Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/2Nva2FWD0XRAjgHuXYdCRG-0-4U.roa
File: 2Nva2FWD0XRAjgHuXYdCRG-0-4U.roa (raw, json)
Hash identifier: kuNM1yCLCQOYKVQAFIYZZ929wa67STu2M6a2vT7W/88=
Subject key identifier: D8:DB:DA:D8:55:83:D1:74:40:8E:01:EE:5D:87:42:44:6F:B4:FB:85
Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial: 018CCA2BCCEAC60ACB84916450FE5F40F2CE
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/2Nva2FWD0XRAjgHuXYdCRG-0-4U.roa
Signing time: Tue 02 Jan 2024 12:35:17 +0000
ROA not before: Tue 02 Jan 2024 12:35:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2792
IP address blocks: 80.159.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:cc:ea:c6:0a:cb:84:91:64:50:fe:5f:40:f2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Validity
Not Before: Jan 2 12:35:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8dbdad85583d174408e01ee5d8742446fb4fb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2d:51:15:1c:90:fb:01:d4:93:0f:b6:66:94:
2f:5c:0b:53:33:bd:75:9c:34:26:dd:20:f2:f1:40:
d8:cb:4e:58:9d:4e:b5:80:03:83:f1:05:d4:70:49:
d2:89:d9:03:c1:de:e2:70:c8:2f:18:da:09:c6:5b:
11:ae:e2:85:81:a8:8b:08:5a:69:54:76:e9:c4:4f:
a7:98:64:4a:37:84:3d:99:c8:64:05:2d:8a:bd:b7:
10:62:d7:a7:fd:ed:99:8a:81:18:a3:d0:c4:29:af:
d4:d5:f0:b0:e1:61:04:a7:40:be:a0:b8:cb:a5:ad:
00:9e:f4:5d:ef:39:b7:56:e1:57:21:fe:c8:82:8a:
da:19:96:aa:1a:72:d2:98:4d:7d:54:ff:d9:9c:65:
18:e7:22:96:5b:a3:7b:96:39:49:d4:84:6d:ef:b6:
79:71:26:63:f5:f6:76:b6:98:ae:ea:48:29:92:41:
55:48:c8:dc:3d:75:89:21:e2:d0:8e:80:73:3f:43:
e4:91:dc:79:af:15:95:3f:e4:03:4d:3c:66:91:4c:
06:b0:ff:e8:8d:1d:ea:cf:3a:73:ff:a0:66:57:22:
e2:1a:f8:c3:f7:7b:93:3b:cb:38:1b:c8:d9:bd:65:
bb:e1:2f:6d:d4:19:f8:da:a9:22:64:51:73:14:31:
3c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DB:DA:D8:55:83:D1:74:40:8E:01:EE:5D:87:42:44:6F:B4:FB:85
X509v3 Authority Key Identifier:
keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/2Nva2FWD0XRAjgHuXYdCRG-0-4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.159.224.0/19
Signature Algorithm: sha256WithRSAEncryption
3a:09:c2:b6:3a:10:94:eb:71:68:3b:80:33:2f:aa:12:b6:f4:
69:b2:e5:d7:d3:4f:1c:f6:ea:0b:6a:a2:97:a1:3c:b5:45:9e:
05:b1:dd:dc:f9:68:0d:35:44:8a:58:20:36:9e:6e:9b:86:ad:
2c:a6:02:5e:2c:94:7b:95:9f:1a:9b:54:2b:a3:24:83:55:fa:
6d:fc:bb:59:c4:38:95:f6:9b:04:30:76:b7:dd:96:d1:fc:fd:
c8:5e:81:39:7f:c8:c2:9f:d9:f8:d1:e7:d1:d3:ba:78:76:d6:
11:56:d4:5b:1c:c7:42:27:6b:5a:47:3a:9b:c4:88:fd:ed:71:
e0:60:67:c1:37:a4:73:6e:63:71:8e:4d:fe:26:e3:4b:ca:f5:
0f:21:eb:0d:a4:63:9f:62:a4:80:23:b4:aa:9a:5d:61:df:d0:
38:fd:65:c2:d8:56:51:10:81:bd:3e:54:52:61:c2:85:e8:94:
d0:46:3e:15:a0:40:1a:1a:f7:ba:75:80:75:6d:fc:15:59:84:
61:07:27:3c:65:91:f9:15:16:ba:e6:e3:6f:07:58:df:57:f8:
09:62:c0:a5:cc:62:ea:01:99:31:18:3e:6a:21:9d:5d:7b:f7:
a4:c8:03:fa:42:b0:0d:94:9c:ef:b7:e3:f8:6f:aa:a6:f1:43:
79:5f:3a:e0
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzKK8zqxgrLhJFkUP5fQPLOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZDcxMDBlNzdlZDkxMTlkNjZlMjMyMWJiNjcxMWQ3ZTc2
MDk4MmIwHhcNMjQwMTAyMTIzNTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGRiZGFkODU1ODNkMTc0NDA4ZTAxZWU1ZDg3NDI0NDZmYjRmYjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly1RFRyQ+wHUkw+2ZpQvXAtTM711
nDQm3SDy8UDYy05YnU61gAOD8QXUcEnSidkDwd7icMgvGNoJxlsRruKFgaiLCFpp
VHbpxE+nmGRKN4Q9mchkBS2KvbcQYten/e2ZioEYo9DEKa/U1fCw4WEEp0C+oLjL
pa0AnvRd7zm3VuFXIf7IgoraGZaqGnLSmE19VP/ZnGUY5yKWW6N7ljlJ1IRt77Z5
cSZj9fZ2tpiu6kgpkkFVSMjcPXWJIeLQjoBzP0Pkkdx5rxWVP+QDTTxmkUwGsP/o
jR3qzzpz/6BmVyLiGvjD93uTO8s4G8jZvWW74S9t1Bn42qkiZFFzFDE8HQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFNjb2thVg9F0QI4B7l2HQkRvtPuFMB8GA1UdIwQY
MBaAFPrXEA537ZEZ1m4jIbtnEdfnYJgrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10Y1FEbmZ0a1JuV2JpTWh1MmNSMS1kZ21Dcy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvMDFkNDExLWQ5MTUtNDI3Ny04ZmUy
LTc2YjBkZGEyYmYzZS8xLzJOdmEyRldEMFhSQWpnSHVYWWRDUkctMC00VS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvM2UvMDFkNDExLWQ5MTUtNDI3Ny04ZmUyLTc2YjBkZGEyYmYz
ZS8xLzEtdGNRRG5mdGtSbldiaU1odTJjUjEtZGdtQ3MuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAVQn+Aw
DQYJKoZIhvcNAQELBQADggEBADoJwrY6EJTrcWg7gDMvqhK29Gmy5dfTTxz26gtq
opehPLVFngWx3dz5aA01RIpYIDaebpuGrSymAl4slHuVnxqbVCujJINV+m38u1nE
OJX2mwQwdrfdltH8/chegTl/yMKf2fjR59HTunh21hFW1Fscx0Ina1pHOpvEiP3t
ceBgZ8E3pHNuY3GOTf4m40vK9Q8h6w2kY59ipIAjtKqaXWHf0Dj9ZcLYVlEQgb0+
VFJhwoXolNBGPhWgQBoa97p1gHVt/BVZhGEHJzxlkfkVFrrm428HWN9X+AliwKXM
YuoBmTEYPmohnV1796TIA/pCsA2UnO+34/hvqqbxQ3lfOuA=
-----END CERTIFICATE-----
Generated at Tue May 21 10:57:28 2024 by rpki-client on console-fra.rpki-client.org