4U2olW
EITDrvHx+s7pCVUz5Vxd9mDSY7geKH8pAT6q4Zya/+YkCpjnBuIle+aWz+zpe04p
iNW4AiWK9QmfNE4gVP4vz9TEaUizH7r2CZPs3O5rKkEChL5/2optfzJ9KNacyREA
tMy9/vItFcTSKfFB1i4Hxaw1TGZGR+Mnou0/BoGIkt/u1waItRQN/xfv2nV64qbd
SCKrQhWBV8U1DI0Na6rj4Jk3kuD8QM9EZgC0B5fh5BO0M/XFKSOIRvULhskisKpP
E2z0oQzrqBly0MFzKLtDBLAc0Z0uJ9w2XwmeWuHPrLxhgOPd1brBQ2axSQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFNJwwL6koWQwBy/823W7JGY+RWtgMB8GA1UdIwQY
MBaAFDJemJR/yUjVti37hafLOnKgZyZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWw2WWxIX0pTTlcyTGZ1RnA4czZjcUJuSmxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kNmY4YTktZDZjNy00ZDUyLTkxY2It
NGNhZWM5N2Y3ZDkyLzEvMG5EQXZxU2haREFITF96YmRic2taajVGYTJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kNmY4YTktZDZjNy00ZDUyLTkxY2ItNGNhZWM5N2Y3ZDky
LzEvTWw2WWxIX0pTTlcyTGZ1RnA4czZjcUJuSmxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUE/gAwQC
uYVoMA0EAgACMAcDBQAqA4nAMA0GCSqGSIb3DQEBCwUAA4IBAQBtF0GMfjsRdJr1
wwSSa7jakggkq+LD9Eb57TKlHMFd2sM69MIfo0fJfDCpZXcU8JbPN6ea9nsvKlat
K8b4zurlW3XeIoApv10Xa3bCRKwpuUUp/UZU47BAMdfC5hfyDFQZ/wdFW9J/MWpd
ywL5usIjXbIJ8Ymsogo6zm7HsyuCbjgS3PQlfhbQ1pIran5/ykXOYaF4UJQxHRda
JV1dimfvzknZr4RBCm9kiNtU6preTus/LTC7TMYKvi9eGJmz02vedsG882se53mP
VgCQ1sn+wk6+Nif5sk4+UEZejDJ218PN51TRXWhRjiG6cg7BOvlEp9mkbZHKb1zN
dKZdfMvq
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:14:51 2024 by rpki-client on console-fra.rpki-client.org