Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/rC8ce9y6F6dyWHv-HgACcMqO-pg.roa
File: rC8ce9y6F6dyWHv-HgACcMqO-pg.roa (raw, json)
Hash identifier: 4arh12mIeIg5jOCBbb7Jf9c2lcnySTH7OeIjjJQA73E=
Subject key identifier: AC:2F:1C:7B:DC:BA:17:A7:72:58:7B:FE:1E:00:02:70:CA:8E:FA:98
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0191935629C9B8CC24D935CB98F335A911BE
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/rC8ce9y6F6dyWHv-HgACcMqO-pg.roa
Signing time: Tue 27 Aug 2024 10:16:23 +0000
ROA not before: Tue 27 Aug 2024 10:16:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28860
IP address blocks: 81.27.144.0/20 maxlen: 20
81.27.144.0/24 maxlen: 24
81.27.149.0/24 maxlen: 24
81.27.150.0/24 maxlen: 24
81.27.151.0/24 maxlen: 24
81.27.152.0/24 maxlen: 24
81.27.158.0/24 maxlen: 24
217.24.112.0/20 maxlen: 20
217.24.112.0/24 maxlen: 24
217.24.113.0/24 maxlen: 24
217.24.114.0/24 maxlen: 24
217.24.115.0/24 maxlen: 24
217.24.116.0/24 maxlen: 24
217.24.117.0/24 maxlen: 24
217.24.118.0/24 maxlen: 24
217.24.120.0/24 maxlen: 24
217.24.121.0/24 maxlen: 24
217.24.122.0/24 maxlen: 24
217.24.123.0/24 maxlen: 24
217.24.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:93:56:29:c9:b8:cc:24:d9:35:cb:98:f3:35:a9:11:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Aug 27 10:16:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac2f1c7bdcba17a772587bfe1e000270ca8efa98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f2:aa:8e:e8:ea:e2:b9:10:b3:36:e2:f2:59:
39:a1:07:a1:27:59:0a:00:ef:39:07:7a:2e:9f:af:
f5:43:1a:1a:ef:98:bd:a8:62:ae:6f:e0:de:a4:30:
16:2d:84:83:fd:84:12:39:2d:19:f0:f2:43:0c:54:
62:79:d5:c1:e1:08:36:bb:49:c8:42:db:6f:52:82:
9e:1b:61:7f:da:d7:2e:31:50:1b:5d:a0:9f:a7:71:
3f:83:1c:3e:b6:55:2a:90:c3:05:5e:09:06:37:d1:
ea:07:c1:e5:13:17:a4:33:54:9a:0b:c5:58:06:d6:
fd:d7:c4:58:d7:02:39:77:96:e5:28:bc:a2:3d:c5:
f7:c9:d3:54:9d:fe:e4:d7:2d:d3:40:50:28:9d:ab:
c9:35:0d:86:46:d6:89:dc:eb:51:fb:f3:19:ff:2c:
db:f2:d1:b9:a0:66:78:69:51:1c:4a:0d:e7:b0:b6:
2b:56:bd:e2:82:7e:67:56:b2:dc:01:d6:32:12:e1:
59:ea:a1:1c:a7:b3:8e:c4:ec:15:d9:10:01:ba:34:
dd:5a:1f:50:ec:50:6e:98:4d:98:e0:6c:f6:24:bc:
4b:e6:e1:2a:d0:ac:38:e4:9d:a8:75:e9:f6:4d:fc:
56:75:97:f2:68:de:ce:81:99:0d:79:5e:24:45:ce:
eb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2F:1C:7B:DC:BA:17:A7:72:58:7B:FE:1E:00:02:70:CA:8E:FA:98
