Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/gAdUh56npv0zLxWS57QxwADWSWQ.roa
File: gAdUh56npv0zLxWS57QxwADWSWQ.roa (raw, json)
Hash identifier: gyLWoebpiIwUu4/avZ6DNQG6N1Ic7EsMvF9Ys8Kux/A=
Subject key identifier: 80:07:54:87:9E:A7:A6:FD:33:2F:15:92:E7:B4:31:C0:00:D6:49:64
Certificate issuer: /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial: 018CC26D0FEE8F195B980F0C28DBDBF252B7
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/gAdUh56npv0zLxWS57QxwADWSWQ.roa
Signing time: Mon 01 Jan 2024 00:29:36 +0000
ROA not before: Mon 01 Jan 2024 00:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20649
IP address blocks: 78.111.97.0/24 maxlen: 24
78.111.98.0/24 maxlen: 24
78.111.106.0/24 maxlen: 24
80.93.212.0/24 maxlen: 24
80.93.208.0/24 maxlen: 24
80.93.213.0/24 maxlen: 24
217.195.192.0/24 maxlen: 24
80.93.216.0/24 maxlen: 24
217.195.198.0/24 maxlen: 24
217.195.196.0/24 maxlen: 24
217.195.206.0/24 maxlen: 24
217.195.204.0/24 maxlen: 24
217.195.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:0f:ee:8f:19:5b:98:0f:0c:28:db:db:f2:52:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Validity
Not Before: Jan 1 00:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=800754879ea7a6fd332f1592e7b431c000d64964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9f:50:73:93:4f:5e:d1:8a:af:a9:95:c5:55:
12:af:86:f8:cb:a1:64:4c:63:ab:a7:c7:7f:2b:56:
35:78:ce:14:7b:25:cd:c9:ce:11:0d:37:20:97:09:
eb:67:e6:50:74:93:41:0a:97:e5:c4:9e:46:13:5e:
c6:04:f3:7d:2a:0c:2e:08:23:4b:a4:87:77:04:ca:
97:ca:98:bf:97:0f:f7:79:a6:42:67:f7:22:b3:2b:
98:0d:73:c4:2b:f2:62:28:34:61:5b:4d:58:e8:bd:
ba:f5:74:7c:2e:10:a5:4f:72:8e:74:89:ab:86:9e:
8a:4c:ac:da:d3:81:bb:67:7d:9d:33:09:4d:df:d1:
c7:d8:3b:e8:cf:a3:5d:6f:8a:25:56:b3:26:a3:bd:
07:b2:e0:4a:85:fe:8c:c7:16:00:07:fc:72:c4:d6:
c1:47:48:65:a6:9e:84:66:04:30:15:ed:67:b0:76:
71:74:64:4f:b6:11:f6:46:5e:d1:a6:13:9c:f2:59:
71:5f:d4:ac:4d:15:d5:8a:91:c7:32:7c:61:b5:20:
c1:55:e7:6e:c0:47:76:45:01:2f:ae:14:b0:2a:4f:
51:61:fa:d4:f8:f0:9c:83:eb:93:5a:33:76:26:e2:
5e:9a:6e:ef:b6:7a:5d:65:0f:dc:34:d1:96:d7:e2:
20:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:07:54:87:9E:A7:A6:FD:33:2F:15:92:E7:B4:31:C0:00:D6:49:64
X509v3 Authority Key Identifier:
keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/gAdUh56npv0zLxWS57QxwADWSWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.97.0-78.111.98.255
78.111.106.0/24
80.93.208.0/24
80.93.212.0/23
80.93.216.0/24
217.195.192.0/24
217.195.196.0/24
217.195.198.0/24
217.195.203.0-217.195.204.255
