Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/47yXJilzqJ9S6TnssfUtD9wWrAk.roa
File: 47yXJilzqJ9S6TnssfUtD9wWrAk.roa (raw, json)
Hash identifier: Y/zlQiubaGUO8kyoMYyQYmj6vm5okPj8jabjJNxa9UY=
Subject key identifier: E3:BC:97:26:29:73:A8:9F:52:E9:39:EC:B1:F5:2D:0F:DC:16:AC:09
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 019054ACF14EB293B95B1FD55A2BB3C40870
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/47yXJilzqJ9S6TnssfUtD9wWrAk.roa
Signing time: Wed 26 Jun 2024 13:12:18 +0000
ROA not before: Wed 26 Jun 2024 13:12:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214887
IP address blocks: 80.73.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:54:ac:f1:4e:b2:93:b9:5b:1f:d5:5a:2b:b3:c4:08:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jun 26 13:12:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3bc97262973a89f52e939ecb1f52d0fdc16ac09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:72:de:b7:8a:c0:e5:74:43:98:e0:ce:db:02:
f5:f2:a0:14:b7:81:63:d3:9e:b1:2f:7a:30:3c:6c:
76:28:7b:a7:36:8e:30:18:8e:3c:1f:6d:dc:f1:28:
3a:43:45:f8:d4:95:54:0d:5d:b3:50:76:01:bd:d1:
a4:19:e6:cd:77:47:88:97:43:49:d1:45:4a:76:b7:
a7:01:6b:07:60:b2:3a:69:44:5f:0f:54:1e:41:a7:
ac:dd:b0:ce:3e:95:b2:81:b8:04:6d:a4:b4:5b:44:
1e:15:e6:ed:e9:a2:d1:c5:94:7b:bd:f9:e7:32:db:
ce:6f:57:54:3a:76:81:6f:ab:d1:65:d8:92:6a:9c:
c5:2b:7a:b9:ff:73:45:2a:c7:e4:54:62:ea:a6:d9:
34:2f:cd:63:69:60:6b:dc:df:90:db:32:40:8e:d4:
95:c8:f9:0c:5d:fd:a6:07:eb:8b:14:f4:68:e3:f2:
0e:7e:3b:94:eb:9d:ae:2c:f2:ab:d3:22:ab:30:c5:
bf:ab:fc:b6:b8:49:52:6c:a4:df:0a:5a:e5:ef:31:
b5:93:83:85:46:75:f6:19:4c:b2:dc:75:b6:27:24:
58:3e:36:90:35:c8:05:c7:6e:02:58:2d:be:85:19:
30:ec:d1:1b:99:3f:12:79:a2:b1:7b:be:1b:62:26:
9a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BC:97:26:29:73:A8:9F:52:E9:39:EC:B1:F5:2D:0F:DC:16:AC:09
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/47yXJilzqJ9S6TnssfUtD9wWrAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.193.0/24
Signature Algorithm: sha256WithRSAEncryption
77:40:9f:d2:9c:39:23:89:dc:c6:e6:f0:13:25:7b:66:c1:a3:
16:ed:4f:cd:17:df:36:f6:ac:f7:76:6e:6f:74:ac:43:59:db:
14:6b:1e:62:ad:e1:60:47:3a:5c:b3:02:2b:35:ec:f0:f4:fc:
c6:31:32:af:bd:bf:cf:fb:06:88:1b:86:ad:e6:35:0e:a1:ce:
63:d7:70:16:2e:3b:39:e1:67:48:79:fe:8f:c7:d6:d2:f7:23:
de:9f:19:cf:bf:98:5d:77:f4:d6:2e:7c:13:cd:4d:5c:e4:9c:
e7:f8:80:29:55:7e:b6:42:07:f9:a7:d5:9a:34:31:2b:61:59:
54:ec:eb:a6:1e:c2:2b:e9:e8:1e:31:f1:ff:1a:91:1d:11:92:
63:3d:cf:ca:50:d3:fd:27:4c:50:9a:d8:a8:eb:ba:13:13:14:
b9:be:5a:a1:a8:6f:97:af:25:ba:36:fe:9f:a2:d8:a5:25:61:
20:1a:24:4f:0b:5f:01:9e:85:71:63:24:3f:6b:0e:df:46:a2:
73:2a:c5:76:c1:d6:fe:51:14:cc:ab:30:ba:44:f3:32:93:ef:
36:6c:8d:4d:b0:6d:3f:b4:57:3b:9f:7f:54:44:93:f2:6b:37:
03:2c:6c:f8:09:fc:40:27:da:68:36:17:b8:7a:ed:24:8d:80:
49:24:30:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBUrPFOspO5Wx/VWiuzxAhwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYmE0OGM3ZTJjOWUwNWVkYTU0NmQ4OTkxNDZiODlmNzk5
ZGY4NWQwHhcNMjQwNjI2MTMxMjE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2JjOTcyNjI5NzNhODlmNTJlOTM5ZWNiMWY1MmQwZmRjMTZhYzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonLet4rA5XRDmODO2wL18qAUt4Fj
056xL3owPGx2KHunNo4wGI48H23c8Sg6Q0X41JVUDV2zUHYBvdGkGebNd0eIl0NJ
0UVKdrenAWsHYLI6aURfD1QeQaes3bDOPpWygbgEbaS0W0QeFebt6aLRxZR7vfnn
MtvOb1dUOnaBb6vRZdiSapzFK3q5/3NFKsfkVGLqptk0L81jaWBr3N+Q2zJAjtSV
yPkMXf2mB+uLFPRo4/IOfjuU652uLPKr0yKrMMW/q/y2uElSbKTfClrl7zG1k4OF
RnX2GUyy3HW2JyRYPjaQNcgFx24CWC2+hRkw7NEbmT8SeaKxe74bYiaaZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOO8lyYpc6ifUuk57LH1LQ/cFqwJMB8GA1UdIwQY
MBaAFL66SMfiyeBe2lRtiZFGuJ95nfhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYt
M2Q1MjIxODFhMmM0LzEvNDd5WEppbHpxSjlTNlRuc3NmVXREOXdXckFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYtM2Q1MjIxODFhMmM0
LzEvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEnBMA0G
CSqGSIb3DQEBCwUAA4IBAQB3QJ/SnDkjidzG5vATJXtmwaMW7U/NF9829qz3dm5v
dKxDWdsUax5ireFgRzpcswIrNezw9PzGMTKvvb/P+waIG4at5jUOoc5j13AWLjs5
4WdIef6Px9bS9yPenxnPv5hdd/TWLnwTzU1c5Jzn+IApVX62Qgf5p9WaNDErYVlU
7OumHsIr6egeMfH/GpEdEZJjPc/KUNP9J0xQmtio67oTExS5vlqhqG+XryW6Nv6f
otilJWEgGiRPC18BnoVxYyQ/aw7fRqJzKsV2wdb+URTMqzC6RPMyk+82bI1NsG0/
tFc7n39URJPyazcDLGz4CfxAJ9poNhe4eu0kjYBJJDAj
-----END CERTIFICATE-----
Generated at Tue Jul 2 22:52:48 2024 by rpki-client on console-ams.rpki-client.org