Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/D_TOrKX1Bs_u-tpbh7GWMzpGvoA.roa
File: D_TOrKX1Bs_u-tpbh7GWMzpGvoA.roa (raw, json)
Hash identifier: b3zRI8HRJHf5Q06oyYZ0LFUX8bOw2bd8YKXXK4Co/YA=
Subject key identifier: 0F:F4:CE:AC:A5:F5:06:CF:EE:FA:DA:5B:87:B1:96:33:3A:46:BE:80
Certificate issuer: /CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
Certificate serial: 018CC8714AB362CBF1364FD858F904E9B8F3
Authority key identifier: 13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/D_TOrKX1Bs_u-tpbh7GWMzpGvoA.roa
Signing time: Tue 02 Jan 2024 04:31:57 +0000
ROA not before: Tue 02 Jan 2024 04:31:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28757
IP address blocks: 217.16.216.0/22 maxlen: 22
217.16.216.0/21 maxlen: 21
217.16.220.0/23 maxlen: 23
217.16.222.0/24 maxlen: 24
217.16.223.0/24 maxlen: 24
80.80.178.0/24 maxlen: 24
185.71.110.0/23 maxlen: 23
80.80.179.0/24 maxlen: 24
80.80.176.0/23 maxlen: 23
185.71.108.0/22 maxlen: 22
80.80.176.0/21 maxlen: 21
185.71.108.0/23 maxlen: 23
80.80.176.0/20 maxlen: 20
80.80.184.0/21 maxlen: 21
80.80.180.0/23 maxlen: 23
80.80.182.0/24 maxlen: 24
80.80.183.0/24 maxlen: 24
80.80.191.0/24 maxlen: 24
217.16.208.0/21 maxlen: 21
217.16.208.0/20 maxlen: 20
2a02:6b00::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:4a:b3:62:cb:f1:36:4f:d8:58:f9:04:e9:b8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
Validity
Not Before: Jan 2 04:31:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ff4ceaca5f506cfeefada5b87b196333a46be80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:94:ee:a3:1d:e2:35:51:ac:0a:ff:92:a3:24:
b7:a7:e0:e0:0a:15:29:82:7d:c5:a0:cf:62:b1:8d:
f0:74:49:51:c7:0b:50:64:45:92:d7:44:38:35:0f:
7f:76:51:5a:73:27:4a:83:ac:9f:45:84:7c:cc:fb:
09:66:01:79:d4:f8:0b:13:d1:94:ed:3c:48:db:c3:
77:a8:25:79:08:18:f1:07:1b:f4:30:3d:16:d8:f2:
b9:ed:de:c1:cb:94:cc:c9:c0:7a:96:e3:9e:6e:2f:
a7:3c:f9:5c:4f:cd:2b:4c:cf:7c:f2:cf:15:65:72:
cb:36:c7:40:8f:89:46:19:cc:17:80:18:8e:06:96:
63:51:e1:9b:ef:0d:a0:50:c6:85:f5:7e:bf:cb:c8:
61:4e:8d:34:92:49:a1:e2:27:86:51:6a:32:6c:96:
eb:09:c5:5b:d0:1c:4d:8c:66:64:3c:1e:9c:4c:63:
aa:e1:96:2b:62:06:7f:50:33:cd:cb:be:5c:67:76:
09:be:5a:59:54:1a:e2:20:d7:7a:81:bb:12:f7:ab:
4d:cb:d0:62:12:81:8e:49:e1:13:cb:c1:e3:93:5b:
c7:d3:2c:2f:8e:03:34:0d:61:9d:47:32:d5:d2:5e:
ba:aa:52:1d:42:63:5c:a1:d4:0f:1d:ce:ae:1e:4d:
6c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F4:CE:AC:A5:F5:06:CF:EE:FA:DA:5B:87:B1:96:33:3A:46:BE:80
X509v3 Authority Key Identifier:
keyid:13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/D_TOrKX1Bs_u-tpbh7GWMzpGvoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.80.176.0/20
185.71.108.0/22
