Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/0tpnqmzWgPoWgWyJcwf3Bh_Zeyc.roa
File: 0tpnqmzWgPoWgWyJcwf3Bh_Zeyc.roa (raw, json)
Hash identifier: AKgRKnWn93WjnoG1Tpe5Xe+6vC/TG1jH+UCNGHP6+R8=
Subject key identifier: D2:DA:67:AA:6C:D6:80:FA:16:81:6C:89:73:07:F7:06:1F:D9:7B:27
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01931C0C055144BCF6B6C7EB0424F6FD94C8
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/0tpnqmzWgPoWgWyJcwf3Bh_Zeyc.roa
Signing time: Mon 11 Nov 2024 16:26:10 +0000
ROA not before: Mon 11 Nov 2024 16:26:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53363
IP address blocks: 85.208.108.0/24 maxlen: 24
171.22.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1c:0c:05:51:44:bc:f6:b6:c7:eb:04:24:f6:fd:94:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Nov 11 16:26:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2da67aa6cd680fa16816c897307f7061fd97b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:ea:08:af:ce:94:f3:62:b2:a8:4e:3f:ed:
a9:15:4f:e1:bc:4e:2a:78:3a:26:c4:bb:f1:aa:2c:
62:0e:91:bf:3b:fb:d8:32:c6:37:b0:09:20:92:04:
94:5b:13:00:87:d9:16:3d:7f:38:9f:19:5e:5d:5b:
89:8e:bf:78:5a:3e:9a:a2:b5:4e:ae:3e:3e:23:35:
a6:5d:69:86:6b:32:36:30:9d:6c:72:9e:53:21:ca:
77:7c:b5:4c:dd:2f:0d:90:45:75:0d:4c:67:a3:be:
9f:f6:a2:2f:d0:90:76:94:36:f2:9d:d1:6d:4b:3f:
13:6f:67:2e:b5:55:38:0a:5d:bf:11:d5:7a:bc:c2:
18:fc:71:6f:d0:dc:7f:8e:dd:8a:05:8e:a0:28:7d:
31:f4:af:20:a8:be:06:26:f6:bc:c1:46:f9:8d:d1:
ed:9c:47:5c:c4:d0:8f:d1:cf:7c:17:36:1a:8f:93:
8d:6f:46:ad:e1:2b:3f:90:6c:ba:d2:a9:d4:b2:dd:
fa:70:10:2e:36:61:0d:8f:97:4c:3c:82:73:b5:7e:
ef:ca:2f:bf:95:58:8f:42:75:8e:62:cc:b0:97:1b:
cc:3f:6d:9d:0d:77:f0:7a:d4:dc:89:c1:39:9c:97:
59:6f:7d:26:a6:1e:59:7d:43:b8:14:fc:cd:da:76:
bb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DA:67:AA:6C:D6:80:FA:16:81:6C:89:73:07:F7:06:1F:D9:7B:27
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/0tpnqmzWgPoWgWyJcwf3Bh_Zeyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.108.0/24
171.22.122.0/24
Signature Algorithm: sha256WithRSAEncryption
26:17:a3:c5:03:3e:c6:2d:5a:d8:0e:02:dc:ce:66:30:80:e0:
4e:3f:5d:e7:4c:06:63:2b:de:7b:34:4f:6c:8c:c2:0b:bd:e5:
f7:d0:72:71:68:fe:1f:80:45:d4:86:f3:c1:b5:0e:d9:de:3d:
d2:a7:c5:87:0d:42:22:6c:5d:f2:e1:8c:b7:f3:35:c9:15:9f:
c8:25:a8:cb:36:e1:9c:55:10:aa:69:23:39:db:e7:74:04:0e:
f5:84:60:4e:dc:36:dd:d8:53:67:d7:e1:63:a3:1c:82:84:c4:
13:92:1a:71:14:a1:2a:6a:d3:24:09:bd:4d:de:52:c8:36:14:
09:bd:bb:65:8a:0f:a6:a0:c3:40:5c:e8:89:f4:27:18:4a:f8:
16:9c:e6:3a:62:23:6e:77:4f:06:f8:5a:28:ab:19:a3:f9:b0:
e0:b8:95:c8:bb:6e:54:d4:61:46:1d:83:54:d7:c8:45:bc:17:
89:98:09:b5:9a:d7:fd:f1:7c:2b:86:5f:47:a2:77:ec:27:27:
b9:c9:5b:b1:7d:9e:32:48:3b:3a:7d:1a:89:67:3d:25:62:29:
16:bb:c6:28:36:d0:fa:66:91:bf:8c:3f:43:7d:ae:bc:f9:c7:
36:60:7e:fd:ff:68:77:0e:bb:b8:cf:c4:3a:cf:78:58:6d:09:
49:8d:43:68
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZMcDAVRRLz2tsfrBCT2/ZTIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjQxMTExMTYyNjEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmRhNjdhYTZjZDY4MGZhMTY4MTZjODk3MzA3ZjcwNjFmZDk3YjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOLqCK/OlPNisqhOP+2pFU/hvE4q
eDomxLvxqixiDpG/O/vYMsY3sAkgkgSUWxMAh9kWPX84nxleXVuJjr94Wj6aorVO
rj4+IzWmXWmGazI2MJ1scp5TIcp3fLVM3S8NkEV1DUxno76f9qIv0JB2lDbyndFt
Sz8Tb2cutVU4Cl2/EdV6vMIY/HFv0Nx/jt2KBY6gKH0x9K8gqL4GJva8wUb5jdHt
nEdcxNCP0c98FzYaj5ONb0at4Ss/kGy60qnUst36cBAuNmENj5dMPIJztX7vyi+/
lViPQnWOYsywlxvMP22dDXfwetTcicE5nJdZb30mph5ZfUO4FPzN2na7qwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNLaZ6ps1oD6FoFsiXMH9wYf2XsnMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvMHRwbnFteldnUG9XZ1d5SmN3ZjNCaF9aZXljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVdBsAwQA
qxZ6MA0GCSqGSIb3DQEBCwUAA4IBAQAmF6PFAz7GLVrYDgLczmYwgOBOP13nTAZj
K957NE9sjMILveX30HJxaP4fgEXUhvPBtQ7Z3j3Sp8WHDUIibF3y4Yy38zXJFZ/I
JajLNuGcVRCqaSM52+d0BA71hGBO3Dbd2FNn1+FjoxyChMQTkhpxFKEqatMkCb1N
3lLINhQJvbtlig+moMNAXOiJ9CcYSvgWnOY6YiNud08G+Fooqxmj+bDguJXIu25U
1GFGHYNU18hFvBeJmAm1mtf98Xwrhl9HonfsJye5yVuxfZ4ySDs6fRqJZz0lYikW
u8YoNtD6ZpG/jD9Dfa68+cc2YH79/2h3Dru4z8Q6z3hYbQlJjUNo
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:12:06 2024 by rpki-client on console-ams.rpki-client.org