Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/1-r2YH42SRoVFiIYfpX9dfOJc5-k.roa
File: 1-r2YH42SRoVFiIYfpX9dfOJc5-k.roa (raw, json)
Hash identifier: OiNMq8FZEpOgDgTyZtkm4smH0LJsIxEU7vjE8kIiqBg=
Subject key identifier: FA:BD:98:1F:8D:92:46:85:45:88:86:1F:A5:7F:5D:7C:E2:5C:E7:E9
Certificate issuer: /CN=17dbd5acf1f9c75d18a1f75031114c48f0b23363
Certificate serial: 018CC86F59F1D22B35ACF7B89262F71D7F15
Authority key identifier: 17:DB:D5:AC:F1:F9:C7:5D:18:A1:F7:50:31:11:4C:48:F0:B2:33:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/1-r2YH42SRoVFiIYfpX9dfOJc5-k.roa
Signing time: Tue 02 Jan 2024 04:29:49 +0000
ROA not before: Tue 02 Jan 2024 04:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25156
IP address blocks: 85.89.128.0/21 maxlen: 21
85.89.128.0/19 maxlen: 19
2a00:65c0::/32 maxlen: 32
2a00:65c0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:59:f1:d2:2b:35:ac:f7:b8:92:62:f7:1d:7f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17dbd5acf1f9c75d18a1f75031114c48f0b23363
Validity
Not Before: Jan 2 04:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fabd981f8d9246854588861fa57f5d7ce25ce7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:db:48:63:3a:4c:84:64:d8:85:0d:0d:9b:10:
ec:4a:5b:77:6d:4c:82:cf:48:7e:bf:7a:44:1d:2d:
c2:cf:ca:ad:f6:7f:aa:f0:f7:0f:0c:f0:f3:dc:d6:
a3:bf:74:80:2e:7c:09:ad:3f:12:b0:ad:07:75:08:
2d:0c:f5:78:7c:c2:56:5f:b0:c3:91:5e:eb:78:d2:
0b:23:7f:87:d6:14:27:cc:e7:a7:d8:76:8e:61:79:
d9:5e:15:50:04:fc:20:72:d4:7d:b7:de:af:c4:ea:
58:dc:63:a2:c7:a5:92:29:f4:58:dd:6f:42:3f:35:
dd:73:7d:1c:1f:44:eb:30:2b:47:8b:e2:15:16:4d:
e4:d2:bf:e9:5c:0e:64:43:0a:27:13:b5:54:a3:44:
b5:50:12:bd:12:9e:1c:d1:77:13:84:74:c9:b1:63:
9c:ee:b9:86:2e:ab:23:8c:86:22:e8:6d:d2:ab:05:
59:83:b3:a7:d1:58:f2:7f:20:8d:57:26:e4:e9:e8:
4b:62:d6:b6:27:1f:39:04:8a:28:e4:05:78:0f:c6:
8e:32:58:db:8b:d5:4b:e6:99:f4:90:ca:d8:aa:94:
e0:05:f0:19:95:93:15:25:c3:3a:81:c4:68:0e:96:
d7:62:a8:5d:f1:4b:d4:c7:42:44:6d:0f:7a:9c:67:
c7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BD:98:1F:8D:92:46:85:45:88:86:1F:A5:7F:5D:7C:E2:5C:E7:E9
X509v3 Authority Key Identifier:
keyid:17:DB:D5:AC:F1:F9:C7:5D:18:A1:F7:50:31:11:4C:48:F0:B2:33:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/1-r2YH42SRoVFiIYfpX9dfOJc5-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.89.128.0/19
IPv6:
2a00:65c0::/32
Signature Algorithm: sha256WithRSAEncryption
60:26:fb:69:83:a8:01:c3:11:3e:4b:e3:b9:72:72:65:74:d5:
ef:2c:13:8d:ec:8d:6f:fc:8d:98:16:3e:d4:d6:e5:c8:33:a8:
