Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1-_kLMa3TBH4_Z6gN4qFB1_sDPQk.roa
File: 1-_kLMa3TBH4_Z6gN4qFB1_sDPQk.roa (raw, json)
Hash identifier: 97Z5SzvgqnvKZUyXDzl9BJVfS0sXZCCF6T/cvpr8F84=
Subject key identifier: FB:F9:0B:31:AD:D3:04:7E:3F:67:A8:0D:E2:A1:41:D7:FB:03:3D:09
Certificate issuer: /CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Certificate serial: 018CC56E3B03F62D7B56165F4B93ED3DEF57
Authority key identifier: D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1-_kLMa3TBH4_Z6gN4qFB1_sDPQk.roa
Signing time: Mon 01 Jan 2024 14:29:44 +0000
ROA not before: Mon 01 Jan 2024 14:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44858
IP address blocks: 77.241.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 May 2024 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:3b:03:f6:2d:7b:56:16:5f:4b:93:ed:3d:ef:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Validity
Not Before: Jan 1 14:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbf90b31add3047e3f67a80de2a141d7fb033d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:28:89:01:80:2b:81:e6:48:6c:8e:bc:9d:
c0:b2:8e:bf:19:a9:63:d7:7c:af:0a:d8:fe:f6:32:
d5:d0:15:96:9c:14:4a:24:5c:43:e7:bb:de:aa:d5:
48:13:73:eb:9c:14:06:0d:d8:a3:e3:e4:27:b1:6c:
df:b9:b0:1e:27:4f:a1:d2:3a:c1:2c:33:dd:22:9d:
18:ad:f0:a4:fe:42:ba:9e:b8:f2:de:0d:10:4e:5b:
f8:79:de:81:72:85:21:7e:c3:5d:e6:6a:e4:a8:54:
13:fb:a3:18:62:3f:81:ca:f1:6c:75:65:af:2e:fc:
8e:7d:6e:c3:bf:6c:29:9d:09:8f:31:49:7e:f2:cb:
ee:03:67:d5:b8:d0:17:10:c1:dc:b1:19:7b:d4:59:
af:28:72:34:61:ee:9a:0b:03:d0:cd:7f:eb:68:48:
80:14:b6:00:f4:9b:09:92:31:f4:31:d7:54:d5:e9:
a5:44:00:28:80:0b:1c:80:13:6b:c9:6f:e6:a7:92:
ac:5a:75:3e:fa:a6:fc:6f:21:6d:e4:d9:94:c6:01:
a1:4c:e3:f2:0f:8c:b3:40:af:a1:96:49:b8:7e:74:
97:4a:b9:56:eb:33:48:14:84:3f:bd:87:94:44:cb:
8e:9c:5c:c1:85:58:cb:4c:bd:18:34:76:70:a4:08:
a1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F9:0B:31:AD:D3:04:7E:3F:67:A8:0D:E2:A1:41:D7:FB:03:3D:09
X509v3 Authority Key Identifier:
keyid:D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1-_kLMa3TBH4_Z6gN4qFB1_sDPQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.241.68.0/22
Signature Algorithm: sha256WithRSAEncryption
89:62:78:d5:be:53:8d:80:c7:d7:26:68:10:1c:49:ea:5b:05:
95:8b:5e:f2:d9:8b:25:9b:28:94:40:75:a8:7d:06:53:c9:c6:
2a:0a:b0:3f:2c:1d:87:8b:7b:24:71:a3:55:9f:24:9a:5c:f5:
