Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/iplrdigg5si_IzzazUAoMmfZoPE.roa
File: iplrdigg5si_IzzazUAoMmfZoPE.roa (raw, json)
Hash identifier: jE4Zw0QAH92weIOjKXn4CKgdQswN66KgM4OGoKbTmV4=
Subject key identifier: 8A:99:6B:76:28:20:E6:C8:BF:23:3C:DA:CD:40:28:32:67:D9:A0:F1
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B7D1662CA0170EEB0E6983181B6DA
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/iplrdigg5si_IzzazUAoMmfZoPE.roa
Signing time: Mon 01 Jan 2024 18:31:25 +0000
ROA not before: Mon 01 Jan 2024 18:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5588
IP address blocks: 85.202.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:7d:16:62:ca:01:70:ee:b0:e6:98:31:81:b6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a996b762820e6c8bf233cdacd40283267d9a0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0c:0a:fa:ca:10:2e:75:4c:af:48:a5:4b:1d:
2d:a8:55:bd:8f:a4:b0:88:16:6d:63:ed:a0:4a:7e:
d7:c6:0e:39:15:00:93:14:48:31:ac:a7:0b:c8:4f:
da:89:3b:a4:cf:51:a6:fb:4d:71:e4:78:51:a8:e8:
c5:3b:bb:d7:b0:05:b2:3b:23:1c:0a:05:38:2a:f3:
12:1c:02:cf:c5:0f:1e:2f:a5:8f:27:e8:cb:7b:f5:
4a:60:ed:21:ff:5c:90:bd:b8:cc:dc:8f:b0:78:68:
d4:ff:ee:29:44:6a:0a:1a:1a:86:99:8f:0d:cf:9a:
67:b3:0b:a0:00:e2:44:59:6c:ac:63:61:43:f9:23:
31:ee:f6:c2:e1:ea:8c:4b:b5:6d:35:c6:f2:f4:46:
60:44:ed:e9:48:aa:32:01:e3:3d:70:30:4a:a6:1b:
ab:c9:22:f7:b4:7b:3a:97:3a:72:fe:09:60:35:4b:
4d:87:d5:29:bc:8f:e8:fb:2a:25:fa:40:97:93:6e:
3d:44:b7:20:a1:a7:46:52:ba:04:68:6f:0f:55:19:
ae:dc:93:fb:42:0c:8d:dd:25:25:84:be:9b:5d:4b:
14:dd:1d:6b:7a:d6:c7:1f:2e:8b:c3:6b:a2:4f:e3:
28:b7:aa:4b:b5:26:44:04:d4:4a:b1:43:c9:25:95:
87:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:99:6B:76:28:20:E6:C8:BF:23:3C:DA:CD:40:28:32:67:D9:A0:F1
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/iplrdigg5si_IzzazUAoMmfZoPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.56.0/23
Signature Algorithm: sha256WithRSAEncryption
64:0b:61:15:f1:4c:e4:a0:09:da:85:39:88:01:51:57:e3:f9:
5d:7d:bc:d5:85:29:96:8d:a0:46:0c:8b:0a:d4:94:0b:85:05:
23:a6:8b:fa:54:36:48:3c:eb:c0:66:77:40:34:6e:0f:63:8e:
b6:48:0f:f7:d6:fc:54:d4:1b:5f:13:4e:7f:16:1c:1e:04:ee:
5e:f6:9e:9d:a2:df:87:0d:7a:48:09:0c:aa:3b:a1:9e:98:1c:
d7:18:fc:31:8b:d6:5c:c2:db:e6:83:9e:3a:2a:2f:d4:23:52:
b6:32:43:03:bb:9c:f1:35:8e:59:db:4d:2d:a3:58:8f:9b:91:
5b:d5:e4:ec:9a:20:48:d3:4f:f4:9f:47:16:14:7e:fc:0e:bc:
be:24:51:9c:a3:f9:04:a3:77:26:ad:11:29:0f:b6:5a:13:86:
33:34:33:c2:ac:a3:e6:37:96:40:37:d8:48:b7:d8:6f:ed:fb:
4c:6f:13:f2:6e:60:52:01:71:41:82:3c:f4:69:b0:ea:e4:f7:
b2:94:84:75:ac:29:cc:34:d6:3b:c4:90:8e:5b:9c:16:e1:b5:
bb:f6:70:2a:c6:6a:e5:98:da:64:7f:2f:d4:37:d4:15:de:65:
fe:4d:0c:d2:09:3b:a7:27:fe:a3:df:53:b0:6b:0b:f8:60:89:
ce:2f:b3:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGS30WYsoBcO6w5pgxgbbaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjQwMTAxMTgzMTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTk5NmI3NjI4MjBlNmM4YmYyMzNjZGFjZDQwMjgzMjY3ZDlhMGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQwK+soQLnVMr0ilSx0tqFW9j6Sw
iBZtY+2gSn7Xxg45FQCTFEgxrKcLyE/aiTukz1Gm+01x5HhRqOjFO7vXsAWyOyMc
CgU4KvMSHALPxQ8eL6WPJ+jLe/VKYO0h/1yQvbjM3I+weGjU/+4pRGoKGhqGmY8N
z5pnswugAOJEWWysY2FD+SMx7vbC4eqMS7VtNcby9EZgRO3pSKoyAeM9cDBKphur
ySL3tHs6lzpy/glgNUtNh9UpvI/o+yol+kCXk249RLcgoadGUroEaG8PVRmu3JP7
QgyN3SUlhL6bXUsU3R1retbHHy6Lw2uiT+Mot6pLtSZEBNRKsUPJJZWHtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIqZa3YoIObIvyM82s1AKDJn2aDxMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvaXBscmRpZ2c1c2lfSXp6YXpVQW9NbWZab1BFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVco4MA0G
CSqGSIb3DQEBCwUAA4IBAQBkC2EV8UzkoAnahTmIAVFX4/ldfbzVhSmWjaBGDIsK
1JQLhQUjpov6VDZIPOvAZndANG4PY462SA/31vxU1BtfE05/FhweBO5e9p6dot+H
DXpICQyqO6GemBzXGPwxi9Zcwtvmg546Ki/UI1K2MkMDu5zxNY5Z200to1iPm5Fb
1eTsmiBI00/0n0cWFH78Dry+JFGco/kEo3cmrREpD7ZaE4YzNDPCrKPmN5ZAN9hI
t9hv7ftMbxPybmBSAXFBgjz0abDq5PeylIR1rCnMNNY7xJCOW5wW4bW79nAqxmrl
mNpkfy/UN9QV3mX+TQzSCTunJ/6j31Owawv4YInOL7NH
-----END CERTIFICATE-----
Generated at Sun Jun 23 00:56:59 2024 by rpki-client on console-fra.rpki-client.org