Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/b5xwVTx7ETHPITRmh-4LGQ3dwNY.roa
File: b5xwVTx7ETHPITRmh-4LGQ3dwNY.roa (raw, json)
Hash identifier: Zg9yc2HTMK2oGNUAOZjjO8OYsdq70UTjZXgAaDIzow4=
Subject key identifier: 6F:9C:70:55:3C:7B:11:31:CF:21:34:66:87:EE:0B:19:0D:DD:C0:D6
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018CC26D587D8E721A87B93C21DCDF806003
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/b5xwVTx7ETHPITRmh-4LGQ3dwNY.roa
Signing time: Mon 01 Jan 2024 00:29:55 +0000
ROA not before: Mon 01 Jan 2024 00:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212913
IP address blocks: 80.76.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 04:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:58:7d:8e:72:1a:87:b9:3c:21:dc:df:80:60:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 1 00:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f9c70553c7b1131cf21346687ee0b190dddc0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:e4:02:ee:2d:8f:b0:58:4f:9f:8f:41:77:
6f:1a:dc:87:89:9a:3a:4a:d9:15:04:6e:b8:6e:20:
ce:7a:ee:1a:f4:53:d3:2d:3b:63:6e:6d:29:1c:a8:
db:b6:40:71:59:e7:3c:da:65:a1:68:26:55:00:bc:
d1:88:c2:05:78:66:c4:97:a0:cc:2d:f2:2c:a5:85:
f4:f7:5a:22:39:61:0b:88:84:bd:3b:e1:32:2d:ed:
69:0b:db:07:fd:0d:bc:a4:57:e6:dc:bf:c4:25:cd:
cc:d4:55:c4:31:37:39:83:b9:ce:8b:22:9c:ab:17:
b6:f6:56:ed:b2:41:8d:94:8e:d3:3b:c7:9d:67:85:
ce:c2:17:9a:e4:fd:3d:4b:9b:65:3f:a2:f3:3a:bb:
94:8c:84:8d:cd:74:5d:03:19:34:7c:e5:de:0a:c8:
b7:b4:90:78:cc:a6:68:49:9d:97:4a:b7:e0:15:1b:
8b:d2:04:e9:59:a2:9d:55:56:77:a8:1d:63:65:a0:
47:b6:5f:2e:8a:56:3b:99:7e:83:d3:ac:3c:f9:6b:
82:f1:a4:af:42:78:0f:48:30:0d:fb:aa:04:67:4f:
cd:e1:c0:14:20:0b:29:0a:09:43:cd:77:34:05:a9:
33:ab:e2:e9:92:28:4f:f9:29:33:d8:91:bc:5d:16:
62:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9C:70:55:3C:7B:11:31:CF:21:34:66:87:EE:0B:19:0D:DD:C0:D6
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/b5xwVTx7ETHPITRmh-4LGQ3dwNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.42.0/24
Signature Algorithm: sha256WithRSAEncryption
51:1d:c3:0d:35:04:a7:d6:92:c5:2b:28:f1:fc:c4:73:cf:1f:
0b:0b:ad:7f:9f:59:ee:53:df:7e:06:c9:c7:41:8a:b5:03:75:
bb:44:82:58:45:28:70:64:01:b5:36:e8:be:62:f6:6b:fd:1b:
b6:63:1b:99:ca:96:b7:93:92:17:c6:30:26:44:fe:32:54:cb:
32:4d:1d:25:c6:b4:18:bc:fa:de:1d:ec:fe:d1:0a:ae:18:6b:
3d:8c:38:31:26:da:03:46:b5:84:48:15:cf:e5:5f:1b:61:0d:
e2:b7:05:f7:bc:0f:41:9d:75:16:a5:cd:d6:47:32:c9:d8:1b:
db:92:2d:3c:de:3b:e4:a5:2e:86:00:da:70:66:22:82:da:d4:
98:f0:12:7a:40:55:8b:8c:43:10:a1:76:2e:21:1b:5c:b5:2c:
47:8e:6a:8a:ac:3c:bc:a8:96:7b:0a:27:fe:49:e4:3f:21:17:
de:0d:4b:07:b0:0c:7f:33:04:c2:d1:14:bd:e9:b5:00:a0:7c:
b1:15:88:f7:f3:35:4d:92:a6:b0:0a:06:cd:2f:1d:2a:af:cc:
12:ba:b4:cf:a7:10:9a:0e:af:3d:f1:bd:c3:a2:53:6e:82:d2:
6b:b3:77:3d:25:b2:7f:2e:60:95:f9:76:16:50:f4:c1:a7:49:
6b:1a:c0:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbVh9jnIah7k8IdzfgGADMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3
NzliYjEwHhcNMjQwMTAxMDAyOTU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjljNzA1NTNjN2IxMTMxY2YyMTM0NjY4N2VlMGIxOTBkZGRjMGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJjkAu4tj7BYT5+PQXdvGtyHiZo6
StkVBG64biDOeu4a9FPTLTtjbm0pHKjbtkBxWec82mWhaCZVALzRiMIFeGbEl6DM
LfIspYX091oiOWELiIS9O+EyLe1pC9sH/Q28pFfm3L/EJc3M1FXEMTc5g7nOiyKc
qxe29lbtskGNlI7TO8edZ4XOwhea5P09S5tlP6LzOruUjISNzXRdAxk0fOXeCsi3
tJB4zKZoSZ2XSrfgFRuL0gTpWaKdVVZ3qB1jZaBHtl8uilY7mX6D06w8+WuC8aSv
QngPSDAN+6oEZ0/N4cAUIAspCglDzXc0Bakzq+LpkihP+Skz2JG8XRZiWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG+ccFU8exExzyE0ZofuCxkN3cDWMB8GA1UdIwQY
MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt
NmI0MzcyNjAyMDk2LzEvYjV4d1ZUeDdFVEhQSVRSbWgtNExHUTNkd05ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2
LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEwqMA0G
CSqGSIb3DQEBCwUAA4IBAQBRHcMNNQSn1pLFKyjx/MRzzx8LC61/n1nuU99+BsnH
QYq1A3W7RIJYRShwZAG1Nui+YvZr/Ru2YxuZypa3k5IXxjAmRP4yVMsyTR0lxrQY
vPreHez+0QquGGs9jDgxJtoDRrWESBXP5V8bYQ3itwX3vA9BnXUWpc3WRzLJ2Bvb
ki083jvkpS6GANpwZiKC2tSY8BJ6QFWLjEMQoXYuIRtctSxHjmqKrDy8qJZ7Cif+
SeQ/IRfeDUsHsAx/MwTC0RS96bUAoHyxFYj38zVNkqawCgbNLx0qr8wSurTPpxCa
Dq898b3DolNugtJrs3c9JbJ/LmCV+XYWUPTBp0lrGsDt
-----END CERTIFICATE-----
Generated at Tue Jun 18 11:41:54 2024 by rpki-client on console-ams.rpki-client.org