Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/R72GYrk4HwBQWQe_AsSO2kZ6u58.roa
File: R72GYrk4HwBQWQe_AsSO2kZ6u58.roa (raw, json)
Hash identifier: L2G9HPx42ifnYP123qAw3CGoLvdoH6OsKvgkGESdv+c=
Subject key identifier: 47:BD:86:62:B9:38:1F:00:50:59:07:BF:02:C4:8E:DA:46:7A:BB:9F
Certificate issuer: /CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Certificate serial: 018CC3B710618AC63646176078958342A571
Authority key identifier: 79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/R72GYrk4HwBQWQe_AsSO2kZ6u58.roa
Signing time: Mon 01 Jan 2024 06:30:03 +0000
ROA not before: Mon 01 Jan 2024 06:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59717
IP address blocks: 45.80.124.0/22 maxlen: 22
91.239.72.0/24 maxlen: 24
2a0e:4280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:10:61:8a:c6:36:46:17:60:78:95:83:42:a5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Validity
Not Before: Jan 1 06:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47bd8662b9381f00505907bf02c48eda467abb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1e:fa:ec:0e:a0:30:c9:a5:f0:a6:3d:fb:ed:
fd:ab:32:c4:ff:57:bb:c7:2b:04:81:ea:ef:4a:0d:
80:be:b1:a8:37:01:23:1b:bf:62:93:3b:88:b8:c6:
78:8f:01:a8:9d:dd:c2:81:19:7c:08:4a:80:1c:88:
67:f2:df:d4:c5:67:9d:8a:40:66:ce:28:50:68:d1:
2e:2b:9a:26:62:2f:6e:95:fe:59:ab:86:1d:ac:94:
fc:b1:2d:cd:60:d4:c3:fe:27:41:f7:28:c6:2f:d9:
d6:0d:72:80:ea:8b:17:37:fc:55:4c:d5:d5:a2:01:
1d:6b:21:cd:38:a0:ba:dc:80:11:64:97:94:88:99:
54:47:f1:50:46:26:78:60:83:a0:25:08:e0:9b:8d:
5c:10:5d:30:9f:e6:f0:9b:27:9c:88:09:8e:43:ce:
f1:9b:6e:93:e7:7b:6c:0a:4b:fa:b7:6d:9e:7c:ca:
17:5f:8a:4c:2f:72:de:71:d0:b9:e6:bb:8e:b2:67:
b1:2f:26:99:4c:a3:47:e9:29:ba:84:b9:99:37:77:
4e:4e:c1:75:7c:63:15:9b:7a:6d:14:12:13:6d:6b:
f4:4c:b0:99:8a:d0:d8:56:b4:2a:ba:50:68:65:44:
35:9d:80:22:4d:a9:0b:ea:fb:47:6a:5d:bb:b2:00:
70:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BD:86:62:B9:38:1F:00:50:59:07:BF:02:C4:8E:DA:46:7A:BB:9F
X509v3 Authority Key Identifier:
keyid:79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/R72GYrk4HwBQWQe_AsSO2kZ6u58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.124.0/22
91.239.72.0/24
IPv6:
2a0e:4280::/29
Signature Algorithm: sha256WithRSAEncryption
c4:fb:ea:ce:0c:0b:03:34:9b:2f:51:df:df:4e:8d:d0:1c:46:
75:72:a6:23:b1:b6:ac:90:05:76:d3:20:3b:b7:a8:54:a0:e7:
49:aa:78:80:ce:2d:b0:f5:07:43:70:3b:23:a4:b7:49:d5:25:
