Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/vB8vo4Ta_HEMnXAeTpzgnMl8teE.roa
File: vB8vo4Ta_HEMnXAeTpzgnMl8teE.roa (raw, json)
Hash identifier: 3e/yiUYLidZNlnJpp/OLjqiVqaLqGlNA/+xuptm/ZJA=
Subject key identifier: BC:1F:2F:A3:84:DA:FC:71:0C:9D:70:1E:4E:9C:E0:9C:C9:7C:B5:E1
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 018CCA2A66491127FE4239EE6186E1E339FE
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/vB8vo4Ta_HEMnXAeTpzgnMl8teE.roa
Signing time: Tue 02 Jan 2024 12:33:45 +0000
ROA not before: Tue 02 Jan 2024 12:33:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197714
IP address blocks: 217.25.84.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:66:49:11:27:fe:42:39:ee:61:86:e1:e3:39:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: Jan 2 12:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc1f2fa384dafc710c9d701e4e9ce09cc97cb5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:de:09:bd:17:63:69:ef:ad:ce:e6:7a:21:19:
78:00:13:dd:d6:a0:f8:07:7f:6f:c3:b8:45:a7:c0:
83:a9:04:aa:e6:8e:14:16:b1:6b:64:81:ec:c9:26:
59:6b:6e:27:d8:eb:49:e1:68:a7:1f:b1:98:9d:6b:
4a:48:49:48:71:0b:0b:7d:35:cc:77:79:bb:52:db:
e5:61:3e:14:98:27:92:78:6b:fe:0b:e6:06:ee:5b:
ae:49:fb:bb:47:4f:81:c1:de:21:26:8e:b5:dd:8b:
32:d3:bb:0a:f1:dc:86:90:60:1c:38:cc:70:96:eb:
f0:80:53:b8:d5:91:8c:7e:d3:85:7f:f8:7d:c2:2c:
04:c9:a5:5e:67:9a:ff:aa:30:05:42:71:e4:d6:ea:
5b:ec:19:f4:63:ab:cc:0d:bb:9a:51:90:b3:ad:96:
06:6d:6c:f2:bc:7c:45:55:65:68:43:24:05:87:e2:
5d:b8:89:f7:c5:09:05:6f:e6:e2:f6:15:d4:44:45:
13:54:57:b9:5e:f2:06:e5:8c:87:f1:2a:02:20:ea:
df:02:f2:f9:b0:46:98:2a:57:b8:f8:a3:18:e7:51:
ac:d4:70:87:51:ce:38:c8:fe:fa:49:30:c0:ba:13:
74:d1:ec:c4:40:4a:df:8e:90:55:80:86:ad:af:76:
d4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1F:2F:A3:84:DA:FC:71:0C:9D:70:1E:4E:9C:E0:9C:C9:7C:B5:E1
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/vB8vo4Ta_HEMnXAeTpzgnMl8teE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.84.0/23
Signature Algorithm: sha256WithRSAEncryption
03:3e:84:68:fd:99:15:a0:81:74:83:b5:fa:44:39:c1:b9:bf:
7f:49:7b:ae:a9:7e:06:17:44:22:54:5f:42:3e:27:7f:c9:4d:
8f:e9:e9:2a:19:d3:75:eb:67:58:38:15:26:2c:ec:1a:c0:b6:
be:dd:f1:39:34:ab:c7:b3:78:bd:65:59:d2:00:72:6d:19:de:
d6:da:c4:56:c3:dc:b0:49:9f:e8:04:b7:53:da:d5:4b:46:16:
0d:94:b7:e0:38:e0:d6:c7:80:dc:e8:1e:ba:a2:29:83:d4:40:
3a:59:49:11:4f:19:87:ea:44:12:65:0a:53:4f:da:6f:92:cf:
49:b9:a1:e8:0d:ef:16:18:75:af:80:7a:4a:bd:92:ee:49:93:
ea:f2:9b:d8:bc:80:66:97:e0:3b:f7:a1:9a:7c:de:d0:4f:62:
db:23:11:65:c1:c6:fc:67:ac:b1:2b:c2:a8:16:67:67:50:c8:
99:20:c5:e5:64:35:e6:16:a9:73:0e:d1:d5:d6:e5:ab:aa:8b:
1c:e0:f6:8c:0a:90:56:4c:d1:fc:0b:4d:38:bd:c6:dd:87:fb:
34:90:88:17:bd:07:a6:eb:84:33:6d:2c:f4:d5:b7:f8:84:80:
83:39:4f:fb:90:53:fd:1b:d9:26:39:68:16:eb:38:0c:03:81:
a3:54:83:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKmZJESf+QjnuYYbh4zn+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwOGUyMzhlMzBkY2I3NTk3NTlmYjhhMzk0ZDllMjExYTI4
YjlkODcwHhcNMjQwMTAyMTIzMzQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzFmMmZhMzg0ZGFmYzcxMGM5ZDcwMWU0ZTljZTA5Y2M5N2NiNWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAht4JvRdjae+tzuZ6IRl4ABPd1qD4
B39vw7hFp8CDqQSq5o4UFrFrZIHsySZZa24n2OtJ4WinH7GYnWtKSElIcQsLfTXM
d3m7UtvlYT4UmCeSeGv+C+YG7luuSfu7R0+Bwd4hJo613Ysy07sK8dyGkGAcOMxw
luvwgFO41ZGMftOFf/h9wiwEyaVeZ5r/qjAFQnHk1upb7Bn0Y6vMDbuaUZCzrZYG
bWzyvHxFVWVoQyQFh+JduIn3xQkFb+bi9hXUREUTVFe5XvIG5YyH8SoCIOrfAvL5
sEaYKle4+KMY51Gs1HCHUc44yP76STDAuhN00ezEQErfjpBVgIatr3bUcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLwfL6OE2vxxDJ1wHk6c4JzJfLXhMB8GA1UdIwQY
MBaAFICOI44w3LdZdZ+4o5TZ4hGii52HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDkt
Y2Q5NzQwNDI2NDlmLzEvdkI4dm80VGFfSEVNblhBZVRwemduTWw4dGVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDktY2Q5NzQwNDI2NDlm
LzEvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2RlUMA0G
CSqGSIb3DQEBCwUAA4IBAQADPoRo/ZkVoIF0g7X6RDnBub9/SXuuqX4GF0QiVF9C
Pid/yU2P6ekqGdN162dYOBUmLOwawLa+3fE5NKvHs3i9ZVnSAHJtGd7W2sRWw9yw
SZ/oBLdT2tVLRhYNlLfgOODWx4Dc6B66oimD1EA6WUkRTxmH6kQSZQpTT9pvks9J
uaHoDe8WGHWvgHpKvZLuSZPq8pvYvIBml+A796GafN7QT2LbIxFlwcb8Z6yxK8Ko
FmdnUMiZIMXlZDXmFqlzDtHV1uWrqosc4PaMCpBWTNH8C004vcbdh/s0kIgXvQem
64QzbSz01bf4hICDOU/7kFP9G9kmOWgW6zgMA4GjVIPJ
-----END CERTIFICATE-----
Generated at Sun Jun 16 21:54:42 2024 by rpki-client on console-ams.rpki-client.org