Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/B2wzjYlWbGdXUpKl4TbvE0rK1qo.roa
File: B2wzjYlWbGdXUpKl4TbvE0rK1qo.roa (raw, json)
Hash identifier: zQX+7/hnXob4e694FziG516VRodeztkTw/ngSh3eVho=
Subject key identifier: 07:6C:33:8D:89:56:6C:67:57:52:92:A5:E1:36:EF:13:4A:CA:D6:AA
Certificate issuer: /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Certificate serial: 018CC94CF48758FC923FB69D1EB0E75634E0
Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/B2wzjYlWbGdXUpKl4TbvE0rK1qo.roa
Signing time: Tue 02 Jan 2024 08:31:52 +0000
ROA not before: Tue 02 Jan 2024 08:31:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200924
IP address blocks: 217.147.48.0/20 maxlen: 24
217.147.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:f4:87:58:fc:92:3f:b6:9d:1e:b0:e7:56:34:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Validity
Not Before: Jan 2 08:31:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=076c338d89566c67575292a5e136ef134acad6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:15:cc:26:51:0c:bf:24:e5:25:43:9d:53:63:
df:bf:a8:3c:31:69:75:8b:cf:6c:14:02:b8:a5:3b:
ba:26:6f:72:6a:6b:97:98:11:94:80:2b:4d:71:9a:
2e:1b:b4:9e:a0:15:81:79:17:7b:22:dd:eb:a7:59:
27:db:5f:9f:f4:ea:10:25:75:19:52:3d:5a:b5:79:
8c:fc:84:75:8c:76:1c:5c:d5:45:2f:fb:a4:80:58:
91:6e:db:8d:8e:25:e0:04:1e:47:b6:8c:8b:54:77:
7f:8e:e2:3f:d2:f4:81:87:7a:40:53:81:df:48:20:
1a:23:c3:28:9d:8c:46:f7:db:27:6a:4d:02:73:e0:
a0:d6:69:fe:70:6c:e1:37:52:d3:9d:5c:7b:47:94:
f1:ec:9a:c8:b4:2f:9d:f3:4d:c4:61:95:26:6f:78:
62:3c:c9:2a:8d:25:63:a1:a0:d6:28:26:f7:a2:91:
1b:e4:12:66:fc:91:fb:9c:58:ce:89:26:12:d5:f6:
ad:4f:c1:99:f3:c0:51:78:ba:11:c2:c5:a5:e2:c0:
63:56:4d:33:62:18:ca:5e:c6:22:0e:36:13:ff:86:
4a:9c:b3:d4:b5:5d:fd:4e:5a:39:70:92:23:46:a9:
6d:b2:46:1f:36:3a:c5:06:a9:0b:1b:ae:00:ad:7e:
a7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6C:33:8D:89:56:6C:67:57:52:92:A5:E1:36:EF:13:4A:CA:D6:AA
X509v3 Authority Key Identifier:
keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/B2wzjYlWbGdXUpKl4TbvE0rK1qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.48.0/20
Signature Algorithm: sha256WithRSAEncryption
ad:64:23:36:56:d4:4b:8a:b5:13:6a:3b:bc:75:80:e8:e1:f9:
57:19:3e:71:b4:b1:5c:36:06:75:7e:9e:57:ad:15:ea:18:92:
f5:88:6a:94:64:83:c5:90:e9:18:77:f3:36:f6:a4:e3:b6:d9:
56:e2:33:23:24:22:4d:1c:82:e1:bb:0b:ed:2f:7f:a2:d5:a7:
97:15:0a:6f:f2:3e:d9:79:7d:e0:1b:5f:2d:3a:d1:ff:8d:80:
93:3e:17:78:31:0d:39:af:3a:e8:66:2f:e7:cf:20:6c:17:71:
6b:17:5f:30:cb:97:4f:43:7b:c0:04:53:76:f9:cb:71:df:ac:
2d:6a:24:f5:c6:79:e4:2e:d7:61:57:8f:33:bc:94:97:7c:a6:
1d:e6:28:cd:1e:82:c4:e2:41:46:99:40:bd:fb:08:d5:d2:f9:
a1:c9:df:ba:5b:2a:a5:4d:7f:85:e5:7c:7f:be:b9:64:9d:41:
f6:cc:82:f1:b0:04:b3:8e:f5:b7:7f:b7:12:a7:39:49:6f:33:
8a:30:39:74:0c:c8:dc:91:b8:8a:f1:a9:2e:e9:71:63:b0:54:
04:e0:fb:c1:22:e6:37:d5:d7:fa:3b:5d:bd:03:90:eb:8e:c3:
0e:bb:df:6c:6e:bc:30:b7:19:a9:29:cd:4d:8a:e2:3c:29:89:
7d:4e:6c:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTPSHWPySP7adHrDnVjTgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjY2E3NjNmM2RiMjk2NWExZTRlYjBiZjc2YzFjYjg2OGJh
YWU0NmQwHhcNMjQwMTAyMDgzMTUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzZjMzM4ZDg5NTY2YzY3NTc1MjkyYTVlMTM2ZWYxMzRhY2FkNmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxXMJlEMvyTlJUOdU2Pfv6g8MWl1
i89sFAK4pTu6Jm9yamuXmBGUgCtNcZouG7SeoBWBeRd7It3rp1kn21+f9OoQJXUZ
Uj1atXmM/IR1jHYcXNVFL/ukgFiRbtuNjiXgBB5HtoyLVHd/juI/0vSBh3pAU4Hf
SCAaI8MonYxG99snak0Cc+Cg1mn+cGzhN1LTnVx7R5Tx7JrItC+d803EYZUmb3hi
PMkqjSVjoaDWKCb3opEb5BJm/JH7nFjOiSYS1fatT8GZ88BReLoRwsWl4sBjVk0z
YhjKXsYiDjYT/4ZKnLPUtV39Tlo5cJIjRqltskYfNjrFBqkLG64ArX6n5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAdsM42JVmxnV1KSpeE27xNKytaqMB8GA1UdIwQY
MBaAFMzKdj89spZaHk6wv3bBy4aLquRtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xYzA5MGMtNzRkYi00NTMxLTk2Zjct
ZmFjNjNjMDNjMjVhLzEvQjJ3empZbFdiR2RYVXBLbDRUYnZFMHJLMXFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8xYzA5MGMtNzRkYi00NTMxLTk2ZjctZmFjNjNjMDNjMjVh
LzEvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2ZMwMA0G
CSqGSIb3DQEBCwUAA4IBAQCtZCM2VtRLirUTaju8dYDo4flXGT5xtLFcNgZ1fp5X
rRXqGJL1iGqUZIPFkOkYd/M29qTjttlW4jMjJCJNHILhuwvtL3+i1aeXFQpv8j7Z
eX3gG18tOtH/jYCTPhd4MQ05rzroZi/nzyBsF3FrF18wy5dPQ3vABFN2+ctx36wt
aiT1xnnkLtdhV48zvJSXfKYd5ijNHoLE4kFGmUC9+wjV0vmhyd+6WyqlTX+F5Xx/
vrlknUH2zILxsASzjvW3f7cSpzlJbzOKMDl0DMjckbiK8aku6XFjsFQE4PvBIuY3
1df6O129A5DrjsMOu99sbrwwtxmpKc1NiuI8KYl9TmyK
-----END CERTIFICATE-----
Generated at Fri Jun 7 23:44:01 2024 by rpki-client on console-fra.rpki-client.org