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/rC8ce9y6F6dyWHv-HgACcMqO-pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.27.144.0/20
217.24.112.0/20
Signature Algorithm: sha256WithRSAEncryption
92:39:4b:1c:ee:48:4f:90:9b:15:c1:37:63:17:6b:5b:31:18:
1d:e8:95:75:d1:60:1e:e6:f6:c1:a0:5e:ef:e5:91:ba:73:2f:
af:b6:e9:0b:4f:72:5c:67:bd:24:13:96:b3:d7:78:4c:3b:36:
d8:42:06:0e:a1:41:ae:d1:71:4f:76:fa:32:20:3a:c2:c1:9c:
60:c3:24:25:59:18:43:de:f8:fc:d8:69:ec:3d:3e:e6:6c:99:
fe:bc:04:68:b9:4b:61:4b:1f:40:ab:ff:f7:bc:b9:b2:f4:df:
63:74:73:4c:e6:e1:3f:a6:54:72:d4:1a:f9:8b:ec:ff:78:33:
6c:26:95:00:72:59:5e:d9:e9:cb:07:a5:0a:c0:63:04:00:cd:
4f:c9:d7:60:80:46:5f:e4:b9:58:96:61:4a:a6:be:c5:ed:9b:
6c:ee:c8:cf:f6:08:d0:dd:ca:79:50:be:1f:1e:11:79:bc:3d:
2e:28:c7:2f:59:82:d7:7c:b1:30:f2:23:89:8a:55:8f:7e:b0:
ce:a0:d3:6d:2e:be:18:42:e7:22:46:2d:49:79:5b:ee:9e:8a:
d5:40:ad:c9:c9:30:bc:97:b4:5d:94:bc:71:c6:ed:4f:8a:83:
7b:93:39:8b:c0:01:48:fa:01:e3:02:ff:c6:7a:46:ea:f4:2e:
16:11:82:86
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZGTVinJuMwk2TXLmPM1qRG+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjQwODI3MTAxNjIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzJmMWM3YmRjYmExN2E3NzI1ODdiZmUxZTAwMDI3MGNhOGVmYTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/Kqjujq4rkQszbi8lk5oQehJ1kK
AO85B3oun6/1Qxoa75i9qGKub+DepDAWLYSD/YQSOS0Z8PJDDFRiedXB4Qg2u0nI
QttvUoKeG2F/2tcuMVAbXaCfp3E/gxw+tlUqkMMFXgkGN9HqB8HlExekM1SaC8VY
Btb918RY1wI5d5blKLyiPcX3ydNUnf7k1y3TQFAonavJNQ2GRtaJ3OtR+/MZ/yzb
8tG5oGZ4aVEcSg3nsLYrVr3ign5nVrLcAdYyEuFZ6qEcp7OOxOwV2RABujTdWh9Q
7FBumE2Y4Gz2JLxL5uEq0Kw45J2oden2TfxWdZfyaN7OgZkNeV4kRc7r7wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKwvHHvcuhenclh7/h4AAnDKjvqYMB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvckM4Y2U5eTZGNmR5V0h2LUhnQUNjTXFPLXBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEURuQAwQE
2RhwMA0GCSqGSIb3DQEBCwUAA4IBAQCSOUsc7khPkJsVwTdjF2tbMRgd6JV10WAe
5vbBoF7v5ZG6cy+vtukLT3JcZ70kE5az13hMOzbYQgYOoUGu0XFPdvoyIDrCwZxg
wyQlWRhD3vj82GnsPT7mbJn+vARouUthSx9Aq//3vLmy9N9jdHNM5uE/plRy1Br5
i+z/eDNsJpUAclle2enLB6UKwGMEAM1PyddggEZf5LlYlmFKpr7F7Zts7sjP9gjQ
3cp5UL4fHhF5vD0uKMcvWYLXfLEw8iOJilWPfrDOoNNtLr4YQuciRi1JeVvunorV
QK3JyTC8l7RdlLxxxu1PioN7kzmLwAFI+gHjAv/Gekbq9C4WEYKG
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:36:26 2024 by rpki-client on console-fra.rpki-client.org