Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/d76TvAiR8HqGjWzVFVGc42QcZI4.roa
File: d76TvAiR8HqGjWzVFVGc42QcZI4.roa (raw, json)
Hash identifier: rr8Yffk7aX2sHQNRapq7W3Klt10SCAPUSCcmjFZj7sE=
Subject key identifier: 77:BE:93:BC:08:91:F0:7A:86:8D:6C:D5:15:51:9C:E3:64:1C:64:8E
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018CC56DF26D22F920ED2E15D5AE5AD7C37D
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/d76TvAiR8HqGjWzVFVGc42QcZI4.roa
Signing time: Mon 01 Jan 2024 14:29:26 +0000
ROA not before: Mon 01 Jan 2024 14:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204357
IP address blocks: 188.164.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f2:6d:22:f9:20:ed:2e:15:d5:ae:5a:d7:c3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 14:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77be93bc0891f07a868d6cd515519ce3641c648e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c9:41:96:27:0a:fa:91:68:e5:32:3b:d6:39:
cf:21:d5:57:90:49:98:ea:9a:ad:93:a3:8b:05:a9:
dd:e2:52:12:d6:7f:25:f9:d3:f4:6f:87:ab:93:73:
88:92:96:67:d1:04:a2:63:3f:89:51:da:c1:e8:56:
6b:9f:58:0d:42:95:7b:e9:9d:7b:21:63:78:34:b7:
3e:aa:b0:8c:82:6a:3d:15:91:fe:f7:b6:0d:b4:fa:
bd:0e:24:dc:2c:71:1d:9b:9e:cd:45:39:c1:ce:a0:
83:44:1d:5d:b9:b4:16:ef:2d:e8:99:7d:8b:fe:fb:
67:88:15:46:76:9d:31:29:60:45:2c:9e:ae:61:12:
56:39:3a:37:1e:68:5b:9a:aa:f6:f5:fa:4a:ef:87:
19:c9:3d:09:56:08:9b:98:de:ce:bd:d7:71:64:ff:
2e:4a:8a:cc:22:fa:79:fc:b3:88:24:24:ae:fd:fe:
dd:2a:2f:aa:07:bd:6f:b6:61:3f:8c:4b:1f:12:c3:
34:7a:7a:d1:2c:09:c3:53:63:9e:2e:46:92:13:dc:
b1:59:1f:5c:98:b8:ad:8e:38:81:ef:8a:56:15:88:
fd:7b:f2:e9:21:97:03:96:56:bd:c5:53:6a:db:4b:
79:f5:49:b0:1d:c8:2a:36:97:ab:e8:1b:c2:50:44:
ac:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BE:93:BC:08:91:F0:7A:86:8D:6C:D5:15:51:9C:E3:64:1C:64:8E
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/d76TvAiR8HqGjWzVFVGc42QcZI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.164.211.0/24
Signature Algorithm: sha256WithRSAEncryption
41:a7:15:2f:90:30:60:41:c8:ac:25:57:4c:c5:ee:df:7a:cc:
0b:b7:d0:87:9e:b2:31:59:2b:c0:4d:29:9f:fd:f2:e3:21:bd:
fd:bf:15:16:b2:99:bf:e7:6a:be:2b:ee:cb:cd:f9:3a:d0:71:
8c:03:8d:32:ee:4d:6e:65:d4:1d:71:df:06:98:f2:e4:e7:b4:
77:c9:a5:9d:96:83:3c:3d:6c:e8:48:60:f3:a4:bd:ce:82:eb:
06:36:a0:42:da:4d:31:8e:47:41:63:42:27:54:7c:25:83:25:
0a:d5:5b:62:60:a5:48:0a:77:7c:44:72:c4:62:79:4e:44:fc:
4b:27:50:79:5a:e3:78:6f:a4:c0:1b:4e:3d:60:9c:6f:4c:6e:
d9:60:8d:54:b9:8c:79:3d:83:22:33:4d:0a:82:40:9e:0e:ae:
83:bc:f0:5e:6a:50:4f:1d:fb:4b:d4:b2:da:50:9b:c5:56:87:
67:b5:0f:14:c6:19:f4:8f:e8:17:88:42:fb:bb:0b:37:d4:1b:
e7:38:17:14:b2:cc:95:3b:15:e5:b5:46:f8:b6:01:df:70:e5:
7c:9e:66:11:4b:ad:b8:93:40:5e:a9:95:09:74:ab:88:a7:cd:
60:1c:ff:85:d5:24:1f:9f:55:bd:ac:f3:13:03:5b:1f:7b:8a:
9b:fd:cf:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbfJtIvkg7S4V1a5a18N9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjQwMTAxMTQyOTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2JlOTNiYzA4OTFmMDdhODY4ZDZjZDUxNTUxOWNlMzY0MWM2NDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkslBlicK+pFo5TI71jnPIdVXkEmY
6pqtk6OLBand4lIS1n8l+dP0b4erk3OIkpZn0QSiYz+JUdrB6FZrn1gNQpV76Z17
IWN4NLc+qrCMgmo9FZH+97YNtPq9DiTcLHEdm57NRTnBzqCDRB1dubQW7y3omX2L
/vtniBVGdp0xKWBFLJ6uYRJWOTo3Hmhbmqr29fpK74cZyT0JVgibmN7OvddxZP8u
SorMIvp5/LOIJCSu/f7dKi+qB71vtmE/jEsfEsM0enrRLAnDU2OeLkaSE9yxWR9c
mLitjjiB74pWFYj9e/LpIZcDlla9xVNq20t59UmwHcgqNper6BvCUESsxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHe+k7wIkfB6ho1s1RVRnONkHGSOMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvZDc2VHZBaVI4SHFHald6VkZWR2M0MlFjWkk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvKTTMA0G
CSqGSIb3DQEBCwUAA4IBAQBBpxUvkDBgQcisJVdMxe7feswLt9CHnrIxWSvATSmf
/fLjIb39vxUWspm/52q+K+7Lzfk60HGMA40y7k1uZdQdcd8GmPLk57R3yaWdloM8
PWzoSGDzpL3OgusGNqBC2k0xjkdBY0InVHwlgyUK1VtiYKVICnd8RHLEYnlORPxL
J1B5WuN4b6TAG049YJxvTG7ZYI1UuYx5PYMiM00KgkCeDq6DvPBealBPHftL1LLa
UJvFVodntQ8Uxhn0j+gXiEL7uws31BvnOBcUssyVOxXltUb4tgHfcOV8nmYRS624
k0BeqZUJdKuIp81gHP+F1SQfn1W9rPMTA1sfe4qb/c+P
-----END CERTIFICATE-----
Generated at Fri Jun 7 14:20:55 2024 by rpki-client on console-fra.rpki-client.org