Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/CI9DPUyEwKpnrSe_LV_S0qEQ5fs.roa
File: CI9DPUyEwKpnrSe_LV_S0qEQ5fs.roa (raw, json)
Hash identifier: ADOls/WuDpDSLqJbQe29YGo8zHm5Ee10q2Qbk787ihY=
Subject key identifier: 08:8F:43:3D:4C:84:C0:AA:67:AD:27:BF:2D:5F:D2:D2:A1:10:E5:FB
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 018CC3B71C57D8A437567A5B732F161863E9
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/CI9DPUyEwKpnrSe_LV_S0qEQ5fs.roa
Signing time: Mon 01 Jan 2024 06:30:06 +0000
ROA not before: Mon 01 Jan 2024 06:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20751
IP address blocks: 83.216.208.0/20 maxlen: 20
83.216.208.0/21 maxlen: 21
185.136.212.0/22 maxlen: 22
83.216.216.0/22 maxlen: 22
83.216.220.0/22 maxlen: 22
80.64.128.0/21 maxlen: 21
80.64.131.0/24 maxlen: 24
80.64.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 03:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:1c:57:d8:a4:37:56:7a:5b:73:2f:16:18:63:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: Jan 1 06:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=088f433d4c84c0aa67ad27bf2d5fd2d2a110e5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7c:16:b3:31:07:b9:f3:e2:43:b0:71:b1:79:
b3:c0:a1:eb:3f:20:ae:9c:7a:63:f4:e1:30:63:9f:
4a:14:c3:02:28:1e:30:7f:1a:12:ca:ca:45:b2:38:
18:bb:ad:81:51:26:f5:02:1a:77:40:ad:d9:3d:7a:
14:d6:0b:bc:ae:35:2f:66:4b:17:82:13:14:08:c5:
17:4d:85:1a:60:3c:9e:f0:be:e4:53:a5:60:43:3c:
f3:36:71:1b:d3:bf:6d:02:b3:91:d4:9f:77:74:8f:
e6:8d:72:c0:8b:b3:b5:58:a9:f0:b5:9f:06:2a:ea:
78:16:e9:33:76:06:c5:c3:f7:fa:da:2b:25:ec:aa:
9e:66:6b:c5:dd:3c:7e:48:92:ed:3f:0d:6a:c7:18:
64:85:af:37:be:bf:b5:48:d3:e5:60:87:50:c1:ae:
5c:ec:92:32:30:8b:9e:d6:1f:54:09:b2:6e:d2:b0:
7a:b3:06:31:71:bb:20:d3:d8:2a:54:5d:29:d2:89:
06:b6:ea:20:37:13:a1:c7:1c:8d:6b:87:0a:ed:68:
9b:75:a9:af:1c:55:f3:b8:01:05:f8:26:24:08:0e:
d1:09:e4:08:3d:61:83:3f:75:3f:d3:f2:ec:4f:09:
29:0c:a4:7e:88:4f:a3:1e:15:ed:ee:78:06:13:94:
ab:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8F:43:3D:4C:84:C0:AA:67:AD:27:BF:2D:5F:D2:D2:A1:10:E5:FB
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/CI9DPUyEwKpnrSe_LV_S0qEQ5fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.128.0-80.64.139.255
83.216.208.0/20
185.136.212.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:45:ff:f9:c5:97:75:75:97:84:d9:28:d4:e2:10:bc:48:10:
36:a8:39:58:b2:e8:85:78:d1:e6:39:14:64:c2:f6:ec:2b:53:
d7:fd:64:92:2b:57:b1:a5:91:7d:b4:b6:58:96:5f:a0:b3:0e:
64:37:4b:cc:fa:02:8c:af:24:5b:c9:7f:b1:78:6b:15:c9:44:
93:73:e6:2c:5f:7f:42:47:4c:8f:82:a0:33:e1:9f:38:2f:df:
62:14:2e:a1:79:3d:94:78:fd:bf:44:b9:08:55:12:82:22:82:
7f:a0:04:59:6b:c3:64:3b:2e:aa:61:ac:a5:3b:78:85:12:56:
8f:35:fe:d9:00:c5:d2:2f:7a:8d:09:5a:81:a3:76:71:35:73:
9b:2d:7b:e4:36:2d:18:1f:8d:41:10:79:5a:18:1d:18:f9:cd:
af:01:60:de:e0:7a:77:5c:4f:c3:7f:fd:01:50:62:00:53:b3:
19:30:a0:52:e9:80:c1:42:32:aa:db:c2:9b:31:5b:e0:75:e6:
be:d3:1a:dc:47:4a:8d:e2:8c:c1:28:6e:88:59:c4:40:83:7e:
c3:ff:11:0b:91:3f:98:60:cd:e7:e2:6c:fd:f1:1e:db:7d:e4:
5b:2f:e6:a7:83:44:9a:ce:d5:32:3b:b1:c0:5c:ee:60:11:8f:
2c:af:40:94
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYzDtxxX2KQ3Vnpbcy8WGGPpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTFjN2VkYmYxZDNjYzRmYjA3NTM4MWEzN2Y3NjI1NmI4
NzI4NWQwHhcNMjQwMTAxMDYzMDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODhmNDMzZDRjODRjMGFhNjdhZDI3YmYyZDVmZDJkMmExMTBlNWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXwWszEHufPiQ7BxsXmzwKHrPyCu
nHpj9OEwY59KFMMCKB4wfxoSyspFsjgYu62BUSb1Ahp3QK3ZPXoU1gu8rjUvZksX
ghMUCMUXTYUaYDye8L7kU6VgQzzzNnEb079tArOR1J93dI/mjXLAi7O1WKnwtZ8G
Kup4FukzdgbFw/f62isl7KqeZmvF3Tx+SJLtPw1qxxhkha83vr+1SNPlYIdQwa5c
7JIyMIue1h9UCbJu0rB6swYxcbsg09gqVF0p0okGtuogNxOhxxyNa4cK7Wibdamv
HFXzuAEF+CYkCA7RCeQIPWGDP3U/0/LsTwkpDKR+iE+jHhXt7ngGE5Sr5wIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFAiPQz1MhMCqZ60nvy1f0tKhEOX7MB8GA1UdIwQY
MBaAFLkRx+2/HTzE+wdTgaN/diVrhyhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8yM2IxNDgtZTBkZC00ZmE2LWFmNDQt
NjEzMDE3ODg2ZThiLzEvQ0k5RFBVeUV3S3BuclNlX0xWX1MwcUVRNWZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8yM2IxNDgtZTBkZC00ZmE2LWFmNDQtNjEzMDE3ODg2ZThi
LzEvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAdQQIAD
BAJQQIgDBART2NADBAK5iNQwDQYJKoZIhvcNAQELBQADggEBAKlF//nFl3V1l4TZ
KNTiELxIEDaoOViy6IV40eY5FGTC9uwrU9f9ZJIrV7GlkX20tliWX6CzDmQ3S8z6
AoyvJFvJf7F4axXJRJNz5ixff0JHTI+CoDPhnzgv32IULqF5PZR4/b9EuQhVEoIi
gn+gBFlrw2Q7LqphrKU7eIUSVo81/tkAxdIveo0JWoGjdnE1c5ste+Q2LRgfjUEQ
eVoYHRj5za8BYN7gendcT8N//QFQYgBTsxkwoFLpgMFCMqrbwpsxW+B15r7TGtxH
So3ijMEobohZxECDfsP/EQuRP5hgzefibP3xHtt95Fsv5qeDRJrO1TI7scBc7mAR
jyyvQJQ=
-----END CERTIFICATE-----
Generated at Sat Jun 8 08:54:32 2024 by rpki-client on console-ams.rpki-client.org