Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/eUBqLJzWDP3scX5yvm163G5HujE.roa
File: eUBqLJzWDP3scX5yvm163G5HujE.roa (raw, json)
Hash identifier: Dku3kcEmUT4SkIpF9Cvj1uQp3zSCR1nxYVg8+nxzYL0=
Subject key identifier: 79:40:6A:2C:9C:D6:0C:FD:EC:71:7E:72:BE:6D:7A:DC:6E:47:BA:31
Certificate issuer: /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial: 019040D059BF006F8F48B2909387AB19A2A7
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/eUBqLJzWDP3scX5yvm163G5HujE.roa
Signing time: Sat 22 Jun 2024 16:38:34 +0000
ROA not before: Sat 22 Jun 2024 16:38:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 77.81.79.0/24 maxlen: 24
77.81.80.0/23 maxlen: 24
128.65.172.0/22 maxlen: 24
188.214.234.0/23 maxlen: 24
194.26.2.0/24 maxlen: 24
194.26.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 16:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:40:d0:59:bf:00:6f:8f:48:b2:90:93:87:ab:19:a2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Validity
Not Before: Jun 22 16:38:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79406a2c9cd60cfdec717e72be6d7adc6e47ba31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:77:be:51:fb:ad:f0:95:60:d0:da:e2:07:ee:
96:84:b0:f7:56:7a:de:fa:cc:10:71:85:db:c1:62:
70:42:9b:96:7a:b4:2b:4a:40:f4:87:29:df:f5:e4:
31:4f:5a:8b:ba:ad:9c:a4:eb:64:50:2a:c4:66:1d:
fe:00:e3:48:3a:db:bb:97:75:e9:91:f1:6d:4b:47:
d0:fc:8c:0b:89:8b:fb:44:5c:10:6a:c3:09:05:71:
9a:b8:4a:2f:90:ea:c6:9a:36:90:2b:fb:da:cd:c2:
58:a3:4b:2e:89:c7:8a:ac:d6:30:f4:41:96:f4:6b:
95:1f:3a:d5:31:f9:d5:f2:d4:b5:96:1c:4e:ac:e8:
82:10:8d:c6:a1:24:69:cf:1b:ed:32:1f:f3:f9:85:
27:f0:81:4b:fb:d3:6f:7a:11:c9:21:ac:24:8d:f9:
91:ce:d0:43:bd:3d:c0:7b:12:03:1e:b7:9e:bd:90:
94:42:c3:77:03:ab:d6:0d:1c:26:0e:9b:7e:c1:9a:
b7:27:b4:42:e9:bf:fd:c1:8a:80:73:e1:df:52:12:
76:3b:9e:41:10:b5:1a:49:d4:c0:31:02:11:58:2c:
a7:f8:e5:fb:9a:fc:82:b8:ed:d2:d5:d1:27:96:70:
ef:2e:e5:2d:6d:83:92:62:88:6b:f1:a7:9b:7d:41:
19:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:40:6A:2C:9C:D6:0C:FD:EC:71:7E:72:BE:6D:7A:DC:6E:47:BA:31
X509v3 Authority Key Identifier:
keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/eUBqLJzWDP3scX5yvm163G5HujE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.79.0-77.81.81.255
128.65.172.0/22
188.214.234.0/23
194.26.2.0/24
194.26.21.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:98:d5:70:6e:19:4f:9e:b4:a1:b7:e8:0e:c0:c8:0f:98:44:
73:d0:8a:06:06:8a:5b:e4:a6:a6:6b:13:04:b4:89:00:56:5c:
