Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/wIc7eEJEQ62EuKmQ3C2CTCy06v0.roa
File: wIc7eEJEQ62EuKmQ3C2CTCy06v0.roa (raw, json)
Hash identifier: 7xmsfnhDEB3JJutWV9K60FxTH4D4QbxCkppjlmIyOQg=
Subject key identifier: C0:87:3B:78:42:44:43:AD:84:B8:A9:90:DC:2D:82:4C:2C:B4:EA:FD
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 018FED4DC565FED957F7D152874A4B7E110A
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/wIc7eEJEQ62EuKmQ3C2CTCy06v0.roa
Signing time: Thu 06 Jun 2024 11:27:27 +0000
ROA not before: Thu 06 Jun 2024 11:27:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60253
IP address blocks: 92.205.80.0/21 maxlen: 21
92.205.156.0/22 maxlen: 24
92.205.192.0/20 maxlen: 24
188.121.60.0/24 maxlen: 24
2a00:116a::/40 maxlen: 48
2a00:116a:100::/40 maxlen: 48
2a00:116a:200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 07:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ed:4d:c5:65:fe:d9:57:f7:d1:52:87:4a:4b:7e:11:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jun 6 11:27:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0873b78424443ad84b8a990dc2d824c2cb4eafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0f:49:f1:9e:00:f8:1b:03:60:fd:19:1b:12:
02:f0:31:94:ba:cc:cc:2e:4f:3b:e6:0d:b3:72:98:
d9:27:0c:c3:fd:f5:8d:ba:1f:ca:4f:8c:1f:ce:c9:
f3:97:49:2b:3f:f0:cd:9f:52:56:30:a9:b4:26:ba:
0e:ca:dc:da:d0:82:84:30:37:8a:af:d3:54:02:71:
c8:f0:3d:bd:ee:41:e9:59:03:b5:ee:3b:7f:08:84:
0c:60:f0:df:e0:ad:eb:e4:f9:8d:53:a6:77:ed:90:
78:bb:02:4a:f5:e4:aa:e9:22:b1:24:af:95:de:c5:
93:25:dc:0c:c0:c1:34:0e:a7:09:61:9b:81:da:ec:
3e:9b:3a:a3:83:07:a3:f4:bb:12:26:0a:c8:ce:83:
c1:f7:1f:98:4e:3c:0e:5b:19:64:0b:10:f7:f5:b8:
51:70:66:7a:7e:34:ae:40:2f:fe:e8:31:aa:8d:88:
99:f3:cf:c1:d9:bc:0b:a9:ff:95:16:ef:8f:8a:d8:
c4:b4:d2:94:43:3b:02:2c:1e:c8:b5:4f:a4:e1:70:
72:fa:77:b4:26:a8:4d:9e:c1:c7:2e:2f:6f:11:fc:
9e:f0:89:00:6e:27:d6:dc:42:7e:61:93:8f:1a:84:
9c:46:54:c2:93:65:74:16:67:e7:5b:92:8c:59:cd:
d8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:87:3B:78:42:44:43:AD:84:B8:A9:90:DC:2D:82:4C:2C:B4:EA:FD
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/wIc7eEJEQ62EuKmQ3C2CTCy06v0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.205.80.0/21
92.205.156.0/22
92.205.192.0/20
188.121.60.0/24
IPv6:
2a00:116a::-2a00:116a:2ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
47:59:5a:3b:48:02:f8:d6:4d:68:64:1c:e1:6e:d9:3d:81:43:
e5:f2:4d:10:7d:0f:c9:66:d3:22:a7:48:4e:d8:ea:66:fa:3d:
fb:05:52:b8:8e:70:20:36:11:f2:08:30:43:03:75:8c:da:64:
d0:63:a9:cc:61:05:5e:f4:28:30:b5:80:74:ee:84:b2:32:9e:
07:44:54:5a:20:a3:32:16:5b:f5:09:84:25:53:5f:1f:7d:88:
8a:17:88:7b:7f:df:fa:1e:c7:85:d9:49:5a:ce:a4:3a:27:db:
28:dc:4d:70:15:b4:f0:29:10:81:56:44:3a:06:cf:83:00:6e:
f5:11:4b:bb:0e:1d:9c:1f:8b:7b:c0:e1:8a:fa:11:7a:fc:74:
36:93:0e:2a:00:45:dd:54:14:d3:dd:2f:b2:c5:c8:d3:42:af:
f5:40:85:b7:22:5a:09:4e:b9:70:a9:02:9a:d0:ce:ee:67:ab:
30:de:f9:30:84:f1:53:62:78:c9:f0:bd:32:33:be:9c:ff:a4:
8c:6b:fc:13:1b:61:2e:05:49:94:1d:13:cf:0a:10:3d:29:ed:
8e:d7:b7:d7:22:95:d9:a9:23:7f:80:3a:ae:f7:2e:7b:4c:ed:
7d:21:3b:34:48:29:ef:00:64:7e:8e:76:0c:3b:76:be:f9:48:
a5:05:06:79
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAY/tTcVl/tlX99FSh0pLfhEKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0
ZTk4MWIwHhcNMjQwNjA2MTEyNzI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDg3M2I3ODQyNDQ0M2FkODRiOGE5OTBkYzJkODI0YzJjYjRlYWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyA9J8Z4A+BsDYP0ZGxIC8DGUuszM
Lk875g2zcpjZJwzD/fWNuh/KT4wfzsnzl0krP/DNn1JWMKm0JroOytza0IKEMDeK
r9NUAnHI8D297kHpWQO17jt/CIQMYPDf4K3r5PmNU6Z37ZB4uwJK9eSq6SKxJK+V
3sWTJdwMwME0DqcJYZuB2uw+mzqjgwej9LsSJgrIzoPB9x+YTjwOWxlkCxD39bhR
cGZ6fjSuQC/+6DGqjYiZ88/B2bwLqf+VFu+PitjEtNKUQzsCLB7ItU+k4XBy+ne0
JqhNnsHHLi9vEfye8IkAbifW3EJ+YZOPGoScRlTCk2V0FmfnW5KMWc3YgQIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFMCHO3hCREOthLipkNwtgkwstOr9MB8GA1UdIwQY
MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt
MTYxZjM0MjM4N2QxLzEvd0ljN2VFSkVRNjJFdUttUTNDMkNUQ3kwNnYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx
LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAeBAIAATAYAwQDXM1QAwQC
XM2cAwQEXM3AAwQAvHk8MBcEAgACMBEwDwMFASoAEWoDBgAqABFqAjANBgkqhkiG
9w0BAQsFAAOCAQEAR1laO0gC+NZNaGQc4W7ZPYFD5fJNEH0PyWbTIqdITtjqZvo9
+wVSuI5wIDYR8ggwQwN1jNpk0GOpzGEFXvQoMLWAdO6EsjKeB0RUWiCjMhZb9QmE
JVNfH32IiheIe3/f+h7HhdlJWs6kOifbKNxNcBW08CkQgVZEOgbPgwBu9RFLuw4d
nB+Le8DhivoRevx0NpMOKgBF3VQU090vssXI00Kv9UCFtyJaCU65cKkCmtDO7mer
MN75MITxU2J4yfC9MjO+nP+kjGv8ExthLgVJlB0TzwoQPSntjte31yKV2akjf4A6
rvcue0ztfSE7NEgp7wBkfo52DDt2vvlIpQUGeQ==
-----END CERTIFICATE-----
Generated at Wed Jun 26 09:47:23 2024 by rpki-client on console-fra.rpki-client.org