Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/rQP617Lv4mEM08Xd8IXTR2ZJ8LA.roa
File: rQP617Lv4mEM08Xd8IXTR2ZJ8LA.roa (raw, json)
Hash identifier: q30xiHUa2q7PpBSnFKKr7Gi2gyfBE/Jc+/T8HGGY8i0=
Subject key identifier: AD:03:FA:D7:B2:EF:E2:61:0C:D3:C5:DD:F0:85:D3:47:66:49:F0:B0
Certificate issuer: /CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4
Certificate serial: 018E00D9F77C8B38632D16786B21C5E45683
Authority key identifier: 8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/rQP617Lv4mEM08Xd8IXTR2ZJ8LA.roa
Signing time: Sat 02 Mar 2024 20:27:48 +0000
ROA not before: Sat 02 Mar 2024 20:27:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216046
IP address blocks: 77.247.88.0/24 maxlen: 24
77.247.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:00:d9:f7:7c:8b:38:63:2d:16:78:6b:21:c5:e4:56:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4
Validity
Not Before: Mar 2 20:27:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad03fad7b2efe2610cd3c5ddf085d3476649f0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f1:da:31:18:ed:21:d8:f8:16:9b:51:95:e6:
ed:a2:2e:2d:0e:b7:fc:3b:b5:62:ed:74:74:62:42:
05:7f:7e:96:e1:fe:4b:c5:ea:71:ce:4c:19:10:d4:
80:ab:33:db:5c:16:b8:df:6e:18:ce:69:1d:e4:ac:
04:31:ed:13:02:3a:f9:26:b6:52:d5:50:69:43:03:
0d:6a:76:d0:23:d8:b6:8b:74:01:1c:51:1d:55:56:
e3:ff:3b:b1:9e:6d:18:ed:e2:e8:9b:50:64:ac:db:
01:77:d7:c6:f9:14:18:fc:aa:73:b6:7e:af:59:5e:
d6:93:77:6d:b1:48:9b:24:94:ac:e7:6d:f6:17:c7:
74:f7:08:42:9a:83:09:9b:16:b4:9b:26:83:9c:08:
e5:56:af:40:71:ed:95:0d:d1:c4:d8:69:14:de:6a:
09:74:ff:54:88:85:09:56:1e:8b:cf:11:25:64:08:
4d:c1:a5:d2:66:cc:2b:a4:62:30:11:5f:ba:71:27:
b0:76:81:98:8e:6e:86:1e:74:a9:99:b0:26:e1:65:
83:3f:33:51:fe:8d:fa:bf:cd:54:6e:21:8a:2d:d5:
e8:8f:68:68:f1:28:38:d0:24:23:61:0b:10:8a:77:
91:6f:17:8b:53:b1:c3:d3:c8:31:48:23:eb:d0:2d:
6b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:03:FA:D7:B2:EF:E2:61:0C:D3:C5:DD:F0:85:D3:47:66:49:F0:B0
X509v3 Authority Key Identifier:
keyid:8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/rQP617Lv4mEM08Xd8IXTR2ZJ8LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.88.0/24
77.247.90.0/24
Signature Algorithm: sha256WithRSAEncryption
00:01:cb:a3:fe:18:b1:53:73:7e:43:40:cd:2c:60:15:df:ab:
68:f3:0b:2b:1a:72:c1:1d:20:e2:22:30:84:3b:7a:6c:ef:55:
1f:14:3f:b6:0f:78:67:cd:fd:07:04:36:06:6c:8c:cd:3d:ae:
f9:cd:2f:ab:29:fc:ab:85:cf:5f:26:39:69:ae:b1:03:11:fd:
fd:f7:c9:c2:8e:b3:66:9f:14:5a:e6:9a:ec:e2:cd:80:8d:c4:
54:76:96:a6:c0:25:51:7e:1e:75:d2:97:c8:fd:b7:d4:f8:42:
53:9f:33:38:66:35:39:f4:5d:84:9b:e6:6b:e2:f6:db:26:92:
e6:2e:d4:7e:be:0a:f3:cc:5d:ec:bc:ae:53:9e:15:cd:bf:81:
94:6a:fc:10:e1:a4:9b:e9:53:0a:3e:ba:6c:47:9c:a9:38:57:
ae:14:a1:ed:71:de:9f:25:8c:e0:65:7b:89:70:b9:b9:a7:90:
d6:5f:2b:2c:35:4e:cd:92:8e:b5:23:b1:96:e8:4d:01:1a:7f:
28:02:e0:6c:2d:29:1e:34:6e:d8:02:43:6d:6f:3d:82:64:ff:
40:2e:7f:ee:c0:30:43:d4:d2:00:c7:66:16:a4:62:c1:5b:e4:
cf:fc:4d:aa:0f:d4:0c:1c:5d:26:d1:9c:12:09:8d:a0:5b:7e:
9a:a1:42:1e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY4A2fd8izhjLRZ4ayHF5FaDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZDI5MzBkMWZlMWRkNDMwNDkxZmQ3YjgzMWRlOWM2MTY5
MmFkZTQwHhcNMjQwMzAyMjAyNzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDAzZmFkN2IyZWZlMjYxMGNkM2M1ZGRmMDg1ZDM0NzY2NDlmMGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fHaMRjtIdj4FptRlebtoi4tDrf8
O7Vi7XR0YkIFf36W4f5LxepxzkwZENSAqzPbXBa4324Yzmkd5KwEMe0TAjr5JrZS
1VBpQwMNanbQI9i2i3QBHFEdVVbj/zuxnm0Y7eLom1BkrNsBd9fG+RQY/Kpztn6v
WV7Wk3dtsUibJJSs5232F8d09whCmoMJmxa0myaDnAjlVq9Ace2VDdHE2GkU3moJ
dP9UiIUJVh6LzxElZAhNwaXSZswrpGIwEV+6cSewdoGYjm6GHnSpmbAm4WWDPzNR
/o36v81UbiGKLdXoj2ho8Sg40CQjYQsQineRbxeLU7HD08gxSCPr0C1rawIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK0D+tey7+JhDNPF3fCF00dmSfCwMB8GA1UdIwQY
MBaAFIrSkw0f4d1DBJH9e4Md6cYWkq3kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRLVERSX2gzVU1Fa2YxN2d4M3B4aGFTcmVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9iZTc4OTQtMGNjYy00ZmJkLTg4MGIt
OTc1OGNiMmI4NDRlLzEvclFQNjE3THY0bUVNMDhYZDhJWFRSMlpKOExBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9iZTc4OTQtMGNjYy00ZmJkLTg4MGItOTc1OGNiMmI4NDRl
LzEvaXRLVERSX2gzVU1Fa2YxN2d4M3B4aGFTcmVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATfdYAwQA
TfdaMA0GCSqGSIb3DQEBCwUAA4IBAQAAAcuj/hixU3N+Q0DNLGAV36to8wsrGnLB
HSDiIjCEO3ps71UfFD+2D3hnzf0HBDYGbIzNPa75zS+rKfyrhc9fJjlprrEDEf39
98nCjrNmnxRa5prs4s2AjcRUdpamwCVRfh510pfI/bfU+EJTnzM4ZjU59F2Em+Zr
4vbbJpLmLtR+vgrzzF3svK5TnhXNv4GUavwQ4aSb6VMKPrpsR5ypOFeuFKHtcd6f
JYzgZXuJcLm5p5DWXyssNU7Nko61I7GW6E0BGn8oAuBsLSkeNG7YAkNtbz2CZP9A
Ln/uwDBD1NIAx2YWpGLBW+TP/E2qD9QMHF0m0ZwSCY2gW36aoUIe
-----END CERTIFICATE-----
Generated at Sat Jun 8 01:19:56 2024 by rpki-client on console-ams.rpki-client.org