Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/tWGdaIblsFrUS6E-DYJHyNTcyqQ.roa
File: tWGdaIblsFrUS6E-DYJHyNTcyqQ.roa (raw, json)
Hash identifier: zQJeUgL2Dfvg/AMwiyt2QzMaCB9h60Qy0USSUB3YXpg=
Subject key identifier: B5:61:9D:68:86:E5:B0:5A:D4:4B:A1:3E:0D:82:47:C8:D4:DC:CA:A4
Certificate issuer: /CN=27618505d3b4c000217590f7b7b59bf61ff2f375
Certificate serial: 018CC4254D43289CF188F18DD41B2CEE631F
Authority key identifier: 27:61:85:05:D3:B4:C0:00:21:75:90:F7:B7:B5:9B:F6:1F:F2:F3:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/tWGdaIblsFrUS6E-DYJHyNTcyqQ.roa
Signing time: Mon 01 Jan 2024 08:30:27 +0000
ROA not before: Mon 01 Jan 2024 08:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43568
IP address blocks: 178.250.216.0/21 maxlen: 21
77.247.144.0/20 maxlen: 21
128.0.16.0/21 maxlen: 21
2a02:2470::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4d:43:28:9c:f1:88:f1:8d:d4:1b:2c:ee:63:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27618505d3b4c000217590f7b7b59bf61ff2f375
Validity
Not Before: Jan 1 08:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5619d6886e5b05ad44ba13e0d8247c8d4dccaa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:71:48:4e:85:6d:c3:1f:bf:2e:f9:53:c2:50:
35:6f:29:81:c4:c6:18:e5:27:e1:33:e0:e1:4a:e2:
d8:37:aa:f0:d4:db:be:e3:85:aa:42:8e:ee:7b:94:
7b:1f:e1:21:4c:e6:f2:46:12:bb:65:a1:68:8d:bb:
0c:ea:5d:3b:c8:0b:ac:b8:e4:05:e6:8c:6c:93:2d:
59:bf:47:4b:46:f7:39:b0:f6:5d:c3:f3:63:f1:5b:
75:19:5d:04:e8:40:2c:a3:c9:20:57:4d:7f:0a:8c:
52:4b:f1:be:00:49:c4:21:9f:0e:65:a9:0a:36:9b:
26:1c:97:b0:75:13:2d:c5:db:f3:3e:6f:05:53:b2:
58:98:b3:c7:99:88:84:b6:7f:b3:88:b1:08:00:4e:
10:3f:78:a8:50:c3:f1:3e:ff:06:89:f0:cd:62:57:
dc:b2:81:dd:30:5e:39:43:cc:2f:6f:f7:43:f1:c8:
a3:56:0d:03:0a:b8:2a:7f:47:66:49:28:f5:60:96:
11:cb:7b:96:59:2b:68:89:28:7d:da:07:3b:39:4e:
6b:ed:f6:9c:94:5e:53:0a:d6:97:70:ac:25:9f:1d:
8d:90:be:55:bf:85:59:8b:8d:9e:ea:11:5a:b4:0a:
8a:61:27:44:e3:70:17:8a:b5:52:c5:14:6f:56:39:
3a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:61:9D:68:86:E5:B0:5A:D4:4B:A1:3E:0D:82:47:C8:D4:DC:CA:A4
X509v3 Authority Key Identifier:
keyid:27:61:85:05:D3:B4:C0:00:21:75:90:F7:B7:B5:9B:F6:1F:F2:F3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/tWGdaIblsFrUS6E-DYJHyNTcyqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.144.0/20
128.0.16.0/21
178.250.216.0/21
IPv6:
2a02:2470::/29
Signature Algorithm: sha256WithRSAEncryption
75:3d:ea:ba:f5:b6:33:91:38:73:96:d2:4b:17:bc:94:22:8b:
