Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/IBtxNXj9Lvp3Ho-2qLs6Hg0gdfw.roa
File: IBtxNXj9Lvp3Ho-2qLs6Hg0gdfw.roa (raw, json)
Hash identifier: Lk/icR4gYAyV3S4xGFU6dMu43ASRK7sEDO+BVB18iuo=
Subject key identifier: 20:1B:71:35:78:FD:2E:FA:77:1E:8F:B6:A8:BB:3A:1E:0D:20:75:FC
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 018FF2439AC3F181C125D07CBE146C1ABDA9
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/IBtxNXj9Lvp3Ho-2qLs6Hg0gdfw.roa
Signing time: Fri 07 Jun 2024 10:34:27 +0000
ROA not before: Fri 07 Jun 2024 10:34:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199707
IP address blocks: 77.93.157.0/24 maxlen: 24
89.28.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f2:43:9a:c3:f1:81:c1:25:d0:7c:be:14:6c:1a:bd:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Jun 7 10:34:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=201b713578fd2efa771e8fb6a8bb3a1e0d2075fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b3:e6:ae:d6:cd:bc:d4:11:ae:4f:6c:3a:9b:
29:b6:c2:ba:7e:9d:5f:e4:42:7f:5e:21:3e:93:d4:
b4:c2:9e:04:2c:0f:e1:7d:94:4b:c0:96:fa:a7:67:
16:c9:3b:be:86:cb:82:83:b7:dc:b1:be:3c:14:49:
3c:67:c0:ed:30:95:39:30:97:7b:42:15:b4:65:cb:
64:1b:e8:ac:5c:bb:b5:35:08:d5:b4:11:dd:0c:df:
41:e2:b9:96:fc:eb:f0:2d:b9:4d:f2:7a:7d:07:3d:
93:96:c7:6c:4a:e2:d9:8d:e9:ab:f8:74:cf:89:97:
ac:c5:5d:2b:a7:51:4a:b9:fb:f3:a9:80:a4:80:5c:
25:76:f6:a4:ff:24:ef:2e:3b:2e:e3:c4:7c:8d:29:
ef:f1:15:0b:8f:2c:e1:b9:ce:d5:25:cc:20:f4:49:
5f:05:f8:45:cf:5d:22:77:b8:6b:0d:0d:c2:b6:91:
cc:c1:c8:5d:90:e4:5d:4d:c2:eb:16:6d:d9:0c:20:
16:88:a9:82:2b:a4:f0:9d:07:04:b5:fe:b3:a2:9a:
68:27:1b:a2:68:4a:10:b1:45:4d:30:72:f9:c1:7f:
a5:00:21:50:92:75:de:fd:1c:76:e0:3d:5b:3b:e1:
f8:1d:89:6c:c9:88:dc:02:21:36:47:a6:10:8c:b3:
cf:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1B:71:35:78:FD:2E:FA:77:1E:8F:B6:A8:BB:3A:1E:0D:20:75:FC
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/IBtxNXj9Lvp3Ho-2qLs6Hg0gdfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.157.0/24
89.28.239.0/24
Signature Algorithm: sha256WithRSAEncryption
41:72:d8:7a:fc:92:d7:76:cc:d3:af:5b:06:6b:f6:be:5d:00:
aa:78:50:58:50:2b:93:d9:91:bd:06:05:09:dc:9e:c6:36:85:
2a:60:3c:67:a1:fe:f0:ce:12:eb:36:90:b4:bf:8f:f4:f9:d1:
0b:bd:ed:9e:a5:0b:61:39:75:c2:bf:88:e1:a6:55:90:65:df:
