Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/7ncuIIGdn9TDMUSrqRxW_WPKJbk.roa
File: 7ncuIIGdn9TDMUSrqRxW_WPKJbk.roa (raw, json)
Hash identifier: bAgBZN1PfLGmtcHBN3/l4S/KnabFflHZl6ArlIvAYBA=
Subject key identifier: EE:77:2E:20:81:9D:9F:D4:C3:31:44:AB:A9:1C:56:FD:63:CA:25:B9
Certificate issuer: /CN=fec6fb5a467974c977a997c6dda1464805ed379f
Certificate serial: 018CC26D1729DA92CEDB5B2AF6DAFE7534CB
Authority key identifier: FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/7ncuIIGdn9TDMUSrqRxW_WPKJbk.roa
Signing time: Mon 01 Jan 2024 00:29:38 +0000
ROA not before: Mon 01 Jan 2024 00:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213162
IP address blocks: 176.116.120.0/22 maxlen: 22
83.138.57.0/24 maxlen: 24
2a0f:fa40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:17:29:da:92:ce:db:5b:2a:f6:da:fe:75:34:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec6fb5a467974c977a997c6dda1464805ed379f
Validity
Not Before: Jan 1 00:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee772e20819d9fd4c33144aba91c56fd63ca25b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e3:bb:39:ae:88:01:5d:72:7e:c4:e1:ff:fb:
d8:43:12:c2:02:a1:da:9c:8a:e3:23:6d:0f:79:eb:
ae:4a:59:3c:9f:7e:24:ec:e4:26:68:a8:59:6f:5d:
a9:9a:1d:34:ca:11:07:91:95:a2:80:98:d5:cc:ec:
d1:74:8c:4d:55:6c:10:f1:3c:eb:b1:7c:66:e3:4a:
9d:12:93:bf:c9:f8:69:30:f0:26:32:0d:59:df:54:
d8:f2:ed:4a:aa:14:85:f2:7b:dd:97:ec:fd:1c:66:
fa:1c:7a:dc:95:9a:cc:39:af:84:8c:f1:52:83:c0:
db:e0:4a:41:02:e1:46:9c:9d:40:d1:0b:b6:f9:95:
a6:e1:ce:86:16:61:17:5b:e1:0a:18:74:2e:d4:65:
dc:c0:3b:9d:eb:66:bc:0f:f8:b4:2f:39:53:89:25:
1a:5d:c4:bd:43:8f:03:cf:5c:47:40:28:1c:b1:68:
2e:92:51:c8:10:d7:a4:a3:5c:f8:ab:a6:af:6a:5f:
7d:80:3d:b0:fd:1e:5c:ed:ec:c0:c8:e0:16:a1:a2:
62:a9:0d:52:46:e1:51:30:3a:80:ce:7f:dc:47:90:
6b:fe:43:9c:bd:2b:7b:78:fd:97:4b:18:20:82:ea:
35:13:4d:b8:02:30:84:c3:04:d5:52:3e:9c:34:ab:
3f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:77:2E:20:81:9D:9F:D4:C3:31:44:AB:A9:1C:56:FD:63:CA:25:B9
X509v3 Authority Key Identifier:
keyid:FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/7ncuIIGdn9TDMUSrqRxW_WPKJbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.57.0/24
176.116.120.0/22
IPv6:
2a0f:fa40::/29
Signature Algorithm: sha256WithRSAEncryption
48:0f:eb:3d:20:fa:d2:78:44:1d:34:bc:88:6f:c2:a3:42:c2:
ef:28:98:23:97:93:23:9b:e8:d4:36:ce:46:5b:4c:3d:f8:27:
cb:55:b1:c8:4b:91:33:7d:43:6e:7d:3a:19:e4:60:e5:62:88:
b2:90:e5:06:a6:e9:29:c6:e0:83:22:79:11:da:2d:02:fa:ed:
6d:65:0d:5a:79:66:1a:2e:24:cd:f7:22:bf:80:c3:e8:04:7f:
9c:fd:5e:04:e1:b2:a9:fa:f8:30:1f:d0:28:53:7d:f1:ce:06:
b2:43:f9:bb:54:85:f8:96:fa:79:9c:e5:61:36:88:dc:81:7a:
09:66:8b:2c:59:4d:12:c4:b1:99:32:16:0b:d0:86:c2:d5:ca:
ed:7b:99:92:66:c7:ae:90:50:c3:e0:53:21:cb:2c:de:05:aa:
66:4a:f2:14:57:18:dc:e5:ab:3e:eb:45:89:39:f5:fd:1d:3a:
f9:ae:0f:b6:f4:ca:18:5d:0e:f7:ac:f9:c6:a7:29:bb:0b:10:
e2:71:70:57:bb:ab:89:17:c9:4e:e7:a7:43:46:70:c6:05:76:
af:99:b0:03:2f:fc:ca:31:04:78:6a:19:c6:ec:bc:b0:87:0f:
85:97:1d:d2:a3:1e:2c:0b:b9:15:e4:b4:28:e0:e6:0f:9d:48:
da:a7:f1:c7
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzCbRcp2pLO21sq9tr+dTTLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzZmYjVhNDY3OTc0Yzk3N2E5OTdjNmRkYTE0NjQ4MDVl
ZDM3OWYwHhcNMjQwMTAxMDAyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTc3MmUyMDgxOWQ5ZmQ0YzMzMTQ0YWJhOTFjNTZmZDYzY2EyNWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+O7Oa6IAV1yfsTh//vYQxLCAqHa
nIrjI20PeeuuSlk8n34k7OQmaKhZb12pmh00yhEHkZWigJjVzOzRdIxNVWwQ8Tzr
sXxm40qdEpO/yfhpMPAmMg1Z31TY8u1KqhSF8nvdl+z9HGb6HHrclZrMOa+EjPFS
g8Db4EpBAuFGnJ1A0Qu2+ZWm4c6GFmEXW+EKGHQu1GXcwDud62a8D/i0LzlTiSUa
XcS9Q48Dz1xHQCgcsWguklHIENeko1z4q6aval99gD2w/R5c7ezAyOAWoaJiqQ1S
RuFRMDqAzn/cR5Br/kOcvSt7eP2XSxggguo1E024AjCEwwTVUj6cNKs/RQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFO53LiCBnZ/UwzFEq6kcVv1jyiW5MB8GA1UdIwQY
MBaAFP7G+1pGeXTJd6mXxt2hRkgF7TefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NiN1drWjVkTWwzcVpmRzNhRkdTQVh0TjU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hYzUyYzMtY2E0NC00Nzg0LWI3MmUt
MTI2NDFmOWU2ZmMwLzEvN25jdUlJR2RuOVRETVVTcnFSeFdfV1BLSmJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9hYzUyYzMtY2E0NC00Nzg0LWI3MmUtMTI2NDFmOWU2ZmMw
LzEvX3NiN1drWjVkTWwzcVpmRzNhRkdTQVh0TjU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAU4o5AwQC
sHR4MA0EAgACMAcDBQMqD/pAMA0GCSqGSIb3DQEBCwUAA4IBAQBID+s9IPrSeEQd
NLyIb8KjQsLvKJgjl5Mjm+jUNs5GW0w9+CfLVbHIS5EzfUNufToZ5GDlYoiykOUG
pukpxuCDInkR2i0C+u1tZQ1aeWYaLiTN9yK/gMPoBH+c/V4E4bKp+vgwH9AoU33x
zgayQ/m7VIX4lvp5nOVhNojcgXoJZossWU0SxLGZMhYL0IbC1crte5mSZseukFDD
4FMhyyzeBapmSvIUVxjc5as+60WJOfX9HTr5rg+29MoYXQ73rPnGpym7CxDicXBX
u6uJF8lO56dDRnDGBXavmbADL/zKMQR4ahnG7Lywhw+Flx3Sox4sC7kV5LQo4OYP
nUjap/HH
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:47:50 2024 by rpki-client on console-ams.rpki-client.org