Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/wQRzizNNi9dmQ1StMiB-dC_0i_I.roa
File: wQRzizNNi9dmQ1StMiB-dC_0i_I.roa (raw, json)
Hash identifier: ssPOLcC/Fvj+ek+Q0QGurPj074Zf3WcAfB1EtEGVgzg=
Subject key identifier: C1:04:73:8B:33:4D:8B:D7:66:43:54:AD:32:20:7E:74:2F:F4:8B:F2
Certificate issuer: /CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
Certificate serial: 01917870796AF85DD768DF4D0B06F3C54365
Authority key identifier: 12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/wQRzizNNi9dmQ1StMiB-dC_0i_I.roa
Signing time: Thu 22 Aug 2024 04:55:22 +0000
ROA not before: Thu 22 Aug 2024 04:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400529
IP address blocks: 80.244.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:78:70:79:6a:f8:5d:d7:68:df:4d:0b:06:f3:c5:43:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
Validity
Not Before: Aug 22 04:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c104738b334d8bd7664354ad32207e742ff48bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:19:b9:f2:d5:0c:21:71:16:e4:6d:1f:af:e2:
b8:bf:82:76:26:8f:76:31:ad:7d:12:e9:ff:b6:ae:
4f:70:d2:f4:48:b4:0a:c1:d3:07:f8:63:e0:9f:44:
18:ec:6d:e1:ea:44:0c:75:52:b6:a4:86:cd:69:fb:
c8:04:b1:f1:ba:c7:db:8f:20:86:3f:23:da:ef:4a:
56:75:05:2e:09:9f:0b:42:ca:8d:21:34:0c:a6:5a:
31:48:c2:1b:fb:1f:0a:4f:b6:f4:a7:16:ae:9b:1b:
90:cf:86:16:d1:0c:5d:75:4d:f2:1c:6e:34:3b:ae:
1e:66:9a:02:20:ea:e6:7d:15:5c:a2:f2:90:2d:db:
a4:52:50:de:89:da:9b:b7:40:6d:36:d5:f4:36:6c:
3f:5a:ec:d0:e0:35:01:dc:b5:f6:a4:53:29:b7:77:
a8:59:1d:05:8b:ec:c4:43:bb:bf:a7:d9:6a:0d:c2:
56:3f:ed:f3:db:26:13:c1:8a:a1:04:fa:86:a9:67:
da:34:4c:77:a6:5d:b0:22:c4:de:ab:bb:15:59:f3:
fd:c4:d7:1c:c6:f1:05:4f:f8:0c:27:fd:45:95:da:
88:e2:0f:26:2f:e6:da:49:8e:0e:0a:c7:c9:29:f4:
42:6f:61:64:73:0b:56:39:7d:48:b0:89:92:e7:c4:
d8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:04:73:8B:33:4D:8B:D7:66:43:54:AD:32:20:7E:74:2F:F4:8B:F2
X509v3 Authority Key Identifier:
keyid:12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/wQRzizNNi9dmQ1StMiB-dC_0i_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.12.0/24
Signature Algorithm: sha256WithRSAEncryption
55:af:b1:81:d5:59:9e:da:13:40:fd:d0:52:4b:6a:82:8a:b2:
53:d5:bb:ab:0a:b7:41:f6:d7:9a:f2:a8:f8:2a:2e:5d:cb:34:
38:31:d4:4b:ef:03:49:ec:e2:1a:03:3f:b4:a7:4c:ff:7c:db:
bd:1f:fc:ad:86:98:cc:fa:66:bf:5e:9d:74:9d:17:94:f4:0d:
dd:a7:c9:ed:ee:2a:31:37:62:73:fc:db:a0:a2:4f:57:46:f3:
70:36:9a:9d:d4:43:15:6a:0b:79:e2:fc:92:58:ea:c3:28:92:
81:f5:16:18:2d:13:69:12:d1:3a:e9:35:b2:00:e9:2b:d0:a2:
ee:b6:29:2b:5c:4b:2c:b0:2b:02:34:8f:08:f9:5f:12:10:83:
2f:8d:88:3e:0a:94:2e:86:65:13:67:66:cc:d6:1d:ad:b8:1a:
ec:a5:8e:f2:5a:69:94:1c:28:46:8d:5b:ea:96:df:12:5d:30:
3c:66:9a:fe:a0:32:b1:e2:9e:cf:32:df:fb:f6:d5:d6:13:66:
e7:fb:6b:88:78:5f:c7:b0:43:c9:19:7e:42:98:b2:56:06:08:
84:43:84:70:e8:3d:3a:bb:d8:ef:bc:df:d0:8f:c8:84:51:39:
f3:57:00:70:f5:2d:44:fc:fe:6b:e2:b7:ee:88:bc:b8:79:8d:
e6:42:c3:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZF4cHlq+F3XaN9NCwbzxUNlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZGNiOGUxNDEwYzhjZDE4ZTUyNDU3ZjdlMWE5NTgwZDZk
YTUyMjYwHhcNMjQwODIyMDQ1NTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTA0NzM4YjMzNGQ4YmQ3NjY0MzU0YWQzMjIwN2U3NDJmZjQ4YmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhm58tUMIXEW5G0fr+K4v4J2Jo92
Ma19Eun/tq5PcNL0SLQKwdMH+GPgn0QY7G3h6kQMdVK2pIbNafvIBLHxusfbjyCG
PyPa70pWdQUuCZ8LQsqNITQMploxSMIb+x8KT7b0pxaumxuQz4YW0QxddU3yHG40
O64eZpoCIOrmfRVcovKQLdukUlDeidqbt0BtNtX0Nmw/WuzQ4DUB3LX2pFMpt3eo
WR0Fi+zEQ7u/p9lqDcJWP+3z2yYTwYqhBPqGqWfaNEx3pl2wIsTeq7sVWfP9xNcc
xvEFT/gMJ/1FldqI4g8mL+baSY4OCsfJKfRCb2FkcwtWOX1IsImS58TY5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMEEc4szTYvXZkNUrTIgfnQv9IvyMB8GA1UdIwQY
MBaAFBLcuOFBDIzRjlJFf34alYDW2lImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXR5NDRVRU1qTkdPVWtWX2ZocVZnTmJhVWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jM2MzYzQtMjdhMS00Yzc5LWI3ZGUt
Yjk0MDNmNjRiYTYwLzEvd1FSeml6Tk5pOWRtUTFTdE1pQi1kQ18waV9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9jM2MzYzQtMjdhMS00Yzc5LWI3ZGUtYjk0MDNmNjRiYTYw
LzEvRXR5NDRVRU1qTkdPVWtWX2ZocVZnTmJhVWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPQMMA0G
CSqGSIb3DQEBCwUAA4IBAQBVr7GB1Vme2hNA/dBSS2qCirJT1burCrdB9tea8qj4
Ki5dyzQ4MdRL7wNJ7OIaAz+0p0z/fNu9H/ythpjM+ma/Xp10nReU9A3dp8nt7iox
N2Jz/Nugok9XRvNwNpqd1EMVagt54vySWOrDKJKB9RYYLRNpEtE66TWyAOkr0KLu
tikrXEsssCsCNI8I+V8SEIMvjYg+CpQuhmUTZ2bM1h2tuBrspY7yWmmUHChGjVvq
lt8SXTA8Zpr+oDKx4p7PMt/79tXWE2bn+2uIeF/HsEPJGX5CmLJWBgiEQ4Rw6D06
u9jvvN/Qj8iEUTnzVwBw9S1E/P5r4rfuiLy4eY3mQsMI
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:51:13 2024 by rpki-client on console-ams.rpki-client.org