Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/AXbGREjOLF_peQH08G64ol2xIms.roa
File: AXbGREjOLF_peQH08G64ol2xIms.roa (raw, json)
Hash identifier: nY/jmfN/XLBxU6G9yApbGNzAvNfmLhWAvkh8+l0J+Qk=
Subject key identifier: 01:76:C6:44:48:CE:2C:5F:E9:79:01:F4:F0:6E:B8:A2:5D:B1:22:6B
Certificate issuer: /CN=175ad33d4f6a4d0539c2770e2b4fbba94fcf1f1d
Certificate serial: 018CC9BC7A07556A9287271C6758FE1D14A7
Authority key identifier: 17:5A:D3:3D:4F:6A:4D:05:39:C2:77:0E:2B:4F:BB:A9:4F:CF:1F:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1rTPU9qTQU5wncOK0-7qU_PHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/AXbGREjOLF_peQH08G64ol2xIms.roa
Signing time: Tue 02 Jan 2024 10:33:41 +0000
ROA not before: Tue 02 Jan 2024 10:33:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44884
IP address blocks: 176.103.208.0/22 maxlen: 22
195.216.210.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1rTPU9qTQU5wncOK0-7qU_PHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:7a:07:55:6a:92:87:27:1c:67:58:fe:1d:14:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175ad33d4f6a4d0539c2770e2b4fbba94fcf1f1d
Validity
Not Before: Jan 2 10:33:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0176c64448ce2c5fe97901f4f06eb8a25db1226b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:d0:b0:aa:91:83:fd:53:57:a3:15:35:a6:
4e:10:69:f7:4b:8d:70:66:8c:c3:14:77:fc:86:7e:
e6:e4:3e:fe:71:62:f9:24:cb:6e:ff:52:6d:8c:79:
a0:61:98:62:7f:d8:70:0c:57:be:53:bc:64:74:ed:
c0:81:10:27:b2:9d:a8:63:ca:78:13:69:56:23:7d:
3a:72:33:89:ae:12:0e:0d:9a:a0:ab:47:3a:cb:e0:
3e:55:c8:39:3d:87:2e:fc:0c:62:ae:44:b0:67:1f:
a1:02:3a:a7:dc:38:52:91:4c:b4:fb:64:37:cd:2a:
c1:65:69:59:38:20:25:60:bf:f0:cd:0e:64:81:a4:
33:41:f8:1a:ea:6a:d8:9f:ce:37:d6:f6:0f:6d:d8:
1f:62:55:68:1b:73:fa:3f:52:dc:47:15:d3:07:40:
c3:f3:52:f5:96:58:cb:bf:71:57:04:ec:55:37:6b:
2d:81:c0:a0:5f:3f:33:68:01:d5:57:9b:95:6a:f3:
91:51:d4:98:f1:56:38:1a:22:fa:7e:10:e3:bf:e6:
d9:ff:96:6f:ad:d4:69:49:09:30:5c:ca:09:a1:21:
f7:1e:63:83:c6:4a:7b:46:b8:8c:67:e7:b1:2d:ef:
5f:2e:bb:1d:c2:58:dc:04:ed:91:78:21:70:3c:e5:
16:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:76:C6:44:48:CE:2C:5F:E9:79:01:F4:F0:6E:B8:A2:5D:B1:22:6B
X509v3 Authority Key Identifier:
keyid:17:5A:D3:3D:4F:6A:4D:05:39:C2:77:0E:2B:4F:BB:A9:4F:CF:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1rTPU9qTQU5wncOK0-7qU_PHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/AXbGREjOLF_peQH08G64ol2xIms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.208.0/22
195.216.210.0/23
Signature Algorithm: sha256WithRSAEncryption
