Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/8wVrcMQ4U3Ab3FuuG-hQ5jkFBzM.roa
File: 8wVrcMQ4U3Ab3FuuG-hQ5jkFBzM.roa (raw, json)
Hash identifier: it0xYF0sMu0jeFSfrzIezUku55q8XLdRL3yUtrgWAlg=
Subject key identifier: F3:05:6B:70:C4:38:53:70:1B:DC:5B:AE:1B:E8:50:E6:39:05:07:33
Certificate issuer: /CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Certificate serial: 018CC795057927D657949805851095999A4E
Authority key identifier: A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/8wVrcMQ4U3Ab3FuuG-hQ5jkFBzM.roa
Signing time: Tue 02 Jan 2024 00:31:21 +0000
ROA not before: Tue 02 Jan 2024 00:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61344
IP address blocks: 212.66.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 03:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:05:79:27:d6:57:94:98:05:85:10:95:99:9a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Validity
Not Before: Jan 2 00:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3056b70c43853701bdc5bae1be850e639050733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:25:cb:16:d2:29:f3:37:6c:69:f2:11:6d:64:
66:c7:b6:d9:73:73:a9:16:7b:3e:38:07:eb:f4:3e:
4b:0c:51:e1:3d:48:c1:8f:5c:16:26:9a:fa:fc:40:
1f:e2:52:e8:e2:ce:f1:c6:38:a8:6b:ee:7f:35:81:
68:ba:44:26:cd:00:2c:49:32:03:75:49:0d:e4:ad:
0b:2f:d9:46:6d:10:27:14:49:71:35:ce:70:34:52:
c0:70:8a:e7:26:1a:f9:57:72:36:8e:a5:85:7d:c3:
ee:c6:20:43:f6:a4:dd:ef:6a:6c:e0:ce:00:52:78:
84:dc:0d:4e:57:85:0c:01:88:85:9c:12:19:b6:99:
32:3d:1b:68:3d:0d:22:1d:4c:06:03:28:c1:fa:95:
4b:a8:0a:43:6a:35:df:a9:84:f2:7d:c8:6b:6a:9f:
9f:c4:5a:4b:13:3a:fb:86:e4:23:d5:f4:56:52:37:
58:73:01:92:01:1c:65:c7:45:b7:d5:d5:e3:dc:6d:
50:45:19:f7:73:4b:fe:f7:be:dc:83:88:32:4b:46:
ed:e2:90:6a:82:eb:3c:a1:fe:b1:0e:42:88:be:71:
e3:55:7d:c5:a3:66:92:c6:94:eb:0b:bd:44:72:f3:
fc:f2:16:f6:c3:37:b3:fe:00:1c:c5:e7:6a:a9:83:
75:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:05:6B:70:C4:38:53:70:1B:DC:5B:AE:1B:E8:50:E6:39:05:07:33
X509v3 Authority Key Identifier:
keyid:A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/8wVrcMQ4U3Ab3FuuG-hQ5jkFBzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.66.61.0/24
Signature Algorithm: sha256WithRSAEncryption
10:bd:48:b4:51:52:41:e0:c1:0a:2d:85:0f:a9:36:38:b7:32:
5f:b3:da:26:30:00:75:70:58:4e:4a:4a:1d:d8:93:45:6e:3c:
e8:0f:db:8a:23:78:e0:10:0a:b6:00:4e:8d:68:2a:e3:2b:30:
11:ce:eb:8b:77:bc:f7:ce:77:12:90:4d:4f:7a:cd:80:92:0f:
33:b9:e9:67:4a:01:59:31:d1:e4:26:ac:d6:24:e7:6b:88:63:
80:86:d5:16:71:be:19:17:7f:f5:b7:9a:63:e8:eb:c7:6d:1d:
40:7a:d7:66:d3:9b:24:8b:eb:52:74:99:70:1b:68:e2:b8:9a:
09:3b:5d:56:27:ce:13:c5:3b:38:13:63:18:3c:10:5d:4d:29:
78:2a:32:08:98:ba:1d:02:49:97:1d:46:c5:0c:08:ce:27:a7:
c4:4e:97:a8:25:ec:db:fc:52:c5:27:d2:ef:3a:9c:a4:76:da:
e3:1c:fa:d0:f0:b2:9c:49:85:aa:3c:4a:12:54:0b:45:7d:10:
1e:5e:e5:35:6d:c5:da:65:a2:04:0b:fc:92:49:3e:3e:2e:3e:
28:95:4a:bd:94:3a:db:f5:ca:b7:50:62:08:13:b0:62:28:8f:
a7:6c:9a:d6:af:ef:d0:c4:e0:7a:5d:e0:ee:78:b4:b9:a5:18:
8f:2e:91:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlQV5J9ZXlJgFhRCVmZpOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNzg3ZDJiZTZlYWMzNmMxZDI3ODBmNzg2Yjg3YzllMTUz
ZTgxZjEwHhcNMjQwMTAyMDAzMTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzA1NmI3MGM0Mzg1MzcwMWJkYzViYWUxYmU4NTBlNjM5MDUwNzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyXLFtIp8zdsafIRbWRmx7bZc3Op
Fns+OAfr9D5LDFHhPUjBj1wWJpr6/EAf4lLo4s7xxjioa+5/NYFoukQmzQAsSTID
dUkN5K0LL9lGbRAnFElxNc5wNFLAcIrnJhr5V3I2jqWFfcPuxiBD9qTd72ps4M4A
UniE3A1OV4UMAYiFnBIZtpkyPRtoPQ0iHUwGAyjB+pVLqApDajXfqYTyfchrap+f
xFpLEzr7huQj1fRWUjdYcwGSARxlx0W31dXj3G1QRRn3c0v+977cg4gyS0bt4pBq
gus8of6xDkKIvnHjVX3Fo2aSxpTrC71EcvP88hb2wzez/gAcxedqqYN1BwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPMFa3DEOFNwG9xbrhvoUOY5BQczMB8GA1UdIwQY
MBaAFKN4fSvm6sNsHSeA94a4fJ4VPoHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzNoOUstYnF3MndkSjREM2hyaDhuaFUtZ2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9mNTY1ZDctMzJhZi00YmUxLTgyYWMt
YjYwMmNlZGFjMzZjLzEvOHdWcmNNUTRVM0FiM0Z1dUctaFE1amtGQnpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9mNTY1ZDctMzJhZi00YmUxLTgyYWMtYjYwMmNlZGFjMzZj
LzEvbzNoOUstYnF3MndkSjREM2hyaDhuaFUtZ2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EI9MA0G
CSqGSIb3DQEBCwUAA4IBAQAQvUi0UVJB4MEKLYUPqTY4tzJfs9omMAB1cFhOSkod
2JNFbjzoD9uKI3jgEAq2AE6NaCrjKzARzuuLd7z3zncSkE1Pes2Akg8zuelnSgFZ
MdHkJqzWJOdriGOAhtUWcb4ZF3/1t5pj6OvHbR1Aetdm05ski+tSdJlwG2jiuJoJ
O11WJ84TxTs4E2MYPBBdTSl4KjIImLodAkmXHUbFDAjOJ6fETpeoJezb/FLFJ9Lv
OpykdtrjHPrQ8LKcSYWqPEoSVAtFfRAeXuU1bcXaZaIEC/ySST4+Lj4olUq9lDrb
9cq3UGIIE7BiKI+nbJrWr+/QxOB6XeDueLS5pRiPLpEx
-----END CERTIFICATE-----
Generated at Sat Jun 8 08:57:55 2024 by rpki-client on console-ams.rpki-client.org