Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/IgMLUVo0Ye6CjsFiLAtBfShh8KI.roa
File: IgMLUVo0Ye6CjsFiLAtBfShh8KI.roa (raw, json)
Hash identifier: o1hf/YoJLapUKD4+FnBRMhmgwH1pwFVctn45sJs9Fdc=
Subject key identifier: 22:03:0B:51:5A:34:61:EE:82:8E:C1:62:2C:0B:41:7D:28:61:F0:A2
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B94F90C5083C72449699C71029781
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/IgMLUVo0Ye6CjsFiLAtBfShh8KI.roa
Signing time: Mon 01 Jan 2024 18:31:31 +0000
ROA not before: Mon 01 Jan 2024 18:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205030
IP address blocks: 188.114.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:94:f9:0c:50:83:c7:24:49:69:9c:71:02:97:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22030b515a3461ee828ec1622c0b417d2861f0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6f:61:cc:12:45:ff:28:ec:40:57:8d:fa:24:
2c:14:cb:1f:ad:e4:29:b9:ce:20:05:67:a8:a8:dd:
28:73:2a:42:e1:eb:5c:ec:ea:83:e3:3e:43:a5:31:
94:1d:1a:f3:b4:f5:f0:18:88:f9:64:41:07:13:f2:
d4:21:f4:2e:86:99:bc:e6:26:e6:d6:31:7e:e5:7e:
9f:6b:75:29:3b:57:fd:13:eb:34:87:8f:61:d8:9a:
29:d4:2b:72:9d:db:ed:fa:87:8e:82:74:cf:45:8c:
88:4c:9f:50:2e:bf:43:7f:92:f6:71:0f:af:5b:f1:
b4:8e:78:59:56:f5:ea:24:79:dc:68:72:e5:58:f0:
42:ac:ce:52:8d:a9:66:48:39:26:c3:60:20:92:e8:
94:0f:0b:4a:03:59:cd:81:00:79:7e:ec:7b:dc:89:
98:4c:67:8f:d9:94:73:8a:59:72:91:9c:e5:99:24:
7d:5d:93:f8:19:ca:3e:bc:28:39:2a:3a:99:66:5f:
63:4c:dd:0b:b8:f6:d3:5b:0c:00:16:50:d6:39:a6:
80:4c:14:a1:d4:89:f1:a6:3f:4f:2c:16:ff:57:d9:
5e:86:08:ca:a5:50:ff:8b:67:e3:db:ba:59:d4:a5:
b2:eb:57:98:16:2a:69:a1:81:e1:5d:f9:01:8e:72:
df:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:03:0B:51:5A:34:61:EE:82:8E:C1:62:2C:0B:41:7D:28:61:F0:A2
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/IgMLUVo0Ye6CjsFiLAtBfShh8KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.114.88.0/23
Signature Algorithm: sha256WithRSAEncryption
39:03:45:99:18:28:00:9c:d3:70:0b:39:aa:b5:21:42:d2:bb:
ac:5c:5a:fc:22:9f:b5:36:a1:4d:fd:fb:f2:18:a0:e5:d5:96:
74:39:a9:37:0b:d6:01:48:86:6f:65:0f:be:86:45:f8:9f:2a:
e2:33:a1:50:41:d3:ed:00:b3:bb:7e:c7:0f:77:5a:73:cc:1b:
ba:78:ce:28:f0:b6:6e:d9:9f:a5:01:4c:4a:79:ed:8b:43:c0:
15:ea:35:5a:b3:76:cb:86:3d:78:6c:1e:c3:20:19:f8:47:13:
c5:18:b3:5e:94:62:34:03:f3:51:c2:81:c2:87:5f:2d:a0:89:
09:bc:9b:f7:8c:0a:99:16:33:52:15:3b:57:9a:fe:20:01:c1:
37:ba:83:f0:fc:1e:24:98:6d:aa:60:84:74:47:32:3e:33:a3:
97:1a:14:d5:25:1e:b4:6e:a6:be:ae:d3:86:90:72:53:99:38:
f6:58:d5:53:73:bc:54:14:94:ab:c8:4b:f8:7c:0d:1c:e8:96:
79:c3:50:45:46:f0:8f:00:42:6c:a7:4c:ea:f0:ac:9b:5e:30:
47:aa:b8:cc:1d:51:52:31:ec:4d:ef:f7:d1:ff:65:f2:d6:ca:
7a:d8:d0:ec:a8:76:7d:3b:6b:f0:fd:ce:6b:13:bc:65:31:c7:
33:e1:fe:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGS5T5DFCDxyRJaZxxApeBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjQwMTAxMTgzMTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjAzMGI1MTVhMzQ2MWVlODI4ZWMxNjIyYzBiNDE3ZDI4NjFmMGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW9hzBJF/yjsQFeN+iQsFMsfreQp
uc4gBWeoqN0ocypC4etc7OqD4z5DpTGUHRrztPXwGIj5ZEEHE/LUIfQuhpm85ibm
1jF+5X6fa3UpO1f9E+s0h49h2Jop1Ctyndvt+oeOgnTPRYyITJ9QLr9Df5L2cQ+v
W/G0jnhZVvXqJHncaHLlWPBCrM5SjalmSDkmw2AgkuiUDwtKA1nNgQB5fux73ImY
TGeP2ZRzillykZzlmSR9XZP4Gco+vCg5KjqZZl9jTN0LuPbTWwwAFlDWOaaATBSh
1Inxpj9PLBb/V9lehgjKpVD/i2fj27pZ1KWy61eYFippoYHhXfkBjnLfBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCIDC1FaNGHugo7BYiwLQX0oYfCiMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvSWdNTFVWbzBZZTZDanNGaUxBdEJmU2hoOEtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvHJYMA0G
CSqGSIb3DQEBCwUAA4IBAQA5A0WZGCgAnNNwCzmqtSFC0rusXFr8Ip+1NqFN/fvy
GKDl1ZZ0Oak3C9YBSIZvZQ++hkX4nyriM6FQQdPtALO7fscPd1pzzBu6eM4o8LZu
2Z+lAUxKee2LQ8AV6jVas3bLhj14bB7DIBn4RxPFGLNelGI0A/NRwoHCh18toIkJ
vJv3jAqZFjNSFTtXmv4gAcE3uoPw/B4kmG2qYIR0RzI+M6OXGhTVJR60bqa+rtOG
kHJTmTj2WNVTc7xUFJSryEv4fA0c6JZ5w1BFRvCPAEJsp0zq8KybXjBHqrjMHVFS
MexN7/fR/2Xy1sp62NDsqHZ9O2vw/c5rE7xlMccz4f6w
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:26:06 2024 by rpki-client on console-ams.rpki-client.org