Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/j-kfcO8Id8mCmt7xejVgrtLcfl4.roa
File: j-kfcO8Id8mCmt7xejVgrtLcfl4.roa (raw, json)
Hash identifier: opYL/KjKp7SLrhD8gWsw9pUTVnkD5Iqf4M3Fvy7e8ws=
Subject key identifier: 8F:E9:1F:70:EF:08:77:C9:82:9A:DE:F1:7A:35:60:AE:D2:DC:7E:5E
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 0192E2A76FF3892E8DEFF61127E12A1E7294
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/j-kfcO8Id8mCmt7xejVgrtLcfl4.roa
Signing time: Thu 31 Oct 2024 12:57:56 +0000
ROA not before: Thu 31 Oct 2024 12:57:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34762
IP address blocks: 80.69.66.0/23 maxlen: 24
85.10.156.0/22 maxlen: 24
85.158.254.0/23 maxlen: 23
2a01:7c8:f0::/46 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e2:a7:6f:f3:89:2e:8d:ef:f6:11:27:e1:2a:1e:72:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Oct 31 12:57:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fe91f70ef0877c9829adef17a3560aed2dc7e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:da:6f:c0:d7:d1:2a:77:d7:76:01:42:33:
4e:fc:c3:c2:f0:01:fc:fd:51:77:cc:01:34:70:75:
0c:ca:25:ee:ee:d2:58:e3:83:ee:ba:02:31:65:57:
5a:17:dd:15:db:a9:5c:94:90:80:b0:1e:6e:4d:9f:
84:60:0a:ae:b3:76:2f:1d:d4:86:08:4c:31:de:88:
6b:e5:94:5e:21:8b:37:aa:4d:e3:e2:f4:7f:cd:26:
96:53:81:0e:3c:4b:30:69:0c:b7:ab:74:64:f8:e2:
44:13:05:cd:a6:66:21:92:6e:59:f8:4a:1a:bb:59:
16:df:7d:7f:4a:65:65:cc:a9:8c:38:9e:87:63:ff:
0e:7b:d1:40:43:78:27:0f:59:62:b1:1a:9e:0a:07:
0d:bc:3b:3a:c9:59:eb:40:2b:60:bd:8c:f4:e3:31:
e0:98:8e:47:ef:b0:46:76:fb:33:27:30:96:cd:f5:
4f:ee:28:d7:7e:8e:62:3e:2a:4d:47:ea:1b:2d:2f:
ee:af:b8:08:2e:98:20:05:b3:43:05:e5:d9:0b:7d:
dd:ca:6d:c4:b1:8b:e1:4b:9e:ad:9c:08:fd:fa:16:
32:63:9d:65:a1:c9:94:52:24:46:15:f9:f2:6f:f2:
a8:df:28:48:21:bd:d3:60:eb:5b:42:b8:de:75:9c:
14:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E9:1F:70:EF:08:77:C9:82:9A:DE:F1:7A:35:60:AE:D2:DC:7E:5E
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/j-kfcO8Id8mCmt7xejVgrtLcfl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.69.66.0/23
85.10.156.0/22
85.158.254.0/23
IPv6:
2a01:7c8:f0::/46
Signature Algorithm: sha256WithRSAEncryption
8d:f9:84:a6:d9:f8:67:50:4b:3b:23:73:d9:80:76:bd:e5:a0:
f6:fe:c6:8b:83:52:5f:0e:a5:7d:c1:8c:dc:a2:9d:67:e4:61:
30:1f:11:bd:9b:41:3e:f6:2f:b4:60:95:b4:a4:43:3c:1f:e7:
7e:a9:eb:48:0d:8e:1a:83:a4:ae:c4:ef:a2:a2:50:5c:71:2d:
7a:98:08:da:8b:9c:75:4a:e6:fc:88:01:a4:79:ad:b5:e2:b5:
23:a3:87:52:04:70:18:1d:d8:93:15:8b:c3:4b:c8:a6:7a:6b:
e5:34:6a:06:02:ef:27:0f:02:88:ad:64:2e:b6:b3:be:56:fd:
c0:e4:9d:76:2a:be:c7:20:02:14:c1:db:1d:66:55:95:88:a8:
a4:80:84:5b:94:ac:cd:0c:0a:2b:54:53:4d:e5:4b:af:43:74:
bd:52:fd:6d:e9:13:8f:ef:fc:e4:7b:47:dd:83:0e:79:7e:8f:
fa:de:5d:11:f9:f5:1f:16:19:9d:83:aa:7f:23:bc:6a:e0:b6:
d4:9b:4f:b7:e4:e6:36:a5:53:d7:aa:ea:22:d6:59:c7:21:0d:
23:04:27:f8:b6:b7:6c:bb:d3:b1:9b:f3:1c:eb:ae:8e:19:5d:
6c:ff:72:14:ee:41:5b:a7:fe:c1:e9:52:ff:ed:4d:f1:8d:f1:
a9:10:2e:f5
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZLip2/ziS6N7/YRJ+EqHnKUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3
NTJhZTcwHhcNMjQxMDMxMTI1NzU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmU5MWY3MGVmMDg3N2M5ODI5YWRlZjE3YTM1NjBhZWQyZGM3ZTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspPab8DX0Sp313YBQjNO/MPC8AH8
/VF3zAE0cHUMyiXu7tJY44PuugIxZVdaF90V26lclJCAsB5uTZ+EYAqus3YvHdSG
CEwx3ohr5ZReIYs3qk3j4vR/zSaWU4EOPEswaQy3q3Rk+OJEEwXNpmYhkm5Z+Eoa
u1kW331/SmVlzKmMOJ6HY/8Oe9FAQ3gnD1lisRqeCgcNvDs6yVnrQCtgvYz04zHg
mI5H77BGdvszJzCWzfVP7ijXfo5iPipNR+obLS/ur7gILpggBbNDBeXZC33dym3E
sYvhS56tnAj9+hYyY51locmUUiRGFfnyb/Ko3yhIIb3TYOtbQrjedZwUUQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFI/pH3DvCHfJgpre8Xo1YK7S3H5eMB8GA1UdIwQY
MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt
MmI5MjBiZGUzOTkwLzEvai1rZmNPOElkOG1DbXQ3eGVqVmdydExjZmw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw
LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQBUEVCAwQC
VQqcAwQBVZ7+MA8EAgACMAkDBwIqAQfIAPAwDQYJKoZIhvcNAQELBQADggEBAI35
hKbZ+GdQSzsjc9mAdr3loPb+xouDUl8OpX3BjNyinWfkYTAfEb2bQT72L7RglbSk
Qzwf536p60gNjhqDpK7E76KiUFxxLXqYCNqLnHVK5vyIAaR5rbXitSOjh1IEcBgd
2JMVi8NLyKZ6a+U0agYC7ycPAoitZC62s75W/cDknXYqvscgAhTB2x1mVZWIqKSA
hFuUrM0MCitUU03lS69DdL1S/W3pE4/v/OR7R92DDnl+j/reXRH59R8WGZ2Dqn8j
vGrgttSbT7fk5jalU9eq6iLWWcchDSMEJ/i2t2y707Gb8xzrro4ZXWz/chTuQVun
/sHpUv/tTfGN8akQLvU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:22:34 2024 by rpki-client on console-ams.rpki-client.org