cc:5e:45:7e:ea:6c:b8:ef:28:b7:cc:45:f0:d2:29:2e:40:6b:
96:5b:3a:f9:b8:d2:52:9d:54:0d:43:7a:63:b7:1c:ea:9d:2f:
de:b8:33:4b:b7:15:18:a4:7f:0b:ad:46:3c:f8:bc:12:f9:ba:
01:5e:35:94:c7:50:b6:ed:f0:ea:98:2a:fb:5e:ad:fd:40:f5:
2d:3f:52:aa:c6:5a:58:59:84:f3:48:7b:3f:a0:7e:72:88:da:
64:61:42:4f:f0:c0:a7:51:95:01:36:28:a0:d2:cd:6c:36:0f:
c4:34:00:5e:49:14:c1:ba:44:6b:dc:b7:a6:cf:53:21:5f:ba:
0b:51:95:a3:42:73:20:b5:2f:3a:0f:10:d3:58:87:e4:3d:38:
ff:2a:c6:a1:65:1f:6d:2a:6a:4f:d1:80:a6:47:92:b5:05:2a:
87:59:b3:87:5b:2e:ed:cc:24:a8:98:86:c8:f3:dd:7f:06:c2:
0e:f4:71:48:56:84:01:ff:4e:03:95:56:9b:1d:3a:55:f4:b3:
b6:da:4e:6d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzFbjsD9i17VhZfS5PtPe9XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NGJkNTY1MzAxM2ZhN2NhMzRmNTIyODQzMDlhNjg4YjI0
OWU3YTAwHhcNMjQwMTAxMTQyOTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmY5MGIzMWFkZDMwNDdlM2Y2N2E4MGRlMmExNDFkN2ZiMDMzZDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA0oiQGAK4HmSGyOvJ3Aso6/Galj
13yvCtj+9jLV0BWWnBRKJFxD57veqtVIE3PrnBQGDdij4+QnsWzfubAeJ0+h0jrB
LDPdIp0YrfCk/kK6nrjy3g0QTlv4ed6BcoUhfsNd5mrkqFQT+6MYYj+ByvFsdWWv
LvyOfW7Dv2wpnQmPMUl+8svuA2fVuNAXEMHcsRl71FmvKHI0Ye6aCwPQzX/raEiA
FLYA9JsJkjH0MddU1emlRAAogAscgBNryW/mp5KsWnU++qb8byFt5NmUxgGhTOPy
D4yzQK+hlkm4fnSXSrlW6zNIFIQ/vYeURMuOnFzBhVjLTL0YNHZwpAihmQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPv5CzGt0wR+P2eoDeKhQdf7Az0JMB8GA1UdIwQY
MBaAFNRL1WUwE/p8o09SKEMJpoiySeegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUV2VlpUQVQtbnlqVDFJb1F3bW1pTEpKNTZBLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YTNmOWItMWI4Ny00ODU1LWJhM2Mt
YjUwMTI2NjIwMjBkLzEvMS1fa0xNYTNUQkg0X1o2Z040cUZCMV9zRFBRay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMjYvOWEzZjliLTFiODctNDg1NS1iYTNjLWI1MDEyNjYyMDIw
ZC8xLzFFdlZaVEFULW55alQxSW9Rd21taUxKSjU2QS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAk3xRDAN
BgkqhkiG9w0BAQsFAAOCAQEAiWJ41b5TjYDH1yZoEBxJ6lsFlYte8tmLJZsolEB1
qH0GU8nGKgqwPywdh4t7JHGjVZ8kmlz1zF5FfupsuO8ot8xF8NIpLkBrlls6+bjS
Up1UDUN6Y7cc6p0v3rgzS7cVGKR/C61GPPi8Evm6AV41lMdQtu3w6pgq+16t/UD1
LT9SqsZaWFmE80h7P6B+cojaZGFCT/DAp1GVATYooNLNbDYPxDQAXkkUwbpEa9y3
ps9TIV+6C1GVo0JzILUvOg8Q01iH5D04/yrGoWUfbSpqT9GApkeStQUqh1mzh1su
7cwkqJiGyPPdfwbCDvRxSFaEAf9OA5VWmx06VfSzttpObQ==
-----END CERTIFICATE-----
Generated at Sun May 26 23:15:23 2024 by rpki-client on console-ams.rpki-client.org