59:bf:f2:28:ba:ed:82:2b:0a:05:d8:d8:02:e5:02:4b:0c:da:
ff:cc:2c:ef:44:37:64:a9:a0:e3:17:e3:bd:55:04:81:6b:95:
f5:a5:38:cb:fa:0d:e1:06:cb:19:26:f4:5b:d9:4b:a3:4f:85:
07:04:9d:a5:fc:6d:1a:26:5e:cf:94:a7:a6:88:0f:ce:51:af:
0b:e9:2f:24:83:40:73:1a:39:ec:a0:8c:49:aa:42:06:14:bb:
31:1c:21:9b:d4:62:db:9b:bf:6f:81:4c:99:54:24:94:42:58:
f2:14:82:ee:63:03:39:bc:0b:d1:65:7c:ea:3e:02:cb:7c:f0:
77:01:bc:38:26:7a:73:83:80:7d:c6:92:bd:d7:b0:2e:99:d7:
27:bc:31:cf:f7:bb:58:2b:f8:7e:71:28:93:38:d0:c1:1b:08:
c2:ee:db:14:95:79:1d:59:12:d8:2f:f7:ff:b0:0c:e5:21:54:
10:0a:64:b8:b0:8e:8c:65:65:fe:39:15:b4:7f:b7:1b:11:8e:
db:e1:ca:94:41:18:54:0e:8f:f7:77:8e:03:44:98:3f:8d:20:
5b:e5:cc:df
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYzIb1nx0is1rPe4kmL3HX8VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZGJkNWFjZjFmOWM3NWQxOGExZjc1MDMxMTE0YzQ4ZjBi
MjMzNjMwHhcNMjQwMTAyMDQyOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWJkOTgxZjhkOTI0Njg1NDU4ODg2MWZhNTdmNWQ3Y2UyNWNlN2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydtIYzpMhGTYhQ0NmxDsSlt3bUyC
z0h+v3pEHS3Cz8qt9n+q8PcPDPDz3Najv3SALnwJrT8SsK0HdQgtDPV4fMJWX7DD
kV7reNILI3+H1hQnzOen2HaOYXnZXhVQBPwgctR9t96vxOpY3GOix6WSKfRY3W9C
PzXdc30cH0TrMCtHi+IVFk3k0r/pXA5kQwonE7VUo0S1UBK9Ep4c0XcThHTJsWOc
7rmGLqsjjIYi6G3SqwVZg7On0VjyfyCNVybk6ehLYta2Jx85BIoo5AV4D8aOMljb
i9VL5pn0kMrYqpTgBfAZlZMVJcM6gcRoDpbXYqhd8UvUx0JEbQ96nGfHwQIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFPq9mB+NkkaFRYiGH6V/XXziXOfpMB8GA1UdIwQY
MBaAFBfb1azx+cddGKH3UDERTEjwsjNjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjl2VnJQSDV4MTBZb2ZkUU1SRk1TUEN5TTJNLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8yOTE5OWYtZjZjYy00NDhhLWJmZDQt
NTgxZGI4N2M4MjFlLzEvMS1yMllINDJTUm9WRmlJWWZwWDlkZk9KYzUtay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOGEvMjkxOTlmLWY2Y2MtNDQ4YS1iZmQ0LTU4MWRiODdjODIx
ZS8xL0Y5dlZyUEg1eDEwWW9mZFFNUkZNU1BDeU0yTS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBVVZgDAN
BAIAAjAHAwUAKgBlwDANBgkqhkiG9w0BAQsFAAOCAQEAYCb7aYOoAcMRPkvjuXJy
ZXTV7ywTjeyNb/yNmBY+1NblyDOoWb/yKLrtgisKBdjYAuUCSwza/8ws70Q3ZKmg
4xfjvVUEgWuV9aU4y/oN4QbLGSb0W9lLo0+FBwSdpfxtGiZez5SnpogPzlGvC+kv
JINAcxo57KCMSapCBhS7MRwhm9Ri25u/b4FMmVQklEJY8hSC7mMDObwL0WV86j4C
y3zwdwG8OCZ6c4OAfcaSvdewLpnXJ7wxz/e7WCv4fnEokzjQwRsIwu7bFJV5HVkS
2C/3/7AM5SFUEApkuLCOjGVl/jkVtH+3GxGO2+HKlEEYVA6P93eOA0SYP40gW+XM
3w==
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:35:08 2024 by rpki-client on console-fra.rpki-client.org