Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/9jFRvc9cWxFkibjPG_VE_ajs5rY.roa
File: 9jFRvc9cWxFkibjPG_VE_ajs5rY.roa (raw, json)
Hash identifier: Dmd3paqWfxaZ/oBNBvhDXeBblh8Ensu4M+zoITznxo0=
Subject key identifier: F6:31:51:BD:CF:5C:5B:11:64:89:B8:CF:1B:F5:44:FD:A8:EC:E6:B6
Certificate issuer: /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial: 018CC5DC6E0B61A8DDF7670E9893543BC553
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/9jFRvc9cWxFkibjPG_VE_ajs5rY.roa
Signing time: Mon 01 Jan 2024 16:30:06 +0000
ROA not before: Mon 01 Jan 2024 16:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21263
IP address blocks: 185.124.224.0/22 maxlen: 24
146.255.112.0/22 maxlen: 24
185.16.72.0/22 maxlen: 24
217.24.192.0/20 maxlen: 24
185.162.220.0/22 maxlen: 24
77.81.52.0/22 maxlen: 24
217.31.208.0/20 maxlen: 24
185.198.140.0/22 maxlen: 24
212.62.192.0/19 maxlen: 24
45.155.112.0/22 maxlen: 24
81.27.112.0/20 maxlen: 24
185.231.72.0/22 maxlen: 24
161.51.240.0/21 maxlen: 24
217.11.144.0/20 maxlen: 24
2a02:590::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:6e:0b:61:a8:dd:f7:67:0e:98:93:54:3b:c5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Validity
Not Before: Jan 1 16:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f63151bdcf5c5b116489b8cf1bf544fda8ece6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5a:d8:27:ef:b9:1a:62:0c:b6:15:55:a6:5a:
a9:de:d7:5d:5d:8c:f7:76:b0:7a:02:05:57:69:a2:
09:7e:a6:c2:28:a8:f6:34:af:b0:57:42:b8:be:2b:
2d:55:c3:be:e9:8c:d5:cc:7a:aa:d3:f1:a9:25:d3:
38:23:ab:9f:5b:fe:82:ce:8d:a0:dd:8c:41:26:00:
a4:85:7f:d2:71:7d:92:56:1d:db:70:ed:ea:c5:81:
80:33:77:4a:f2:3d:76:1f:5a:28:58:bd:96:cb:87:
82:1f:5b:e6:17:60:79:1b:0f:f3:6a:4b:2a:77:cd:
29:e6:3e:ff:dc:d9:76:10:36:82:db:ca:96:4d:5b:
ee:37:9b:b7:cb:82:31:c6:36:96:01:12:a7:7c:a5:
7d:21:2e:62:7b:e3:c7:61:12:6a:ce:6b:60:fa:fb:
d8:30:63:4b:da:96:8e:02:6d:73:1e:ba:ed:b0:96:
f0:8c:20:fd:b0:9a:10:94:3f:a1:e5:6f:a4:22:f6:
77:67:e2:32:b7:59:8a:a5:46:64:78:c7:4f:61:53:
3a:46:7f:01:7a:49:87:b6:d1:ec:60:7e:b7:34:63:
19:a7:58:41:51:64:24:10:55:e9:83:82:69:8f:e1:
74:d1:e3:15:9d:03:8c:e2:e9:45:0d:0a:d8:52:20:
bd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:31:51:BD:CF:5C:5B:11:64:89:B8:CF:1B:F5:44:FD:A8:EC:E6:B6
X509v3 Authority Key Identifier:
keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/9jFRvc9cWxFkibjPG_VE_ajs5rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.112.0/22
77.81.52.0/22
81.27.112.0/20
146.255.112.0/22
161.51.240.0/21
185.16.72.0/22
185.124.224.0/22
185.162.220.0/22
185.198.140.0/22
185.231.72.0/22
212.62.192.0/19
217.11.144.0/20
217.24.192.0/20
217.31.208.0/20
IPv6:
2a02:590::/29
Signature Algorithm: sha256WithRSAEncryption
