Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/ROXnBkdMCHYi2q6oOM5bwcmHWZg.roa
File: ROXnBkdMCHYi2q6oOM5bwcmHWZg.roa (raw, json)
Hash identifier: 4HY1BhCyqzV/Ow2+htoNGgOgBPL/E9DKUMIIpp3tJsg=
Subject key identifier: 44:E5:E7:06:47:4C:08:76:22:DA:AE:A8:38:CE:5B:C1:C9:87:59:98
Certificate issuer: /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Certificate serial: 018CCA997B920F8B1A061190959949172CE8
Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/ROXnBkdMCHYi2q6oOM5bwcmHWZg.roa
Signing time: Tue 02 Jan 2024 14:35:05 +0000
ROA not before: Tue 02 Jan 2024 14:35:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42580
IP address blocks: 81.20.240.0/20 maxlen: 20
185.218.12.0/22 maxlen: 22
78.29.128.0/18 maxlen: 18
128.65.224.0/19 maxlen: 19
2a0b:c1c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:7b:92:0f:8b:1a:06:11:90:95:99:49:17:2c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Validity
Not Before: Jan 2 14:35:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44e5e706474c087622daaea838ce5bc1c9875998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:8e:50:06:60:52:9c:ea:2e:97:8d:7a:6a:
4f:36:cb:52:91:6b:45:c0:33:70:b0:55:1b:b0:20:
dc:55:00:17:37:23:d7:b7:3b:ae:4f:34:2a:ed:6a:
27:0c:6a:6d:1c:da:fc:a3:4c:b6:57:15:95:c6:5b:
c6:b3:c7:61:d5:ed:8d:79:fd:d0:03:e6:16:84:1d:
d9:99:56:3a:cb:54:48:82:f7:c1:67:49:1d:21:d0:
4f:57:c8:73:d6:3d:41:4f:36:41:db:ab:c8:e4:21:
2f:d4:5b:e3:66:27:b2:d6:38:f3:2e:f8:7e:45:8e:
02:0f:6e:6f:31:e5:18:16:9d:7c:b3:ce:74:46:64:
69:c4:59:d9:3a:99:bd:21:94:97:db:17:7e:2c:40:
e9:f3:21:d7:c6:0b:a6:f8:10:8c:d5:1e:57:e7:e9:
c4:f5:1f:73:ad:5b:21:19:57:54:44:3d:6f:a2:12:
aa:e2:6d:bc:b0:46:71:ad:0f:a2:08:22:f7:5d:4b:
34:5a:5b:bc:d4:da:a1:4b:4c:77:ad:8b:c2:98:c6:
40:43:05:b0:99:5f:e1:9e:51:d6:c1:a4:78:e1:e3:
01:65:9d:ef:6f:39:a0:9c:2f:8f:1e:3c:3f:c1:d1:
4a:4e:c7:b4:3a:64:09:27:bd:42:ab:74:57:38:7c:
a2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E5:E7:06:47:4C:08:76:22:DA:AE:A8:38:CE:5B:C1:C9:87:59:98
X509v3 Authority Key Identifier:
keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/ROXnBkdMCHYi2q6oOM5bwcmHWZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.29.128.0/18
81.20.240.0/20
128.65.224.0/19
185.218.12.0/22
IPv6:
2a0b:c1c0::/29
Signature Algorithm: sha256WithRSAEncryption
0d:ee:27:d1:9d:8d:74:67:19:e8:56:99:c0:a0:ed:61:74:a6:
58:ff:3c:b9:20:b0:04:b4:93:78:57:71:b5:f3:f9:88:44:94:
3f:7c:02:67:74:96:45:a6:cb:06:26:73:14:3c:89:32:8a:5e:
0a:a8:2c:24:70:c3:a7:8e:b9:84:a8:ce:b2:b8:dd:69:43:c5:
44:31:f3:6e:72:96:f5:6d:e4:40:2a:e4:66:96:72:f6:d5:83:
e2:dc:0a:c8:fc:79:11:35:24:38:81:a1:80:92:a6:ce:e5:08:
cd:7c:9b:90:ec:f0:3a:65:54:83:54:6e:0e:32:38:e1:b9:e2:
32:1a:be:ae:be:f2:66:cb:12:62:2e:d1:c0:00:f1:56:16:94:
04:c0:38:22:f0:a7:f9:be:12:e5:04:9c:f1:49:81:e2:98:50:
d3:af:17:b3:a2:7c:c4:9c:dd:2a:74:b4:e3:fa:60:24:fc:fc:
5d:dd:1b:a4:54:ce:a8:af:02:62:bb:27:59:95:25:65:c0:75:
d6:95:e9:d4:98:db:77:85:e5:0c:86:68:5f:8b:cd:37:5d:71:
fc:fc:b7:e0:55:9d:c4:0e:fa:1d:e0:b7:f7:fc:dc:b1:d5:90:
47:75:e6:13:9b:38:91:9b:be:75:23:af:ef:93:3b:61:9d:c1:
4f:26:4a:23
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYzKmXuSD4saBhGQlZlJFyzoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZWViOWU2OTJiYTllOTNkOGI5NWE2NDg4ZDVjODc1NjA5
ZDRhZWMwHhcNMjQwMTAyMTQzNTA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGU1ZTcwNjQ3NGMwODc2MjJkYWFlYTgzOGNlNWJjMWM5ODc1OTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKGOUAZgUpzqLpeNempPNstSkWtF
wDNwsFUbsCDcVQAXNyPXtzuuTzQq7WonDGptHNr8o0y2VxWVxlvGs8dh1e2Nef3Q
A+YWhB3ZmVY6y1RIgvfBZ0kdIdBPV8hz1j1BTzZB26vI5CEv1FvjZiey1jjzLvh+
RY4CD25vMeUYFp18s850RmRpxFnZOpm9IZSX2xd+LEDp8yHXxgum+BCM1R5X5+nE
9R9zrVshGVdURD1vohKq4m28sEZxrQ+iCCL3XUs0Wlu81NqhS0x3rYvCmMZAQwWw
mV/hnlHWwaR44eMBZZ3vbzmgnC+PHjw/wdFKTse0OmQJJ71Cq3RXOHyiCQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFETl5wZHTAh2ItquqDjOW8HJh1mYMB8GA1UdIwQY
MBaAFDruueaSup6T2LlaZIjVyHVgnUrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3U2NTVwSzZucFBZdVZwa2lOWElkV0NkU3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zZTI1OWItYjZkYy00Y2Y0LWFjMTkt
NTAzM2Y4ZDc5YmU3LzEvUk9YbkJrZE1DSFlpMnE2b09NNWJ3Y21IV1pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zZTI1OWItYjZkYy00Y2Y0LWFjMTktNTAzM2Y4ZDc5YmU3
LzEvT3U2NTVwSzZucFBZdVZwa2lOWElkV0NkU3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQGTh2AAwQE
URTwAwQFgEHgAwQCudoMMA0EAgACMAcDBQMqC8HAMA0GCSqGSIb3DQEBCwUAA4IB
AQAN7ifRnY10ZxnoVpnAoO1hdKZY/zy5ILAEtJN4V3G18/mIRJQ/fAJndJZFpssG
JnMUPIkyil4KqCwkcMOnjrmEqM6yuN1pQ8VEMfNucpb1beRAKuRmlnL21YPi3ArI
/HkRNSQ4gaGAkqbO5QjNfJuQ7PA6ZVSDVG4OMjjhueIyGr6uvvJmyxJiLtHAAPFW
FpQEwDgi8Kf5vhLlBJzxSYHimFDTrxezonzEnN0qdLTj+mAk/Pxd3RukVM6orwJi
uydZlSVlwHXWlenUmNt3heUMhmhfi803XXH8/LfgVZ3EDvod4Lf3/Nyx1ZBHdeYT
mziRm751I6/vkzthncFPJkoj
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:57:16 2024 by rpki-client on console-fra.rpki-client.org