f4:37:0e:a2:71:7b:68:97:df:88:3a:c5:05:a2:18:b1:44:cc:
63:f0:b2:f1:30:0d:82:59:34:3a:57:b7:9d:f8:31:f5:cf:0d:
cb:ab:57:9b:c6:17:37:48:3e:bb:4d:7c:81:c2:71:71:75:3e:
78:35:f6:32:57:7d:aa:01:c5:07:ad:dd:8d:0f:26:1d:6c:04:
22:86:40:05:4f:f9:69:75:67:75:63:57:5b:3c:de:1d:5d:a6:
05:ba:83:83:10:ad:56:75:68:b9:bb:3a:c2:b4:09:67:55:8e:
dc:33:aa:3b:48:e2:1e:0f:9b:08:87:b1:4c:65:b6:60:d4:0a:
ef:f3:ae:5c:8a:29:e6:6d:2b:07:7a:56:9e:69:91:5c:ac:62:
4b:94:ce:40:a3:08:d6:42:7e:81:2a:c0:04:65:d1:91:91:fc:
4b:cf:e2:83:b9:15:df:c9:40:94:76:f0:92:0d:e6:28:68:00:
9c:a7:f3:a5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY/yQ5rD8YHBJdB8vhRsGr2pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNWEzNDE3ZmJlMjVjMmU0NjdjMTg0ODVjMTgxYTc3NzZm
OTZmZjQwHhcNMjQwNjA3MTAzNDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDFiNzEzNTc4ZmQyZWZhNzcxZThmYjZhOGJiM2ExZTBkMjA3NWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rPmrtbNvNQRrk9sOpsptsK6fp1f
5EJ/XiE+k9S0wp4ELA/hfZRLwJb6p2cWyTu+hsuCg7fcsb48FEk8Z8DtMJU5MJd7
QhW0ZctkG+isXLu1NQjVtBHdDN9B4rmW/OvwLblN8np9Bz2TlsdsSuLZjemr+HTP
iZesxV0rp1FKufvzqYCkgFwldvak/yTvLjsu48R8jSnv8RULjyzhuc7VJcwg9Elf
BfhFz10id7hrDQ3CtpHMwchdkORdTcLrFm3ZDCAWiKmCK6TwnQcEtf6zoppoJxui
aEoQsUVNMHL5wX+lACFQknXe/Rx24D1bO+H4HYlsyYjcAiE2R6YQjLPP6wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCAbcTV4/S76dx6Ptqi7Oh4NIHX8MB8GA1UdIwQY
MBaAFIpaNBf74lwuRnwYSFwYGnd2+W/0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWxvMEZfdmlYQzVHZkJoSVhCZ2FkM2I1Yl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85YzZlMDctNjkzZi00NmNlLTg2NDYt
ZDdhYmNkMGVmNjRhLzEvSUJ0eE5YajlMdnAzSG8tMnFMczZIZzBnZGZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85YzZlMDctNjkzZi00NmNlLTg2NDYtZDdhYmNkMGVmNjRh
LzEvaWxvMEZfdmlYQzVHZkJoSVhCZ2FkM2I1Yl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATV2dAwQA
WRzvMA0GCSqGSIb3DQEBCwUAA4IBAQBBcth6/JLXdszTr1sGa/a+XQCqeFBYUCuT
2ZG9BgUJ3J7GNoUqYDxnof7wzhLrNpC0v4/0+dELve2epQthOXXCv4jhplWQZd/0
Nw6icXtol9+IOsUFohixRMxj8LLxMA2CWTQ6V7ed+DH1zw3Lq1ebxhc3SD67TXyB
wnFxdT54NfYyV32qAcUHrd2NDyYdbAQihkAFT/lpdWd1Y1dbPN4dXaYFuoODEK1W
dWi5uzrCtAlnVY7cM6o7SOIeD5sIh7FMZbZg1Arv865ciinmbSsHelaeaZFcrGJL
lM5AowjWQn6BKsAEZdGRkfxLz+KDuRXfyUCUdvCSDeYoaACcp/Ol
-----END CERTIFICATE-----
Generated at Mon Nov 25 20:26:54 2024 by rpki-client on console-fra.rpki-client.org