Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/_c66_n3KZ7jZRl_C2RRIyQOI1Kg.roa
File: _c66_n3KZ7jZRl_C2RRIyQOI1Kg.roa (raw, json)
Hash identifier: bNlEqz/5ZZJqPS5KxieXLp7nlinKJuDhlihfKGCpbsg=
Subject key identifier: FD:CE:BA:FE:7D:CA:67:B8:D9:46:5F:C2:D9:14:48:C9:03:88:D4:A8
Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial: 018CC9BBB5AC635086E83176E36475CBA263
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/_c66_n3KZ7jZRl_C2RRIyQOI1Kg.roa
Signing time: Tue 02 Jan 2024 10:32:51 +0000
ROA not before: Tue 02 Jan 2024 10:32:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60197
IP address blocks: 80.67.188.0/24 maxlen: 24
2001:913::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:b5:ac:63:50:86:e8:31:76:e3:64:75:cb:a2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Validity
Not Before: Jan 2 10:32:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdcebafe7dca67b8d9465fc2d91448c90388d4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:d6:af:12:77:db:fb:e9:bf:e1:18:12:e7:
29:b3:3d:4d:6a:90:5a:12:d8:b6:e6:3d:96:32:4f:
9d:f9:db:74:56:1c:88:89:62:bb:ce:98:4d:ec:91:
d3:59:34:3c:7e:b1:2e:99:a3:8c:8c:c3:d3:08:94:
52:c2:56:ed:f6:85:7c:b1:b6:02:95:b9:d3:56:6b:
8e:8f:f1:1c:ea:8e:d5:03:b0:c5:37:12:06:d6:0a:
81:41:65:57:7e:69:19:27:03:76:58:f1:5b:71:4f:
da:95:8c:fa:0b:b3:04:ec:52:5e:d5:cd:77:1d:32:
4f:cf:ee:bb:f6:53:f4:17:f2:b4:b3:85:b4:27:e9:
49:ab:a3:e6:e6:38:40:76:81:41:3f:66:4b:71:bd:
bb:73:ea:9f:23:b1:ce:f0:8e:1e:9e:25:cd:0b:1d:
bc:3a:9b:9f:81:7e:3f:ce:2d:2c:cb:c8:8a:e8:0e:
fd:df:d1:53:34:87:7d:2c:71:41:92:a4:c6:60:be:
3a:17:af:29:e1:43:e9:b3:29:08:f4:ab:50:a2:f8:
f8:e8:48:e0:cb:52:d7:a5:7c:fc:1b:7b:f5:ee:49:
15:60:7c:3d:f3:9b:1a:28:5a:90:87:2a:96:19:02:
3a:3a:0c:79:15:3e:1c:69:2b:fd:93:18:11:dc:e3:
e8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CE:BA:FE:7D:CA:67:B8:D9:46:5F:C2:D9:14:48:C9:03:88:D4:A8
X509v3 Authority Key Identifier:
keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/_c66_n3KZ7jZRl_C2RRIyQOI1Kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.188.0/24
IPv6:
2001:913::/36
Signature Algorithm: sha256WithRSAEncryption
23:52:ae:1b:f5:7f:47:f4:23:98:2d:3b:9c:16:94:9e:53:28:
56:98:01:d2:8d:44:4c:21:37:08:01:2b:75:ff:1f:8b:40:1e:
29:3c:d7:48:c0:f7:ac:f4:57:0e:62:c6:20:60:8c:b0:e3:76:
f3:8b:39:16:5b:e8:87:57:75:66:ad:75:a1:41:a5:9e:d1:c3:
6b:8b:4c:59:8a:da:a1:a6:c5:d5:e4:a3:32:0a:87:67:80:0a:
d0:f6:3e:85:42:5a:12:47:17:71:76:42:33:30:25:16:bf:28:
ef:19:c5:bd:8f:f5:7c:24:88:83:a8:5c:3c:b4:96:2b:bc:ef:
8a:3b:3a:e5:b6:ac:24:d6:bc:da:d3:db:40:e3:32:ff:ef:e2:
b7:68:02:d2:a4:96:03:7d:6f:dc:81:ef:52:c9:be:e9:68:e8:
c2:74:de:4c:8c:94:c1:6c:6c:94:ea:58:fc:11:90:e5:bb:f5:
e0:c8:73:8a:94:60:d5:d9:a0:12:83:73:33:6b:29:33:10:d9:
26:d6:13:b7:9f:8a:85:c0:04:ca:b2:8f:75:81:0a:03:8e:23:
82:ee:b3:4f:88:bf:ee:a6:30:32:07:8c:bc:8d:93:0e:54:e1:
93:47:ca:42:22:04:23:a9:7d:a7:58:6c:28:90:a7:b4:c1:3a:
00:d1:7a:d4
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYzJu7WsY1CG6DF242R1y6JjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZWQyZmJiNzIxM2ZiZjMyYWQ0YzA4N2Y4YjBiMjJjZWNl
ZjRmZWEwHhcNMjQwMTAyMTAzMjUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGNlYmFmZTdkY2E2N2I4ZDk0NjVmYzJkOTE0NDhjOTAzODhkNGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWPWrxJ32/vpv+EYEucpsz1NapBa
Eti25j2WMk+d+dt0VhyIiWK7zphN7JHTWTQ8frEumaOMjMPTCJRSwlbt9oV8sbYC
lbnTVmuOj/Ec6o7VA7DFNxIG1gqBQWVXfmkZJwN2WPFbcU/alYz6C7ME7FJe1c13
HTJPz+679lP0F/K0s4W0J+lJq6Pm5jhAdoFBP2ZLcb27c+qfI7HO8I4eniXNCx28
OpufgX4/zi0sy8iK6A7939FTNId9LHFBkqTGYL46F68p4UPpsykI9KtQovj46Ejg
y1LXpXz8G3v17kkVYHw985saKFqQhyqWGQI6Ogx5FT4caSv9kxgR3OPoCwIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFP3Ouv59yme42UZfwtkUSMkDiNSoMB8GA1UdIwQY
MBaAFHLtL7tyE/vzKtTAh/iwsizs70/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTkt
YTY1MjMzYjNlOTc1LzEvX2M2Nl9uM0taN2paUmxfQzJSUkl5UU9JMUtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTktYTY1MjMzYjNlOTc1
LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAUEO8MA4E
AgACMAgDBgQgAQkTADANBgkqhkiG9w0BAQsFAAOCAQEAI1KuG/V/R/QjmC07nBaU
nlMoVpgB0o1ETCE3CAErdf8fi0AeKTzXSMD3rPRXDmLGIGCMsON284s5Flvoh1d1
Zq11oUGlntHDa4tMWYraoabF1eSjMgqHZ4AK0PY+hUJaEkcXcXZCMzAlFr8o7xnF
vY/1fCSIg6hcPLSWK7zvijs65basJNa82tPbQOMy/+/it2gC0qSWA31v3IHvUsm+
6WjownTeTIyUwWxslOpY/BGQ5bv14MhzipRg1dmgEoNzM2spMxDZJtYTt5+KhcAE
yrKPdYEKA44jgu6zT4i/7qYwMgeMvI2TDlThk0fKQiIEI6l9p1hsKJCntME6ANF6
1A==
-----END CERTIFICATE-----
Generated at Sat Jun 8 05:12:30 2024 by rpki-client on console-fra.rpki-client.org