4f:cf:a9:96:5e:2c:fa:22:27:b0:77:d7:e5:f9:93:b0:74:fb:
0b:24:7b:ff:cb:85:bd:19:30:85:94:2a:1d:9e:0e:41:7e:5c:
ce:94:8b:d5:31:0b:32:22:9f:30:49:d7:fa:12:0e:91:ee:07:
f0:0f:dc:81:11:fd:e3:f5:b1:ba:b8:89:81:25:8e:0e:95:ca:
c5:90:96:a2:9f:ea:78:53:c0:5f:36:0a:34:4b:3a:64:9f:ee:
6b:62:f5:f3:c1:3b:42:31:d4:d0:28:42:94:1a:6a:c7:cf:76:
88:3b:44:ba:4a:3e:3e:9e:ea:0b:72:af:f9:3b:69:39:b5:e6:
b4:68:85:be:a6:32:f3:88:20:cb:9f:cb:10:fe:32:87:58:b8:
38:1e:d2:cc:ac:ca:dc:34:e7:9e:72:ac:1a:4a:32:3c:96:df:
dc:7a:7c:ba:64:28:ce:da:e2:26:61:6c:a9:6f:20:aa:91:f5:
02:48:5e:23:ae:c8:1b:f3:41:7b:29:08:f7:58:3a:5c:2c:82:
04:c5:28:a3:59:d8:49:68:41:15:a1:45:85:50:ab:f7:d9:c4:
de:c9:71:e4:c4:fd:bc:a9:41:29:38:7d:33:78:29:1f:51:18:
b3:38:d1:a0:87:21:61:b2:de:7e:51:79:df:be:52:ac:19:4e:
f9:0a:44:dc
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgISAYzF3G4LYajd92cOmJNUO8VTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNjM5YWRmMWUwYjg0YjlmZjY0ZTRmOGViZTYzOGViYmY1
ZDI3YjkwHhcNMjQwMTAxMTYzMDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjMxNTFiZGNmNWM1YjExNjQ4OWI4Y2YxYmY1NDRmZGE4ZWNlNmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFrYJ++5GmIMthVVplqp3tddXYz3
drB6AgVXaaIJfqbCKKj2NK+wV0K4vistVcO+6YzVzHqq0/GpJdM4I6ufW/6Czo2g
3YxBJgCkhX/ScX2SVh3bcO3qxYGAM3dK8j12H1ooWL2Wy4eCH1vmF2B5Gw/zaksq
d80p5j7/3Nl2EDaC28qWTVvuN5u3y4IxxjaWARKnfKV9IS5ie+PHYRJqzmtg+vvY
MGNL2paOAm1zHrrtsJbwjCD9sJoQlD+h5W+kIvZ3Z+Iyt1mKpUZkeMdPYVM6Rn8B
ekmHttHsYH63NGMZp1hBUWQkEFXpg4Jpj+F00eMVnQOM4ulFDQrYUiC97wIDAQAB
o4ICZjCCAmIwHQYDVR0OBBYEFPYxUb3PXFsRZIm4zxv1RP2o7Oa2MB8GA1UdIwQY
MBaAFKBjmt8eC4S5/2Tk+OvmOOu/XSe5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0dPYTN4NExoTG5fWk9UNDYtWTQ2NzlkSjdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYzM2M2MtMmQwZS00YmNhLWE5ZjIt
ODEzYzVhYWI3ODNlLzEvOWpGUnZjOWNXeEZraWJqUEdfVkVfYWpzNXJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8wYzM2M2MtMmQwZS00YmNhLWE5ZjItODEzYzVhYWI3ODNl
LzEvb0dPYTN4NExoTG5fWk9UNDYtWTQ2NzlkSjdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEHAQH/BG0wazBaBAIAATBUAwQCLZtwAwQC
TVE0AwQEURtwAwQCkv9wAwQDoTPwAwQCuRBIAwQCuXzgAwQCuaLcAwQCucaMAwQC
uedIAwQF1D7AAwQE2QuQAwQE2RjAAwQE2R/QMA0EAgACMAcDBQMqAgWQMA0GCSqG
SIb3DQEBCwUAA4IBAQBPz6mWXiz6Iiewd9fl+ZOwdPsLJHv/y4W9GTCFlCodng5B
flzOlIvVMQsyIp8wSdf6Eg6R7gfwD9yBEf3j9bG6uImBJY4OlcrFkJain+p4U8Bf
Ngo0Szpkn+5rYvXzwTtCMdTQKEKUGmrHz3aIO0S6Sj4+nuoLcq/5O2k5tea0aIW+
pjLziCDLn8sQ/jKHWLg4HtLMrMrcNOeecqwaSjI8lt/ceny6ZCjO2uImYWypbyCq
kfUCSF4jrsgb80F7KQj3WDpcLIIExSijWdhJaEEVoUWFUKv32cTeyXHkxP28qUEp
OH0zeCkfURizONGghyFhst5+UXnfvlKsGU75CkTc
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:24:55 2024 by rpki-client on console-ams.rpki-client.org