Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/jD9hcW9TbeC3qLeJHoOFHC1ygBc.roa
File: jD9hcW9TbeC3qLeJHoOFHC1ygBc.roa (raw, json)
Hash identifier: J6R+gG7fNo9OiReVg3IZUNndIgyVgZuc7iQD7HdkMSs=
Subject key identifier: 8C:3F:61:71:6F:53:6D:E0:B7:A8:B7:89:1E:83:85:1C:2D:72:80:17
Certificate issuer: /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial: 018CC26D10CCCDC450DD3E8778C66FB7249E
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/jD9hcW9TbeC3qLeJHoOFHC1ygBc.roa
Signing time: Mon 01 Jan 2024 00:29:36 +0000
ROA not before: Mon 01 Jan 2024 00:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 217.195.197.0/24 maxlen: 24
217.195.195.0/24 maxlen: 24
80.93.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:10:cc:cd:c4:50:dd:3e:87:78:c6:6f:b7:24:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Validity
Not Before: Jan 1 00:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c3f61716f536de0b7a8b7891e83851c2d728017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:44:c7:c5:aa:98:57:af:94:cd:a1:0d:e9:76:
83:d1:1c:4e:52:96:2d:3d:6a:15:5a:0c:8c:57:ca:
4a:e1:dc:6c:e7:0d:d6:c9:3e:99:8a:59:90:c8:f8:
b6:e5:35:b7:08:bd:99:69:ee:8c:6a:ca:1d:94:fc:
70:1d:9b:f4:f2:57:9d:0c:c3:c2:7c:76:14:68:ab:
b5:bd:a9:a9:67:b9:80:2f:1a:c5:94:2c:02:69:fb:
97:55:50:97:08:50:07:15:af:4f:46:a0:8d:3b:e8:
b5:4f:09:11:39:8f:58:4a:aa:e3:e3:94:1a:62:a7:
33:ba:85:da:81:90:fd:f5:04:21:5b:89:00:e6:16:
89:37:85:4a:de:90:1a:19:d7:56:42:96:7f:4f:fa:
ec:13:df:01:3b:10:1c:cf:ab:9c:22:0c:2b:3c:79:
d6:f0:58:13:3d:1d:10:d7:c8:72:5a:72:b8:fa:85:
a8:4e:2a:fd:c0:94:47:c3:dc:43:fd:17:3b:ed:df:
90:16:e6:52:f8:3b:bb:05:7a:4f:de:73:28:a9:45:
05:94:b2:76:2d:a8:0d:74:7c:ee:d1:52:d3:aa:0d:
61:40:87:2a:b4:67:68:0e:d8:d5:70:a8:bf:f2:28:
d9:90:d6:f7:b1:37:4e:39:43:6c:83:75:3d:7b:2a:
23:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3F:61:71:6F:53:6D:E0:B7:A8:B7:89:1E:83:85:1C:2D:72:80:17
X509v3 Authority Key Identifier:
keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/jD9hcW9TbeC3qLeJHoOFHC1ygBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.220.0/24
217.195.195.0/24
217.195.197.0/24
Signature Algorithm: sha256WithRSAEncryption
34:15:c1:fc:5a:35:e7:ed:91:a9:ef:d1:81:c5:f1:ab:3f:89:
e9:87:21:64:cc:22:c7:9e:67:0b:5a:2f:3f:6a:31:ec:3e:0b:
5d:15:05:24:bf:9c:bc:3e:b0:4f:77:cb:b8:3b:cd:b7:9a:22:
9e:78:9a:ce:31:81:1a:13:78:0d:19:34:d8:84:65:81:f2:61:
9e:25:a3:90:91:a9:a6:1d:19:1e:5d:bd:2a:bd:ca:75:df:16:
d5:81:0a:d1:22:fc:08:50:1b:e4:fa:0b:48:4e:42:88:42:27:
af:d7:8b:32:23:2e:01:db:ee:24:e3:bb:db:f1:a5:b6:3d:e6:
8a:bf:12:1c:13:7e:36:97:b5:8c:31:90:76:12:ac:8b:4a:c2:
95:2b:76:60:6c:64:0b:7d:5c:54:0e:3c:37:74:5c:47:15:4b:
de:7e:53:45:f3:0b:d8:4a:89:3d:c5:4f:b1:aa:aa:4e:09:59:
16:54:02:e4:5f:7b:79:c8:c1:e6:e2:ce:fe:e8:1c:d2:c1:ad:
c4:34:c4:29:50:70:f2:43:e1:dd:9c:04:21:a9:44:2d:21:fa:
5e:a8:43:18:47:69:9d:6a:5f:b5:ff:b3:1d:bd:5a:4a:ca:96:
88:e9:7e:1d:d4:7c:45:9d:50:f2:2f:5a:f0:6f:04:85:9c:81:
6f:0f:5e:33
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzCbRDMzcRQ3T6HeMZvtySeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MjBlYWRiMmUxNTYyYjRlMmU0ZjQ4MDc3MmMzNjg4N2E3
NzdmMjQwHhcNMjQwMTAxMDAyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzNmNjE3MTZmNTM2ZGUwYjdhOGI3ODkxZTgzODUxYzJkNzI4MDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ETHxaqYV6+UzaEN6XaD0RxOUpYt
PWoVWgyMV8pK4dxs5w3WyT6ZilmQyPi25TW3CL2Zae6MasodlPxwHZv08ledDMPC
fHYUaKu1vampZ7mALxrFlCwCafuXVVCXCFAHFa9PRqCNO+i1TwkROY9YSqrj45Qa
YqczuoXagZD99QQhW4kA5haJN4VK3pAaGddWQpZ/T/rsE98BOxAcz6ucIgwrPHnW
8FgTPR0Q18hyWnK4+oWoTir9wJRHw9xD/Rc77d+QFuZS+Du7BXpP3nMoqUUFlLJ2
LagNdHzu0VLTqg1hQIcqtGdoDtjVcKi/8ijZkNb3sTdOOUNsg3U9eyojNQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIw/YXFvU23gt6i3iR6DhRwtcoAXMB8GA1UdIwQY
MBaAFAYg6tsuFWK04uT0gHcsNoh6d38kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jYzhiZmEtMmIxMy00Njc0LWE5ODQt
YTVmZGI1NzBmZTlhLzEvakQ5aGNXOVRiZUMzcUxlSkhvT0ZIQzF5Z0JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jYzhiZmEtMmIxMy00Njc0LWE5ODQtYTVmZGI1NzBmZTlh
LzEvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUF3cAwQA
2cPDAwQA2cPFMA0GCSqGSIb3DQEBCwUAA4IBAQA0FcH8WjXn7ZGp79GBxfGrP4np
hyFkzCLHnmcLWi8/ajHsPgtdFQUkv5y8PrBPd8u4O823miKeeJrOMYEaE3gNGTTY
hGWB8mGeJaOQkammHRkeXb0qvcp13xbVgQrRIvwIUBvk+gtITkKIQiev14syIy4B
2+4k47vb8aW2PeaKvxIcE342l7WMMZB2EqyLSsKVK3ZgbGQLfVxUDjw3dFxHFUve
flNF8wvYSok9xU+xqqpOCVkWVALkX3t5yMHm4s7+6BzSwa3ENMQpUHDyQ+HdnAQh
qUQtIfpeqEMYR2mdal+1/7MdvVpKypaI6X4d1HxFnVDyL1rwbwSFnIFvD14z
-----END CERTIFICATE-----
Generated at Thu May 2 02:51:41 2024 by rpki-client on console-fra.rpki-client.org