c3:da:5a:45:d6:c8:a1:07:1d:f1:f7:91:78:38:0a:77:61:9c:
ee:ac:c6:ab:7b:8a:0b:d1:10:90:d0:ee:31:ca:ef:f4:6f:29:
9a:86:32:95:c8:f0:26:84:c0:03:40:91:3f:b8:29:00:4a:73:
a7:21:b1:f1:5b:8a:20:7d:c4:49:19:77:cc:c4:c5:16:03:c8:
4d:d1:7d:98:49:1f:ea:d6:d2:0d:4c:55:63:59:31:ba:76:e2:
84:e2:1c:d9:6e:aa:5a:48:f4:67:0d:09:e5:dc:d8:4a:97:dd:
da:f7:53:72:12:ab:24:bb:9e:38:03:db:16:6c:16:7e:17:89:
df:25:82:20:87:a4:1d:24:ce:12:53:53:01:73:77:f5:6d:02:
58:95:cc:50:30:11:61:48:7b:0a:ef:db:85:18:8b:a0:5a:4a:
b6:6b:9b:22:cc:b2:ae:42:41:e0:e8:8a:7e:2e:b1:43:9d:b3:
93:c6:f8:93:ed:c0:42:31:22:24:e1:03:31:a7:21:28:1d:29:
c2:97:a8:33
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzDtxBhisY2RhdgeJWDQqVxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OGQ3MDEzYTdmZGJiNTY2M2ZkMzg0YTRmZWQxMjMwMzE0
NWUzY2UwHhcNMjQwMTAxMDYzMDAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2JkODY2MmI5MzgxZjAwNTA1OTA3YmYwMmM0OGVkYTQ2N2FiYjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh767A6gMMml8KY9++39qzLE/1e7
xysEgervSg2AvrGoNwEjG79ikzuIuMZ4jwGond3CgRl8CEqAHIhn8t/UxWedikBm
zihQaNEuK5omYi9ulf5Zq4YdrJT8sS3NYNTD/idB9yjGL9nWDXKA6osXN/xVTNXV
ogEdayHNOKC63IARZJeUiJlUR/FQRiZ4YIOgJQjgm41cEF0wn+bwmyeciAmOQ87x
m26T53tsCkv6t22efMoXX4pML3LecdC55ruOsmexLyaZTKNH6Sm6hLmZN3dOTsF1
fGMVm3ptFBITbWv0TLCZitDYVrQqulBoZUQ1nYAiTakL6vtHal27sgBw2QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFEe9hmK5OB8AUFkHvwLEjtpGerufMB8GA1UdIwQY
MBaAFHmNcBOn/btWY/04Sk/tEjAxRePOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVkxd0U2Zjl1MVpqX1RoS1QtMFNNREZGNDg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82N2E0Y2UtYjhiYS00NTYyLTlhMzct
MjRkODE4YmE3ZjI5LzEvUjcyR1lyazRId0JRV1FlX0FzU08ya1o2dTU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS82N2E0Y2UtYjhiYS00NTYyLTlhMzctMjRkODE4YmE3ZjI5
LzEvZVkxd0U2Zjl1MVpqX1RoS1QtMFNNREZGNDg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLVB8AwQA
W+9IMA0EAgACMAcDBQMqDkKAMA0GCSqGSIb3DQEBCwUAA4IBAQDE++rODAsDNJsv
Ud/fTo3QHEZ1cqYjsbaskAV20yA7t6hUoOdJqniAzi2w9QdDcDsjpLdJ1SXD2lpF
1sihBx3x95F4OAp3YZzurMare4oL0RCQ0O4xyu/0bymahjKVyPAmhMADQJE/uCkA
SnOnIbHxW4ogfcRJGXfMxMUWA8hN0X2YSR/q1tINTFVjWTG6duKE4hzZbqpaSPRn
DQnl3NhKl93a91NyEqsku544A9sWbBZ+F4nfJYIgh6QdJM4SU1MBc3f1bQJYlcxQ
MBFhSHsK79uFGIugWkq2a5sizLKuQkHg6Ip+LrFDnbOTxviT7cBCMSIk4QMxpyEo
HSnCl6gz
-----END CERTIFICATE-----
Generated at Fri Jun 7 13:03:27 2024 by rpki-client on console-ams.rpki-client.org