Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/rd-FOZrEXmyZXEw8hdk41f9Bc7E.roa
File: rd-FOZrEXmyZXEw8hdk41f9Bc7E.roa (raw, json)
Hash identifier: Li61akIu+OqVfkQ/whd3FildmtlwqpCTeK2lyCWCpp4=
Subject key identifier: AD:DF:85:39:9A:C4:5E:6C:99:5C:4C:3C:85:D9:38:D5:FF:41:73:B1
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01927F3C02413EDD333A188BB132BC947B2F
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/rd-FOZrEXmyZXEw8hdk41f9Bc7E.roa
Signing time: Sat 12 Oct 2024 05:38:12 +0000
ROA not before: Sat 12 Oct 2024 05:38:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 62.60.240.0/22 maxlen: 24
213.176.74.0/23 maxlen: 24
213.176.92.0/22 maxlen: 24
213.176.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7f:3c:02:41:3e:dd:33:3a:18:8b:b1:32:bc:94:7b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 12 05:38:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=addf85399ac45e6c995c4c3c85d938d5ff4173b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a7:3a:79:7a:e8:02:95:94:bf:37:1a:2a:99:
e1:17:20:42:5c:8f:b7:7d:01:c6:b9:84:23:ff:86:
19:f0:7a:de:e0:70:ab:f6:32:c9:54:75:66:34:88:
07:49:9e:d6:46:3b:40:90:4a:39:03:2d:e4:dd:7c:
a4:a4:93:e8:ed:7b:54:61:4b:4a:42:b5:f4:69:a0:
df:5d:58:a7:b6:30:3c:e4:bd:f4:63:36:d2:da:b3:
fa:38:f2:3a:9e:b7:ff:11:9a:de:10:6c:c8:c0:25:
d5:bc:93:ad:a6:3f:a0:c2:d1:f2:09:97:55:3f:1b:
42:84:d4:c6:4e:aa:09:28:c9:36:00:e2:9a:59:4e:
c1:06:e6:c3:e4:ea:70:dd:12:0b:e1:3a:75:91:a1:
05:5f:08:0d:7f:bc:e5:0e:56:c3:1d:42:01:85:b2:
db:a1:60:90:b8:ea:38:fd:92:0c:01:2e:0c:25:37:
c2:b5:b3:d5:36:8e:55:05:a6:2b:b0:05:18:f5:9d:
28:1a:a8:9d:25:67:5e:74:af:27:01:f6:03:ca:bb:
43:42:a1:ed:ea:b2:22:18:1e:c6:5e:6c:33:ca:ba:
d0:d8:ab:c3:a0:af:17:4c:c8:1c:e5:18:e7:3d:4e:
30:9b:b4:76:00:4e:e0:0b:e8:92:cd:40:05:1a:e8:
d0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DF:85:39:9A:C4:5E:6C:99:5C:4C:3C:85:D9:38:D5:FF:41:73:B1
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/rd-FOZrEXmyZXEw8hdk41f9Bc7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.240.0/22
213.176.74.0/23
213.176.92.0/22
213.176.112.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:7d:0a:30:75:9d:b5:66:7b:af:42:cc:c6:64:50:09:0c:8c:
c5:b7:45:ab:5b:81:b7:52:4b:70:2f:98:99:8c:2c:96:bf:0b:
d0:a6:77:6d:a6:9c:d1:79:84:29:51:fd:58:cc:58:94:08:f3:
10:0c:0c:d9:3a:88:d9:5b:52:64:64:98:01:ad:ff:94:34:13:
84:91:6e:13:3f:5b:39:79:ec:9a:62:af:a2:e1:99:7c:56:18:
d4:7a:45:a7:4b:6b:96:eb:2f:f5:dd:c6:6e:6b:d7:f5:e5:68:
71:81:ba:fb:34:9f:01:5c:77:fb:4f:07:29:5b:34:36:fa:20:
ba:0f:58:22:49:f9:94:26:eb:17:e1:d5:c6:ed:74:9b:5e:57:
b9:4c:f3:22:e2:5d:a9:48:8e:21:0d:3d:da:ed:4f:9e:17:cc:
32:89:b9:fa:75:07:87:31:07:ad:0a:41:ef:51:33:4f:46:ea:
f3:fd:c9:49:2c:69:8c:13:99:c8:69:f0:07:fb:b6:36:88:b3:
3d:e1:67:dc:6e:36:e1:bd:da:a5:d6:3d:28:89:ca:f6:a3:a0:
9b:d0:b6:f2:1b:2e:f0:df:d2:56:fe:cb:f0:b8:bd:4b:cb:fe:
4a:c6:80:3b:d9:8a:be:c1:f3:ed:83:25:5c:7a:7f:01:2d:98:
11:17:f1:d8
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZJ/PAJBPt0zOhiLsTK8lHsvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQxMDEyMDUzODEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGRmODUzOTlhYzQ1ZTZjOTk1YzRjM2M4NWQ5MzhkNWZmNDE3M2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Kc6eXroApWUvzcaKpnhFyBCXI+3
fQHGuYQj/4YZ8Hre4HCr9jLJVHVmNIgHSZ7WRjtAkEo5Ay3k3XykpJPo7XtUYUtK
QrX0aaDfXVintjA85L30YzbS2rP6OPI6nrf/EZreEGzIwCXVvJOtpj+gwtHyCZdV
PxtChNTGTqoJKMk2AOKaWU7BBubD5Opw3RIL4Tp1kaEFXwgNf7zlDlbDHUIBhbLb
oWCQuOo4/ZIMAS4MJTfCtbPVNo5VBaYrsAUY9Z0oGqidJWdedK8nAfYDyrtDQqHt
6rIiGB7GXmwzyrrQ2KvDoK8XTMgc5RjnPU4wm7R2AE7gC+iSzUAFGujQyQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFK3fhTmaxF5smVxMPIXZONX/QXOxMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvcmQtRk9ackVYbXlaWEV3OGhkazQxZjlCYzdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCPjzwAwQB
1bBKAwQC1bBcAwQD1bBwMA0GCSqGSIb3DQEBCwUAA4IBAQB9fQowdZ21ZnuvQszG
ZFAJDIzFt0WrW4G3UktwL5iZjCyWvwvQpndtppzReYQpUf1YzFiUCPMQDAzZOojZ
W1JkZJgBrf+UNBOEkW4TP1s5eeyaYq+i4Zl8VhjUekWnS2uW6y/13cZua9f15Whx
gbr7NJ8BXHf7TwcpWzQ2+iC6D1giSfmUJusX4dXG7XSbXle5TPMi4l2pSI4hDT3a
7U+eF8wyibn6dQeHMQetCkHvUTNPRurz/clJLGmME5nIafAH+7Y2iLM94Wfcbjbh
vdql1j0oicr2o6Cb0LbyGy7w39JW/svwuL1Ly/5KxoA72Yq+wfPtgyVcen8BLZgR
F/HY
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:19:27 2024 by rpki-client on console-fra.rpki-client.org