Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/8IuW4S6QIhykZ6VUB2cWudS4vWg.roa
File: 8IuW4S6QIhykZ6VUB2cWudS4vWg.roa (raw, json)
Hash identifier: RSdY89382AB7yJfVsYuTb6z5qkLSS5Bj/DpLu2sqI0c=
Subject key identifier: F0:8B:96:E1:2E:90:22:1C:A4:67:A5:54:07:67:16:B9:D4:B8:BD:68
Certificate issuer: /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial: 019155CB686CA4715E28816D060A2682B268
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/8IuW4S6QIhykZ6VUB2cWudS4vWg.roa
Signing time: Thu 15 Aug 2024 11:27:59 +0000
ROA not before: Thu 15 Aug 2024 11:27:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 80.244.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:cb:68:6c:a4:71:5e:28:81:6d:06:0a:26:82:b2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Validity
Not Before: Aug 15 11:27:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f08b96e12e90221ca467a554076716b9d4b8bd68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d4:14:3d:3e:72:aa:9a:7e:1d:4c:f6:7a:bf:
92:9e:e8:b9:c4:f9:16:0c:62:17:08:e6:eb:6b:84:
57:29:07:42:dc:6f:93:e4:ba:96:4c:b5:7a:e7:d8:
3e:7d:c4:f0:3f:96:01:3f:3e:29:22:34:44:43:09:
dd:79:7e:e7:91:0b:4e:4f:ac:60:7e:12:08:d8:54:
5b:1f:10:73:c9:48:4f:94:7a:79:61:44:18:14:7c:
1a:c2:b3:af:1d:95:a6:97:2b:db:98:59:bd:ff:fc:
ac:7d:ca:75:32:36:6e:a9:67:31:90:5b:7d:6b:4a:
2f:93:d1:5d:49:52:2b:0d:77:43:d3:4c:9c:0d:76:
4c:eb:92:70:04:8b:e7:ac:96:cc:9b:dd:c4:f4:fd:
39:98:fd:82:a6:bc:da:c2:70:53:5d:91:2e:bb:cc:
f6:87:a6:70:0e:b6:ca:57:14:5b:40:d6:4b:0a:08:
d9:67:22:6d:30:02:81:85:11:64:1e:4a:1a:f4:b1:
8a:30:ad:7c:ed:c6:a5:11:80:1b:b2:7d:21:db:ac:
54:a2:bb:1d:48:ab:e3:f0:a7:e9:30:f1:74:63:66:
a1:34:0a:cb:ed:1e:5e:6f:ee:b4:3c:42:6f:1c:d2:
9b:c6:44:6a:94:1b:99:c9:83:f7:78:c7:5d:15:e3:
68:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8B:96:E1:2E:90:22:1C:A4:67:A5:54:07:67:16:B9:D4:B8:BD:68
X509v3 Authority Key Identifier:
keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/8IuW4S6QIhykZ6VUB2cWudS4vWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.11.0/24
Signature Algorithm: sha256WithRSAEncryption
14:cd:c7:44:d1:0d:03:b4:e0:e7:b7:08:0a:60:a4:73:d4:11:
79:4c:8d:f1:ba:a7:86:77:e5:ce:fc:cb:27:72:84:e3:cb:83:
03:09:0b:c4:0f:de:83:58:ce:4c:0c:46:a7:44:c4:18:16:33:
5a:f3:5a:01:87:0e:84:3f:70:8a:48:cd:c9:c4:62:98:fc:2d:
1d:01:02:4a:79:cf:dd:74:12:ed:ff:5d:c4:46:36:2a:8e:44:
9e:2a:61:d2:6d:d0:bc:28:04:00:42:02:7f:58:25:3b:bd:91:
55:11:18:21:15:8c:53:9a:63:fb:9b:09:ae:0f:08:8f:c1:c8:
87:d7:ac:cb:9b:0c:02:04:0e:91:ca:92:79:3e:6b:e5:4f:19:
9d:4f:81:bf:78:9a:a7:21:43:18:7e:ba:4c:fb:a4:c6:39:1a:
cf:b2:b9:de:dd:56:c0:cd:9c:6f:7c:e1:d4:85:10:4b:cb:37:
57:c7:19:7e:3b:d4:cd:b8:a5:83:4e:02:bf:b9:77:b6:51:eb:
03:1b:89:44:ea:b9:46:45:a8:e8:14:b7:24:e1:63:3b:f2:3e:
53:04:4b:ef:b8:c4:d0:29:0c:88:b5:3d:b4:fb:c9:c9:ae:4e:
93:c8:09:28:bb:dc:54:b0:6e:21:1b:30:48:0d:04:4c:90:c8:
26:e9:d8:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZFVy2hspHFeKIFtBgomgrJoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNmQxNDJiNWI2YTUyOThkNmI4ZmE1ODQ1ZjI5ODc4Y2Zl
YmJjNTQwHhcNMjQwODE1MTEyNzU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDhiOTZlMTJlOTAyMjFjYTQ2N2E1NTQwNzY3MTZiOWQ0YjhiZDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNQUPT5yqpp+HUz2er+Snui5xPkW
DGIXCObra4RXKQdC3G+T5LqWTLV659g+fcTwP5YBPz4pIjREQwndeX7nkQtOT6xg
fhII2FRbHxBzyUhPlHp5YUQYFHwawrOvHZWmlyvbmFm9//ysfcp1MjZuqWcxkFt9
a0ovk9FdSVIrDXdD00ycDXZM65JwBIvnrJbMm93E9P05mP2CprzawnBTXZEuu8z2
h6ZwDrbKVxRbQNZLCgjZZyJtMAKBhRFkHkoa9LGKMK187calEYAbsn0h26xUorsd
SKvj8KfpMPF0Y2ahNArL7R5eb+60PEJvHNKbxkRqlBuZyYP3eMddFeNoAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPCLluEukCIcpGelVAdnFrnUuL1oMB8GA1UdIwQY
MBaAFCttFCtbalKY1rj6WEXymHjP67xUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzIwVUsxdHFVcGpXdVBwWVJmS1llTV9ydkZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xZTNjMTItMzIwNy00MzI1LTg2ZjUt
OGJlZmVlNDllZDRkLzEvOEl1VzRTNlFJaHlrWjZWVUIyY1d1ZFM0dldnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8xZTNjMTItMzIwNy00MzI1LTg2ZjUtOGJlZmVlNDllZDRk
LzEvSzIwVUsxdHFVcGpXdVBwWVJmS1llTV9ydkZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPQLMA0G
CSqGSIb3DQEBCwUAA4IBAQAUzcdE0Q0DtODntwgKYKRz1BF5TI3xuqeGd+XO/Msn
coTjy4MDCQvED96DWM5MDEanRMQYFjNa81oBhw6EP3CKSM3JxGKY/C0dAQJKec/d
dBLt/13ERjYqjkSeKmHSbdC8KAQAQgJ/WCU7vZFVERghFYxTmmP7mwmuDwiPwciH
16zLmwwCBA6RypJ5PmvlTxmdT4G/eJqnIUMYfrpM+6TGORrPsrne3VbAzZxvfOHU
hRBLyzdXxxl+O9TNuKWDTgK/uXe2UesDG4lE6rlGRajoFLck4WM78j5TBEvvuMTQ
KQyItT20+8nJrk6TyAkou9xUsG4hGzBIDQRMkMgm6di4
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:29 2024 by rpki-client on console-fra.rpki-client.org