Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/p8Fjfj6WzV1_EFzN01foVpcKWYs.roa
File: p8Fjfj6WzV1_EFzN01foVpcKWYs.roa (raw, json)
Hash identifier: B28R67NCgoPTRAjbi2Ioj+KiWq/55u+HX+sGhr6GRoM=
Subject key identifier: A7:C1:63:7E:3E:96:CD:5D:7F:10:5C:CD:D3:57:E8:56:97:0A:59:8B
Certificate issuer: /CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270
Certificate serial: 018CC8011331DE8910ADA5FC411B55B8CB56
Authority key identifier: 03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/p8Fjfj6WzV1_EFzN01foVpcKWYs.roa
Signing time: Tue 02 Jan 2024 02:29:22 +0000
ROA not before: Tue 02 Jan 2024 02:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20799
IP address blocks: 185.115.68.0/22 maxlen: 24
80.68.32.0/19 maxlen: 24
77.241.176.0/20 maxlen: 24
2a02:df8::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:13:31:de:89:10:ad:a5:fc:41:1b:55:b8:cb:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270
Validity
Not Before: Jan 2 02:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7c1637e3e96cd5d7f105ccdd357e856970a598b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:89:55:cc:33:7b:c4:54:46:39:81:51:fd:ce:
ee:9b:b8:b5:21:a0:8e:3e:60:00:77:ff:a1:f9:a4:
55:be:c6:07:01:8c:94:80:d2:ab:ab:0d:19:01:c5:
cd:5c:a5:50:8c:59:1b:fe:41:58:5d:22:d8:bf:c0:
fa:2d:28:41:83:cb:5c:11:56:35:8f:3f:fc:67:46:
12:3f:7d:24:b7:a1:5c:49:3f:9e:48:db:57:f7:e1:
94:0d:30:6a:9a:eb:84:32:7c:b9:4d:01:f1:7a:97:
b9:01:d9:e0:59:eb:df:02:7a:fe:83:e5:03:de:fc:
c6:b3:f6:74:a0:42:71:54:51:ec:da:1a:7b:03:30:
4e:e9:b7:59:be:29:17:39:3b:ad:d5:fe:a1:fb:ae:
f0:66:b9:4f:94:c2:ff:e3:a3:75:ea:c6:f5:b9:cb:
c3:07:4c:cf:84:c0:b4:c2:61:77:8a:1e:47:83:93:
fb:88:21:23:98:16:93:f4:49:0a:68:5d:3d:7c:b8:
d4:1c:5f:e4:27:1e:eb:41:74:bb:61:e4:c8:b7:e0:
c4:ef:ee:1b:51:1b:ad:61:1c:da:7d:43:03:76:5e:
ee:81:f0:ec:70:6a:ee:ab:f5:44:35:8c:3b:06:15:
9a:ca:ca:79:71:32:73:04:d5:09:a9:73:fa:12:a5:
d9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C1:63:7E:3E:96:CD:5D:7F:10:5C:CD:D3:57:E8:56:97:0A:59:8B
X509v3 Authority Key Identifier:
keyid:03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/p8Fjfj6WzV1_EFzN01foVpcKWYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.241.176.0/20
80.68.32.0/19
185.115.68.0/22
IPv6:
2a02:df8::/29
Signature Algorithm: sha256WithRSAEncryption
5e:ce:9a:f4:4e:cb:87:26:35:d9:36:48:8b:a8:35:c6:cc:c3:
76:7b:36:f8:d2:c2:57:6f:d7:b1:16:83:a9:9f:d3:d0:42:ef:
77:65:6c:3c:b4:83:e4:ae:b7:eb:8f:45:81:dc:65:2e:36:91:
1b:f2:bc:e2:81:ca:3b:98:b1:29:96:3c:6e:6d:6e:9e:b5:06:
98:46:13:95:a6:b4:4e:3c:b2:12:25:7a:30:57:93:07:04:31:
df:25:6c:80:8d:dd:ae:45:1c:c7:47:d8:bd:ea:74:be:15:e7:
62:42:b5:16:6c:80:14:e6:c5:ae:fd:ef:1b:44:41:77:cc:35:
98:46:4b:a0:e0:35:4b:87:b9:25:2a:0c:3c:7e:c9:10:22:3d:
58:df:6d:60:df:81:50:79:a0:da:05:1e:2e:88:95:95:e6:45:
5c:70:31:f2:bb:c3:d2:d2:cc:8c:2d:98:82:5d:fc:32:0e:a4:
31:2b:ec:7c:0c:48:b2:4a:fe:d9:68:f5:dd:da:29:0c:47:05:
61:c9:64:2e:18:b5:cd:70:6b:96:4e:fe:73:1b:84:85:27:ff:
35:5c:5f:6b:b7:52:fa:1c:59:67:3f:fb:4b:f5:6d:23:27:46:
4d:c8:70:98:d2:39:16:8d:58:16:09:8b:b4:f5:97:1f:1b:1e:
ce:14:34:ca
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYzIARMx3okQraX8QRtVuMtWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYTZkYzJmMjY2OGViZGNmODZiNmMwMjU4YTgxODdlNWY3
Y2UyNzAwHhcNMjQwMTAyMDIyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2MxNjM3ZTNlOTZjZDVkN2YxMDVjY2RkMzU3ZTg1Njk3MGE1OThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YlVzDN7xFRGOYFR/c7um7i1IaCO
PmAAd/+h+aRVvsYHAYyUgNKrqw0ZAcXNXKVQjFkb/kFYXSLYv8D6LShBg8tcEVY1
jz/8Z0YSP30kt6FcST+eSNtX9+GUDTBqmuuEMny5TQHxepe5AdngWevfAnr+g+UD
3vzGs/Z0oEJxVFHs2hp7AzBO6bdZvikXOTut1f6h+67wZrlPlML/46N16sb1ucvD
B0zPhMC0wmF3ih5Hg5P7iCEjmBaT9EkKaF09fLjUHF/kJx7rQXS7YeTIt+DE7+4b
URutYRzafUMDdl7ugfDscGruq/VENYw7BhWaysp5cTJzBNUJqXP6EqXZ/wIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFKfBY34+ls1dfxBczdNX6FaXClmLMB8GA1UdIwQY
MBaAFAOm3C8maOvc+GtsAlioGH5ffOJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTZiY0x5Wm82OXo0YTJ3Q1dLZ1lmbDk4NG5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yOGIzMDMtNDdhNS00YTkyLWIwMmUt
ZWJkMGMzZWU0NGFlLzEvcDhGamZqNld6VjFfRUZ6TjAxZm9WcGNLV1lzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yOGIzMDMtNDdhNS00YTkyLWIwMmUtZWJkMGMzZWU0NGFl
LzEvQTZiY0x5Wm82OXo0YTJ3Q1dLZ1lmbDk4NG5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQETfGwAwQF
UEQgAwQCuXNEMA0EAgACMAcDBQMqAg34MA0GCSqGSIb3DQEBCwUAA4IBAQBezpr0
TsuHJjXZNkiLqDXGzMN2ezb40sJXb9exFoOpn9PQQu93ZWw8tIPkrrfrj0WB3GUu
NpEb8rzigco7mLEpljxubW6etQaYRhOVprROPLISJXowV5MHBDHfJWyAjd2uRRzH
R9i96nS+FediQrUWbIAU5sWu/e8bREF3zDWYRkug4DVLh7klKgw8fskQIj1Y321g
34FQeaDaBR4uiJWV5kVccDHyu8PS0syMLZiCXfwyDqQxK+x8DEiySv7ZaPXd2ikM
RwVhyWQuGLXNcGuWTv5zG4SFJ/81XF9rt1L6HFlnP/tL9W0jJ0ZNyHCY0jkWjVgW
CYu09ZcfGx7OFDTK
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:17:40 2024 by rpki-client on console-ams.rpki-client.org