a6:47:e3:b4:77:09:3a:59:73:cc:60:24:7c:63:7e:e7:1e:a9:
f1:4c:f7:c6:0b:ea:06:af:c1:78:f5:df:a3:11:4b:cb:c7:08:
3b:93:71:1d:6d:bd:f1:45:4a:02:a6:c0:9a:e9:eb:30:42:26:
a6:b2:5d:ff:63:fc:d9:c2:69:83:09:d9:cf:4f:bf:3e:37:60:
b7:02:fe:cb:76:94:2e:ab:20:9f:c8:2d:41:31:d9:98:ca:5b:
c2:82:57:6b:ea:8c:7c:59:2a:3b:32:1a:30:36:6f:fd:f5:27:
ea:a6:98:01:3d:5a:c0:7d:f8:c4:9a:a0:e0:4f:f7:1c:dc:1a:
ed:d2:0c:3f:3c:e5:89:b1:71:2b:eb:0f:0a:d5:b4:d6:86:a9:
28:73:16:36:29:99:6b:16:cc:39:dc:72:86:7a:81:b2:43:fc:
5e:79:30:bd:3a:8f:c4:8c:f5:6d:83:7c:c1:f5:c3:26:da:c7:
6f:bb:98:95:e5:0b:08:0e:9e:79:a0:58:d4:2c:ab:ef:67:2d:
68:d4:4d:3b:e0:7f:f7:ea:0d:26:fa:f1:23:e5:7a:7f:3a:7f:
84:06:70:58
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZBA0Fm/AG+PSLKQk4erGaKnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMmYyZTg2ZGQ3Y2M5MTAxNjU4ZmY4ZDVhNTI0MTQ0NWZj
ZDFkNmEwHhcNMjQwNjIyMTYzODM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTQwNmEyYzljZDYwY2ZkZWM3MTdlNzJiZTZkN2FkYzZlNDdiYTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1He+Ufut8JVg0NriB+6WhLD3Vnre
+swQcYXbwWJwQpuWerQrSkD0hynf9eQxT1qLuq2cpOtkUCrEZh3+AONIOtu7l3Xp
kfFtS0fQ/IwLiYv7RFwQasMJBXGauEovkOrGmjaQK/vazcJYo0suiceKrNYw9EGW
9GuVHzrVMfnV8tS1lhxOrOiCEI3GoSRpzxvtMh/z+YUn8IFL+9NvehHJIawkjfmR
ztBDvT3AexIDHreevZCUQsN3A6vWDRwmDpt+wZq3J7RC6b/9wYqAc+HfUhJ2O55B
ELUaSdTAMQIRWCyn+OX7mvyCuO3S1dEnlnDvLuUtbYOSYohr8aebfUEZhwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFHlAaiyc1gz97HF+cr5tetxuR7oxMB8GA1UdIwQY
MBaAFK8vLobdfMkQFlj/jVpSQURfzR1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnk4dWh0MTh5UkFXV1AtTldsSkJSRl9OSFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lMDhiOGUtYmYyMi00MzVjLThiMWYt
NDZiYjdhZWMxZjMwLzEvZVVCcUxKeldEUDNzY1g1eXZtMTYzRzVIdWpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lMDhiOGUtYmYyMi00MzVjLThiMWYtNDZiYjdhZWMxZjMw
LzEvcnk4dWh0MTh5UkFXV1AtTldsSkJSRl9OSFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBABNUU8D
BAFNUVADBAKAQawDBAG81uoDBADCGgIDBADCGhUwDQYJKoZIhvcNAQELBQADggEB
AJqY1XBuGU+etKG36A7AyA+YRHPQigYGilvkpqZrEwS0iQBWXKZH47R3CTpZc8xg
JHxjfuceqfFM98YL6gavwXj136MRS8vHCDuTcR1tvfFFSgKmwJrp6zBCJqayXf9j
/NnCaYMJ2c9Pvz43YLcC/st2lC6rIJ/ILUEx2ZjKW8KCV2vqjHxZKjsyGjA2b/31
J+qmmAE9WsB9+MSaoOBP9xzcGu3SDD885YmxcSvrDwrVtNaGqShzFjYpmWsWzDnc
coZ6gbJD/F55ML06j8SM9W2DfMH1wybax2+7mJXlCwgOnnmgWNQsq+9nLWjUTTvg
f/fqDSb68SPlen86f4QGcFg=
-----END CERTIFICATE-----
Generated at Sat Jun 29 01:57:18 2024 by rpki-client on console-ams.rpki-client.org