Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/1vbBnknt-Cgf3Vn3RJPhswPy5wc.roa
File: 1vbBnknt-Cgf3Vn3RJPhswPy5wc.roa (raw, json)
Hash identifier: +wqxxLrp/rP3IyyxKuc0/koV9jhjWzSyDSpvwgsXuzM=
Subject key identifier: D6:F6:C1:9E:49:ED:F8:28:1F:DD:59:F7:44:93:E1:B3:03:F2:E7:07
Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Certificate serial: 018D126B8A4009409B44968AAA6EBDD5D3CC
Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/1vbBnknt-Cgf3Vn3RJPhswPy5wc.roa
Signing time: Tue 16 Jan 2024 13:17:33 +0000
ROA not before: Tue 16 Jan 2024 13:17:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215739
IP address blocks: 84.252.80.0/22 maxlen: 22
84.252.80.0/24 maxlen: 24
84.252.81.0/24 maxlen: 24
84.252.82.0/24 maxlen: 24
84.252.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:12:6b:8a:40:09:40:9b:44:96:8a:aa:6e:bd:d5:d3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Validity
Not Before: Jan 16 13:17:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6f6c19e49edf8281fdd59f74493e1b303f2e707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3a:21:bf:83:51:ad:38:b9:b4:89:39:e8:04:
bd:b3:7a:54:dd:64:c8:99:63:1d:e1:70:14:b4:b5:
ae:1b:25:21:c6:c1:32:0b:66:79:3d:6d:0f:d6:1b:
70:be:1f:22:66:7f:f8:df:87:9e:de:f3:08:41:67:
e0:e2:27:3a:51:88:8a:8e:3c:62:da:02:a5:23:6c:
9e:31:ee:c6:fe:bf:a2:ee:fa:a1:5d:23:7b:72:b9:
18:9f:4d:bd:db:2c:82:6b:80:a5:72:2f:24:2e:5c:
ea:cd:8a:bf:a6:2c:50:6c:69:75:55:3a:57:01:09:
6d:f0:5a:3d:f1:3b:64:fe:d4:1a:cd:2c:01:b7:a3:
82:fa:1e:e3:c8:a2:11:4e:0c:90:26:03:05:0c:f0:
59:91:06:68:df:7e:59:2f:91:a5:44:ec:35:4a:db:
c9:3c:24:56:84:87:05:8c:be:84:e4:31:9c:6b:fc:
6e:80:a9:59:36:e0:bc:35:ad:c4:3b:6b:7c:27:f6:
46:ff:9f:4b:69:2e:48:b6:30:36:37:2f:a6:e2:c7:
60:a3:a1:50:f9:ef:2d:8a:27:1f:27:87:42:b6:e4:
56:3a:01:61:e4:22:45:14:04:78:75:56:36:bb:18:
65:42:73:90:4a:1d:a2:9a:d8:b7:8e:03:5a:01:1a:
57:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F6:C1:9E:49:ED:F8:28:1F:DD:59:F7:44:93:E1:B3:03:F2:E7:07
X509v3 Authority Key Identifier:
keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/1vbBnknt-Cgf3Vn3RJPhswPy5wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.80.0/22
Signature Algorithm: sha256WithRSAEncryption
77:97:ae:47:d8:33:15:57:48:92:bf:b6:74:16:7a:80:d5:44:
01:a1:81:a0:a8:61:a8:18:8f:16:d4:f2:fa:3a:f5:63:ae:07:
51:02:ef:ea:d0:38:8b:c7:05:2b:a7:10:ac:0b:b9:2f:45:07:
43:d7:b2:df:8e:7b:bf:59:c3:5f:ce:0f:6b:46:78:4a:2d:5b:
fa:24:d9:25:f3:fb:f7:c5:dc:51:e5:a0:b7:a2:db:f7:58:03:
70:ab:78:0f:20:22:6c:e5:2c:cd:41:30:09:ed:8a:05:02:24:
a3:9e:a0:97:4d:68:d5:b4:8e:82:35:bc:dc:e0:fd:2f:8e:84:
b7:0b:f0:e4:c8:e6:8c:06:d9:aa:6a:c0:7f:85:f4:c1:c3:e4:
30:ca:82:42:e3:f6:a2:d9:ff:b3:ae:8c:d4:84:bc:05:17:43:
d0:27:6c:0f:80:3d:5b:2d:54:ee:7e:3e:ce:16:29:2d:04:e7:
1e:19:76:9d:46:14:14:55:f8:8f:c1:98:fd:70:c3:10:42:26:
fa:5d:1c:d3:3d:fa:94:48:35:1c:bb:22:7c:93:3d:83:7c:93:
c2:28:5a:a0:f6:52:a4:39:23:06:52:97:f4:fd:ae:81:d7:bb:
26:46:e2:f9:d6:27:f2:9a:f9:ac:67:4f:08:67:b9:2a:b2:35:
19:c0:a2:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY0Sa4pACUCbRJaKqm691dPMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhOWExNjRjNjU2NDEyYjdkYWFmYWU4NTcxY2M2NzljYzZm
NTg3ZDAwHhcNMjQwMTE2MTMxNzMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmY2YzE5ZTQ5ZWRmODI4MWZkZDU5Zjc0NDkzZTFiMzAzZjJlNzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTohv4NRrTi5tIk56AS9s3pU3WTI
mWMd4XAUtLWuGyUhxsEyC2Z5PW0P1htwvh8iZn/434ee3vMIQWfg4ic6UYiKjjxi
2gKlI2yeMe7G/r+i7vqhXSN7crkYn0292yyCa4Clci8kLlzqzYq/pixQbGl1VTpX
AQlt8Fo98Ttk/tQazSwBt6OC+h7jyKIRTgyQJgMFDPBZkQZo335ZL5GlROw1StvJ
PCRWhIcFjL6E5DGca/xugKlZNuC8Na3EO2t8J/ZG/59LaS5ItjA2Ny+m4sdgo6FQ
+e8tiicfJ4dCtuRWOgFh5CJFFAR4dVY2uxhlQnOQSh2imti3jgNaARpXSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNb2wZ5J7fgoH91Z90ST4bMD8ucHMB8GA1UdIwQY
MBaAFKqaFkxlZBK32q+uhXHMZ5zG9YfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXBvV1RHVmtFcmZhcjY2RmNjeG5uTWIxaDlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hZmRhOWEtNjYzMC00YTlmLWI1MjIt
Mjg4MjljMDNjNjlhLzEvMXZiQm5rbnQtQ2dmM1ZuM1JKUGhzd1B5NXdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9hZmRhOWEtNjYzMC00YTlmLWI1MjItMjg4MjljMDNjNjlh
LzEvcXBvV1RHVmtFcmZhcjY2RmNjeG5uTWIxaDlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVPxQMA0G
CSqGSIb3DQEBCwUAA4IBAQB3l65H2DMVV0iSv7Z0FnqA1UQBoYGgqGGoGI8W1PL6
OvVjrgdRAu/q0DiLxwUrpxCsC7kvRQdD17Lfjnu/WcNfzg9rRnhKLVv6JNkl8/v3
xdxR5aC3otv3WANwq3gPICJs5SzNQTAJ7YoFAiSjnqCXTWjVtI6CNbzc4P0vjoS3
C/DkyOaMBtmqasB/hfTBw+QwyoJC4/ai2f+zrozUhLwFF0PQJ2wPgD1bLVTufj7O
FiktBOceGXadRhQUVfiPwZj9cMMQQib6XRzTPfqUSDUcuyJ8kz2DfJPCKFqg9lKk
OSMGUpf0/a6B17smRuL51ifymvmsZ08IZ7kqsjUZwKJe
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:14:39 2024 by rpki-client on console-ams.rpki-client.org