Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/vB7_d4d8jAe3zLJ2r5HS66ZoYVA.roa
File: vB7_d4d8jAe3zLJ2r5HS66ZoYVA.roa (raw, json)
Hash identifier: hUEZ/w45iYMJU22/BPE2+yWqD884lMXkIx+6PFE5nrM=
Subject key identifier: BC:1E:FF:77:87:7C:8C:07:B7:CC:B2:76:AF:91:D2:EB:A6:68:61:50
Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Certificate serial: 018CC6B778F3B875E14362697ED70C162D9C
Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/vB7_d4d8jAe3zLJ2r5HS66ZoYVA.roa
Signing time: Mon 01 Jan 2024 20:29:21 +0000
ROA not before: Mon 01 Jan 2024 20:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15742
IP address blocks: 217.117.68.0/24 maxlen: 24
217.117.67.0/24 maxlen: 24
217.117.66.0/24 maxlen: 24
217.117.71.0/24 maxlen: 24
217.117.70.0/24 maxlen: 24
217.117.69.0/24 maxlen: 24
217.117.65.0/24 maxlen: 24
217.117.72.0/24 maxlen: 24
217.117.75.0/24 maxlen: 24
217.117.74.0/24 maxlen: 24
217.117.73.0/24 maxlen: 24
217.117.78.0/24 maxlen: 24
217.117.77.0/24 maxlen: 24
217.117.76.0/24 maxlen: 24
87.238.152.0/24 maxlen: 24
217.117.79.0/24 maxlen: 24
87.238.153.0/24 maxlen: 24
87.238.156.0/24 maxlen: 24
87.238.155.0/24 maxlen: 24
87.238.154.0/24 maxlen: 24
87.238.159.0/24 maxlen: 24
87.238.158.0/24 maxlen: 24
87.238.157.0/24 maxlen: 24
217.117.64.0/24 maxlen: 24
2a03:9220::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 10:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:78:f3:b8:75:e1:43:62:69:7e:d7:0c:16:2d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Validity
Not Before: Jan 1 20:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc1eff77877c8c07b7ccb276af91d2eba6686150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3b:e8:ef:bc:bc:62:50:fb:f2:b5:d7:8f:01:
10:6f:8b:1c:b1:0d:e8:67:be:35:5a:b1:a9:44:72:
54:f7:0c:54:2b:7b:ad:42:e5:33:a0:f1:86:32:b0:
08:3f:8a:0d:be:78:1e:b0:21:a2:24:6b:18:1b:55:
2d:11:1a:a8:34:b3:c9:87:9b:77:3f:26:eb:39:2d:
bb:83:75:a3:90:48:d8:41:49:d4:ca:87:62:58:8a:
35:52:02:aa:76:d6:ec:7a:db:dd:66:0f:84:f9:68:
05:bf:df:c7:b6:9a:57:23:6b:4f:7c:4d:6e:3f:1c:
40:dc:ca:b6:48:5a:8d:b0:88:24:a7:91:f7:8d:37:
3b:6b:0d:e3:c5:e9:4e:9f:6a:f0:a4:fc:62:19:46:
59:f4:cf:d9:23:c1:89:2a:e8:5b:39:0b:ad:53:fb:
3d:cb:7e:72:06:04:43:6a:9d:49:31:e0:27:a1:a1:
c5:12:92:48:94:58:1a:99:72:3d:f4:67:a4:d0:f7:
db:70:a1:56:5d:20:70:03:9c:eb:13:e2:9b:f7:f8:
04:86:57:fc:1d:3f:0d:36:d9:57:f0:22:94:75:9b:
c1:7f:32:4f:96:8e:87:83:61:79:1a:00:c4:ce:b8:
f4:b7:31:21:e2:df:b4:50:d1:3d:31:c8:2b:47:52:
c5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1E:FF:77:87:7C:8C:07:B7:CC:B2:76:AF:91:D2:EB:A6:68:61:50
X509v3 Authority Key Identifier:
keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/vB7_d4d8jAe3zLJ2r5HS66ZoYVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.152.0/21
217.117.64.0/20
IPv6:
2a03:9220::/32
Signature Algorithm: sha256WithRSAEncryption
4f:4d:b7:5c:9c:57:70:8c:55:b5:1e:42:50:2e:9a:f8:19:c5:
cf:30:2d:62:80:d9:69:36:c2:b2:ff:7e:42:7b:ac:3c:05:39:
be:09:a9:72:cb:c1:2b:f7:10:b3:0f:6f:e2:bc:26:c8:29:b1:
21:28:55:70:00:94:1a:a5:09:a9:82:d2:54:2f:5c:fe:e6:ba:
c1:80:18:42:0d:fc:41:46:52:a8:4e:6f:b6:10:fb:09:8e:22:
e2:4a:f9:0d:4d:9f:d2:8a:43:d3:ab:e5:2f:27:3e:62:cb:69:
ad:78:51:d7:c6:b4:ff:4d:0d:7b:b7:a2:a9:a9:d6:8c:9b:dc:
97:82:41:81:56:63:29:90:7d:e2:3c:3e:0f:ea:16:33:eb:b9:
97:e4:84:39:de:9d:9d:91:c3:6d:6a:af:b2:13:76:51:26:25:
30:a2:73:d8:fa:25:49:f7:34:95:b7:9b:67:0d:ab:32:32:79:
98:99:6b:51:2b:f7:70:7e:e2:58:9e:8e:1c:a0:ad:4d:73:42:
0d:94:52:c8:e0:9e:57:8c:0d:4b:09:6d:e9:57:bc:59:8b:de:
cf:ae:a6:e5:ad:5a:77:04:5b:a5:d9:a4:dc:4f:98:39:85:d5:
62:54:ee:44:2c:5e:83:8d:9f:76:40:20:fc:b6:8b:36:b4:13:
a5:bd:18:85
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzGt3jzuHXhQ2JpftcMFi2cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhY2UyMTA5MGVlNGQ3ODY3NzQxMzQyM2RjYjJmZTAxYTZl
MWM2MjIwHhcNMjQwMTAxMjAyOTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzFlZmY3Nzg3N2M4YzA3YjdjY2IyNzZhZjkxZDJlYmE2Njg2MTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTvo77y8YlD78rXXjwEQb4scsQ3o
Z741WrGpRHJU9wxUK3utQuUzoPGGMrAIP4oNvngesCGiJGsYG1UtERqoNLPJh5t3
PybrOS27g3WjkEjYQUnUyodiWIo1UgKqdtbsetvdZg+E+WgFv9/HtppXI2tPfE1u
PxxA3Mq2SFqNsIgkp5H3jTc7aw3jxelOn2rwpPxiGUZZ9M/ZI8GJKuhbOQutU/s9
y35yBgRDap1JMeAnoaHFEpJIlFgamXI99Gek0PfbcKFWXSBwA5zrE+Kb9/gEhlf8
HT8NNtlX8CKUdZvBfzJPlo6Hg2F5GgDEzrj0tzEh4t+0UNE9McgrR1LFtQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFLwe/3eHfIwHt8yydq+R0uumaGFQMB8GA1UdIwQY
MBaAFCrOIQkO5NeGd0E0I9yy/gGm4cYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjkt
NTkwYTk4MTNkZGRmLzEvdkI3X2Q0ZDhqQWUzekxKMnI1SFM2NlpvWVZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjktNTkwYTk4MTNkZGRm
LzEvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDV+6YAwQE
2XVAMA0EAgACMAcDBQAqA5IgMA0GCSqGSIb3DQEBCwUAA4IBAQBPTbdcnFdwjFW1
HkJQLpr4GcXPMC1igNlpNsKy/35Ce6w8BTm+Calyy8Er9xCzD2/ivCbIKbEhKFVw
AJQapQmpgtJUL1z+5rrBgBhCDfxBRlKoTm+2EPsJjiLiSvkNTZ/SikPTq+UvJz5i
y2mteFHXxrT/TQ17t6KpqdaMm9yXgkGBVmMpkH3iPD4P6hYz67mX5IQ53p2dkcNt
aq+yE3ZRJiUwonPY+iVJ9zSVt5tnDasyMnmYmWtRK/dwfuJYno4coK1Nc0INlFLI
4J5XjA1LCW3pV7xZi97PrqblrVp3BFul2aTcT5g5hdViVO5ELF6DjZ92QCD8tos2
tBOlvRiF
-----END CERTIFICATE-----
Generated at Fri Jun 14 12:33:57 2024 by rpki-client on console-fra.rpki-client.org