217.16.208.0/20
IPv6:
2a02:6b00::/36
Signature Algorithm: sha256WithRSAEncryption
54:77:89:29:d5:3d:3a:dc:ef:49:f9:c8:8d:61:9c:9d:62:4d:
69:32:47:21:d5:b5:1a:8b:c6:fe:82:30:13:c3:4f:91:7a:3d:
92:43:5b:83:d8:e1:bd:97:41:84:d6:50:88:81:b2:2d:d2:59:
96:de:10:75:84:36:b7:a3:a2:0f:0d:9d:09:87:47:3b:31:dd:
ff:67:d2:50:4a:5b:89:9c:91:ea:8b:cf:5f:31:15:6a:35:ef:
ce:ec:ad:a1:7f:13:da:c9:9a:b9:49:28:fe:1f:c2:8b:86:44:
e1:fe:c7:b0:45:11:51:20:92:c1:9a:14:2c:76:10:7d:75:07:
8b:d5:ba:8c:39:43:c5:59:3a:eb:bb:a0:dd:b1:84:63:0a:ce:
75:25:c3:de:02:ca:16:1f:f8:46:27:08:5c:6c:5a:fc:8b:a7:
99:a2:93:92:e7:9d:5f:8c:5d:a3:3b:be:89:10:f7:50:47:0d:
0f:11:09:b9:43:8c:15:84:53:94:8b:d4:aa:4b:c4:8e:cd:46:
62:3b:8b:42:aa:2e:d3:8c:24:c4:90:96:1b:17:7e:25:7e:26:
93:da:ae:25:fb:a3:ad:ec:10:7b:38:5a:50:08:1f:ed:09:56:
c8:02:39:23:ae:52:f8:69:4d:db:5a:ed:97:5b:68:91:a6:3b:
80:78:e7:e5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYzIcUqzYsvxNk/YWPkE6bjzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZjNhZDQwZjk2ZWQ1ZTdmMzlkOGQ5ZTE5NmFiZjBmYTIz
ODFlOGMwHhcNMjQwMTAyMDQzMTU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmY0Y2VhY2E1ZjUwNmNmZWVmYWRhNWI4N2IxOTYzMzNhNDZiZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpTuox3iNVGsCv+SoyS3p+DgChUp
gn3FoM9isY3wdElRxwtQZEWS10Q4NQ9/dlFacydKg6yfRYR8zPsJZgF51PgLE9GU
7TxI28N3qCV5CBjxBxv0MD0W2PK57d7By5TMycB6luOebi+nPPlcT80rTM988s8V
ZXLLNsdAj4lGGcwXgBiOBpZjUeGb7w2gUMaF9X6/y8hhTo00kkmh4ieGUWoybJbr
CcVb0BxNjGZkPB6cTGOq4ZYrYgZ/UDPNy75cZ3YJvlpZVBriINd6gbsS96tNy9Bi
EoGOSeETy8Hjk1vH0ywvjgM0DWGdRzLV0l66qlIdQmNcodQPHc6uHk1skwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFA/0zqyl9QbP7vraW4exljM6Rr6AMB8GA1UdIwQY
MBaAFBPzrUD5btXn852Nnhlqvw+iOB6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRV9PdFFQbHUxZWZ6blkyZUdXcV9ENkk0SG93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83NzJlN2UtZjBmMC00ZmUwLWE2MzQt
ZjRmYmUwY2I5NDQ0LzEvRF9UT3JLWDFCc191LXRwYmg3R1dNenBHdm9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi83NzJlN2UtZjBmMC00ZmUwLWE2MzQtZjRmYmUwY2I5NDQ0
LzEvRV9PdFFQbHUxZWZ6blkyZUdXcV9ENkk0SG93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAYBAIAATASAwQEUFCwAwQC
uUdsAwQE2RDQMA4EAgACMAgDBgQqAmsAADANBgkqhkiG9w0BAQsFAAOCAQEAVHeJ
KdU9OtzvSfnIjWGcnWJNaTJHIdW1GovG/oIwE8NPkXo9kkNbg9jhvZdBhNZQiIGy
LdJZlt4QdYQ2t6OiDw2dCYdHOzHd/2fSUEpbiZyR6ovPXzEVajXvzuytoX8T2sma
uUko/h/Ci4ZE4f7HsEURUSCSwZoULHYQfXUHi9W6jDlDxVk667ug3bGEYwrOdSXD
3gLKFh/4RicIXGxa/IunmaKTkuedX4xdozu+iRD3UEcNDxEJuUOMFYRTlIvUqkvE
js1GYjuLQqou04wkxJCWGxd+JX4mk9quJfujrewQezhaUAgf7QlWyAI5I65S+GlN
21rtl1tokaY7gHjn5Q==
-----END CERTIFICATE-----
Generated at Tue Nov 26 03:06:24 2024 by rpki-client on console-ams.rpki-client.org