84:95:bc:80:04:e9:c1:01:40:50:78:e1:24:2c:54:17:6d:e1:
4f:c7:9f:bd:79:cc:97:07:dd:2e:4d:be:14:d9:9b:7f:dc:96:
2c:3e:b7:32:c9:88:2b:ea:05:b2:cf:52:de:a2:93:cd:4e:72:
35:29:04:62:75:ac:bf:04:ea:1e:43:50:94:6e:ae:88:d9:79:
69:4b:05:da:a5:72:68:e8:40:6f:4a:fa:c6:eb:60:38:0f:0d:
ee:da:50:f7:e6:78:82:6b:73:67:68:8c:86:3b:f9:51:51:d9:
fb:86:aa:82:ea:86:d5:e0:74:a6:6c:79:03:fc:2a:5d:69:66:
59:f3:f7:f4:4a:84:f2:58:44:5d:d4:c0:f9:5a:4e:78:64:6d:
3d:f6:e6:90:e3:cd:91:d6:2f:77:8b:77:eb:d1:a3:fb:cf:4d:
cd:1a:e3:5b:39:52:1c:6e:8c:88:43:e7:f4:33:48:49:1c:4e:
05:dd:cf:dc:44:f9:d1:e7:2c:ac:01:08:9f:21:ee:b1:26:bc:
e8:fd:52:f2:c6:aa:78:0e:db:79:b8:bb:67:90:61:da:d0:a7:
6c:17:25:99:11:61:c6:98:40:b5:33:65:e2:0b:d8:86:e6:16:
98:3d:a8:49
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYzEJU1DKJzxiPGN1Bss7mMfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NjE4NTA1ZDNiNGMwMDAyMTc1OTBmN2I3YjU5YmY2MWZm
MmYzNzUwHhcNMjQwMTAxMDgzMDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTYxOWQ2ODg2ZTViMDVhZDQ0YmExM2UwZDgyNDdjOGQ0ZGNjYWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXFIToVtwx+/LvlTwlA1bymBxMYY
5SfhM+DhSuLYN6rw1Nu+44WqQo7ue5R7H+EhTObyRhK7ZaFojbsM6l07yAusuOQF
5oxsky1Zv0dLRvc5sPZdw/Nj8Vt1GV0E6EAso8kgV01/CoxSS/G+AEnEIZ8OZakK
NpsmHJewdRMtxdvzPm8FU7JYmLPHmYiEtn+ziLEIAE4QP3ioUMPxPv8GifDNYlfc
soHdMF45Q8wvb/dD8cijVg0DCrgqf0dmSSj1YJYRy3uWWStoiSh92gc7OU5r7fac
lF5TCtaXcKwlnx2NkL5Vv4VZi42e6hFatAqKYSdE43AXirVSxRRvVjk6aQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFLVhnWiG5bBa1EuhPg2CR8jU3MqkMB8GA1UdIwQY
MBaAFCdhhQXTtMAAIXWQ97e1m/Yf8vN1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjJHRkJkTzB3QUFoZFpEM3Q3V2I5aF95ODNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83ZTYyNjItZWNkZC00MzM0LThiOWYt
OWQ1ZTU5Zjc2ZTZiLzEvdFdHZGFJYmxzRnJVUzZFLURZSkh5TlRjeXFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83ZTYyNjItZWNkZC00MzM0LThiOWYtOWQ1ZTU5Zjc2ZTZi
LzEvSjJHRkJkTzB3QUFoZFpEM3Q3V2I5aF95ODNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQETfeQAwQD
gAAQAwQDsvrYMA0EAgACMAcDBQMqAiRwMA0GCSqGSIb3DQEBCwUAA4IBAQB1Peq6
9bYzkThzltJLF7yUIouElbyABOnBAUBQeOEkLFQXbeFPx5+9ecyXB90uTb4U2Zt/
3JYsPrcyyYgr6gWyz1LeopPNTnI1KQRiday/BOoeQ1CUbq6I2XlpSwXapXJo6EBv
SvrG62A4Dw3u2lD35niCa3NnaIyGO/lRUdn7hqqC6obV4HSmbHkD/CpdaWZZ8/f0
SoTyWERd1MD5Wk54ZG099uaQ482R1i93i3fr0aP7z03NGuNbOVIcboyIQ+f0M0hJ
HE4F3c/cRPnR5yysAQifIe6xJrzo/VLyxqp4Dtt5uLtnkGHa0KdsFyWZEWHGmEC1
M2XiC9iG5haYPahJ
-----END CERTIFICATE-----
Generated at Fri Jun 7 20:46:04 2024 by rpki-client on console-ams.rpki-client.org