82:e8:0f:69:7f:0e:39:2b:f7:f5:ee:b6:9b:7b:e1:45:6e:29:
03:2c:20:88:0d:31:4f:09:5c:e1:43:df:b3:80:d7:5c:fb:de:
23:f2:9a:5b:d9:f4:74:5c:f7:1d:38:f5:e2:8b:53:b5:67:f1:
0a:52:14:3c:2e:cc:81:1d:78:8d:c8:e2:d3:13:78:f2:4b:2a:
82:7d:d9:4a:11:cb:50:62:3f:99:51:a8:ab:20:11:95:2c:90:
63:2c:5e:b5:61:e8:af:44:e8:99:9e:d7:27:0e:7d:e8:d7:ab:
fa:5d:37:23:e6:72:33:a7:86:0b:cc:ba:23:64:ad:7f:1f:62:
39:5b:a2:e0:5c:d6:93:b0:4b:13:2f:73:04:44:a4:e4:06:3e:
15:ec:39:e2:9a:c1:55:94:bb:87:a5:86:fd:19:96:d6:19:30:
f0:96:6d:6d:6c:3d:15:11:62:6d:10:da:67:0e:2a:0b:b0:1d:
df:35:b3:6d:d0:2b:be:b1:2f:c4:aa:c6:58:1d:5a:c4:ba:f7:
3b:ca:77:31:0d:92:6b:34:a9:3a:16:c0:70:df:a5:77:d7:24:
ce:81:df:19:61:82:c4:26:6a:ea:34:cf:37:e1:e3:8a:3a:c2:
16:53:f7:e0:9d:84:4c:66:68:91:68:3f:d8:4b:42:2f:e8:a2:
f7:12:2e:e7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzJvHoHVWqShyccZ1j+HRSnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NWFkMzNkNGY2YTRkMDUzOWMyNzcwZTJiNGZiYmE5NGZj
ZjFmMWQwHhcNMjQwMTAyMTAzMzQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTc2YzY0NDQ4Y2UyYzVmZTk3OTAxZjRmMDZlYjhhMjVkYjEyMjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZzQsKqRg/1TV6MVNaZOEGn3S41w
ZozDFHf8hn7m5D7+cWL5JMtu/1JtjHmgYZhif9hwDFe+U7xkdO3AgRAnsp2oY8p4
E2lWI306cjOJrhIODZqgq0c6y+A+Vcg5PYcu/AxirkSwZx+hAjqn3DhSkUy0+2Q3
zSrBZWlZOCAlYL/wzQ5kgaQzQfga6mrYn8431vYPbdgfYlVoG3P6P1LcRxXTB0DD
81L1lljLv3FXBOxVN2stgcCgXz8zaAHVV5uVavORUdSY8VY4GiL6fhDjv+bZ/5Zv
rdRpSQkwXMoJoSH3HmODxkp7RriMZ+exLe9fLrsdwljcBO2ReCFwPOUWrQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAF2xkRIzixf6XkB9PBuuKJdsSJrMB8GA1UdIwQY
MBaAFBda0z1Pak0FOcJ3DitPu6lPzx8dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFyVFBVOXFUUVU1d25jT0swLTdxVV9QSHgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8wYWM3N2YtZGNlNi00ZWIyLTgwOGEt
MDcyMDNjZDgxNmI4LzEvQVhiR1JFak9MRl9wZVFIMDhHNjRvbDJ4SW1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8wYWM3N2YtZGNlNi00ZWIyLTgwOGEtMDcyMDNjZDgxNmI4
LzEvRjFyVFBVOXFUUVU1d25jT0swLTdxVV9QSHgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCsGfQAwQB
w9jSMA0GCSqGSIb3DQEBCwUAA4IBAQCC6A9pfw45K/f17rabe+FFbikDLCCIDTFP
CVzhQ9+zgNdc+94j8ppb2fR0XPcdOPXii1O1Z/EKUhQ8LsyBHXiNyOLTE3jySyqC
fdlKEctQYj+ZUairIBGVLJBjLF61YeivROiZntcnDn3o16v6XTcj5nIzp4YLzLoj
ZK1/H2I5W6LgXNaTsEsTL3MERKTkBj4V7DnimsFVlLuHpYb9GZbWGTDwlm1tbD0V
EWJtENpnDioLsB3fNbNt0Cu+sS/EqsZYHVrEuvc7yncxDZJrNKk6FsBw36V31yTO
gd8ZYYLEJmrqNM834eOKOsIWU/fgnYRMZmiRaD/YS0Iv6KL3Ei7n
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:44:21 2024 by rpki-client on console-fra.rpki-client.org