217.195.206.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:c3:1f:d4:8d:28:f7:10:ae:ba:bc:00:9b:02:ff:94:5b:1d:
ba:c1:62:1e:fe:e4:93:44:93:4f:9e:11:be:8a:04:ea:0e:91:
96:22:e4:e5:ba:58:f4:65:87:09:bf:83:3f:ce:8a:7a:86:e5:
9a:d2:bd:18:95:8f:3a:29:c7:3a:28:2c:00:a2:6b:2c:5d:38:
95:98:20:e3:12:51:fc:5a:af:10:e9:4d:20:1d:3d:28:d6:34:
1c:22:02:71:c9:e9:db:f9:d3:e1:3b:e9:71:d1:43:83:5c:9c:
1c:79:39:56:df:cc:46:f5:be:62:7a:43:2e:f3:87:ef:00:03:
b9:27:d7:12:ab:dd:05:d7:d7:d1:b8:57:d9:51:25:2a:bf:45:
fc:a4:cf:d2:0f:da:d9:ad:5a:84:86:05:35:22:68:c3:37:50:
6e:e0:84:13:9a:5d:8b:6b:6d:68:9e:1e:a9:a4:25:49:48:27:
65:21:83:61:71:7f:2e:af:93:a8:52:2c:42:e3:d3:46:ea:9f:
f6:5b:58:4f:c7:4d:ac:4e:9c:b3:92:81:a8:7a:ac:f4:51:49:
83:88:f1:c1:4c:08:59:23:02:11:e7:3d:1c:c3:bc:27:33:c0:
c3:82:48:d6:bf:24:73:4c:6c:55:94:cd:6e:db:32:3c:89:e3:
53:3e:80:f8
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAYzCbQ/ujxlbmA8MKNvb8lK3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MjBlYWRiMmUxNTYyYjRlMmU0ZjQ4MDc3MmMzNjg4N2E3
NzdmMjQwHhcNMjQwMTAxMDAyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDA3NTQ4NzllYTdhNmZkMzMyZjE1OTJlN2I0MzFjMDAwZDY0OTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp9Qc5NPXtGKr6mVxVUSr4b4y6Fk
TGOrp8d/K1Y1eM4UeyXNyc4RDTcglwnrZ+ZQdJNBCpflxJ5GE17GBPN9KgwuCCNL
pId3BMqXypi/lw/3eaZCZ/cisyuYDXPEK/JiKDRhW01Y6L269XR8LhClT3KOdImr
hp6KTKza04G7Z32dMwlN39HH2Dvoz6Ndb4olVrMmo70HsuBKhf6MxxYAB/xyxNbB
R0hlpp6EZgQwFe1nsHZxdGRPthH2Rl7RphOc8llxX9SsTRXVipHHMnxhtSDBVedu
wEd2RQEvrhSwKk9RYfrU+PCcg+uTWjN2JuJemm7vtnpdZQ/cNNGW1+IgkQIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFIAHVIeep6b9My8Vkue0McAA1klkMB8GA1UdIwQY
MBaAFAYg6tsuFWK04uT0gHcsNoh6d38kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jYzhiZmEtMmIxMy00Njc0LWE5ODQt
YTVmZGI1NzBmZTlhLzEvZ0FkVWg1Nm5wdjB6THhXUzU3UXh3QURXU1dRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jYzhiZmEtMmIxMy00Njc0LWE5ODQtYTVmZGI1NzBmZTlh
LzEvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMMAwDBABOb2ED
BABOb2IDBABOb2oDBABQXdADBAFQXdQDBABQXdgDBADZw8ADBADZw8QDBADZw8Yw
DAMEANnDywMEANnDzAMEANnDzjANBgkqhkiG9w0BAQsFAAOCAQEApsMf1I0o9xCu
urwAmwL/lFsdusFiHv7kk0STT54RvooE6g6RliLk5bpY9GWHCb+DP86KeoblmtK9
GJWPOinHOigsAKJrLF04lZgg4xJR/FqvEOlNIB09KNY0HCICccnp2/nT4TvpcdFD
g1ycHHk5Vt/MRvW+YnpDLvOH7wADuSfXEqvdBdfX0bhX2VElKr9F/KTP0g/a2a1a
hIYFNSJowzdQbuCEE5pdi2ttaJ4eqaQlSUgnZSGDYXF/Lq+TqFIsQuPTRuqf9ltY
T8dNrE6cs5KBqHqs9FFJg4jxwUwIWSMCEec9HMO8JzPAw4JI1r8kc0xsVZTNbtsy
PInjUz6A+A==
-----END CERTIFICATE-----
Generated at Fri Jun 7 18:48:09 2024 by rpki-client on console-fra.rpki-client.org