Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/T7TRwF0DY8yzkbhVtejzVLvMe2U.roa
File: T7TRwF0DY8yzkbhVtejzVLvMe2U.roa (raw, json)
Hash identifier: QHqt+PFsi/j0IyzT+8o5FIvRnO1s1dq6C1dkHVkljHk=
Subject key identifier: 4F:B4:D1:C0:5D:03:63:CC:B3:91:B8:55:B5:E8:F3:54:BB:CC:7B:65
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC79545597B1302886E24F06FC7CCFBF0
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/T7TRwF0DY8yzkbhVtejzVLvMe2U.roa
Signing time: Tue 02 Jan 2024 00:31:37 +0000
ROA not before: Tue 02 Jan 2024 00:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34353
IP address blocks: 188.210.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:45:59:7b:13:02:88:6e:24:f0:6f:c7:cc:fb:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fb4d1c05d0363ccb391b855b5e8f354bbcc7b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bf:f0:bc:da:e0:33:ca:e0:3c:74:e9:c2:e7:
88:61:73:13:27:a3:a5:8e:4e:b8:8c:57:48:eb:69:
f5:4a:87:e6:36:f5:0a:9b:1c:90:50:bb:ee:05:dc:
3c:d8:89:9d:82:dd:bc:85:86:d4:a1:f5:f0:61:69:
a0:8d:ab:30:c6:26:40:a1:08:6f:63:5e:08:42:5d:
42:29:ae:fe:11:71:ba:13:9d:b5:26:31:63:10:07:
de:c4:24:65:48:7a:da:6c:59:0e:59:53:01:53:ee:
dc:d0:03:e0:a2:f2:14:d1:f7:51:7a:89:94:83:a7:
1b:19:82:5c:e3:d4:4c:77:ef:41:b8:15:ef:2e:60:
10:74:a8:c5:e7:5a:9a:81:98:7b:c1:83:a3:ad:42:
c9:b7:57:85:b4:97:21:d2:26:e7:7e:09:c8:31:2f:
3b:f1:ae:ba:05:7c:d0:58:13:13:58:af:2d:05:12:
71:a0:e4:22:f5:cd:19:c3:88:92:a8:d3:50:79:26:
d0:e2:ee:e9:0b:5d:be:87:11:c5:34:5a:96:de:3b:
68:5b:64:68:d1:b9:c4:47:c3:c4:ec:41:6b:45:f8:
32:e3:f2:41:22:95:72:cd:d9:b5:f1:39:ff:e8:38:
37:ec:30:23:0a:9c:17:2f:b6:1a:03:b0:d8:05:18:
fe:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B4:D1:C0:5D:03:63:CC:B3:91:B8:55:B5:E8:F3:54:BB:CC:7B:65
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/T7TRwF0DY8yzkbhVtejzVLvMe2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.210.237.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:35:6f:3e:96:56:15:aa:a3:de:f6:d8:a4:39:79:35:ba:f8:
a4:42:bf:93:cf:9e:a0:cf:2a:9b:57:96:e4:5a:33:fd:14:9c:
91:ef:32:ba:59:e8:0f:1c:9a:a3:fd:d6:f1:18:76:39:f0:4f:
eb:0f:85:c3:56:e8:53:28:3e:a4:c3:ec:4e:dd:76:fd:32:90:
47:11:85:68:4a:c9:a4:69:44:22:a4:e6:79:85:4e:28:46:7d:
78:aa:26:d7:67:d6:d1:7c:65:85:cf:77:bd:67:b0:2d:b1:22:
3e:bb:62:fa:49:5f:05:b6:d7:27:70:9e:57:00:55:ab:57:ee:
5f:25:a3:f3:10:01:df:89:fd:b5:62:d3:43:66:ff:67:d6:9e:
11:9b:eb:e1:b8:d0:0b:ab:8a:b1:37:ac:ba:9b:57:06:b6:42:
f4:62:b3:f2:dc:f9:83:17:3c:4c:6b:36:b8:2e:bc:0c:32:e4:
f3:20:6b:4b:a7:7f:77:42:b6:52:0d:d8:89:a1:ac:06:62:88:
ce:ce:09:85:66:56:d2:b5:e6:71:90:52:1f:8f:5f:88:61:e1:
0d:2d:7e:34:8a:90:cf:d2:cc:1e:7b:3f:74:6e:b8:ac:e3:7f:
e3:42:28:41:af:eb:24:cd:0f:6c:99:b6:91:6b:d9:d6:9d:55:
42:ec:c5:06
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzHlUVZexMCiG4k8G/HzPvwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjQwMTAyMDAzMTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmI0ZDFjMDVkMDM2M2NjYjM5MWI4NTViNWU4ZjM1NGJiY2M3YjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb/wvNrgM8rgPHTpwueIYXMTJ6Ol
jk64jFdI62n1SofmNvUKmxyQULvuBdw82Imdgt28hYbUofXwYWmgjaswxiZAoQhv
Y14IQl1CKa7+EXG6E521JjFjEAfexCRlSHrabFkOWVMBU+7c0APgovIU0fdReomU
g6cbGYJc49RMd+9BuBXvLmAQdKjF51qagZh7wYOjrULJt1eFtJch0ibnfgnIMS87
8a66BXzQWBMTWK8tBRJxoOQi9c0Zw4iSqNNQeSbQ4u7pC12+hxHFNFqW3jtoW2Ro
0bnER8PE7EFrRfgy4/JBIpVyzdm18Tn/6Dg37DAjCpwXL7YaA7DYBRj+SQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFE+00cBdA2PMs5G4VbXo81S7zHtlMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL1Q3VFJ3RjBEWTh5emtiaFZ0ZWp6Vkx2TWUyVS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC80u0w
DQYJKoZIhvcNAQELBQADggEBAE81bz6WVhWqo9722KQ5eTW6+KRCv5PPnqDPKptX
luRaM/0UnJHvMrpZ6A8cmqP91vEYdjnwT+sPhcNW6FMoPqTD7E7ddv0ykEcRhWhK
yaRpRCKk5nmFTihGfXiqJtdn1tF8ZYXPd71nsC2xIj67YvpJXwW21ydwnlcAVatX
7l8lo/MQAd+J/bVi00Nm/2fWnhGb6+G40AurirE3rLqbVwa2QvRis/Lc+YMXPExr
NrguvAwy5PMga0unf3dCtlIN2ImhrAZiiM7OCYVmVtK15nGQUh+PX4hh4Q0tfjSK
kM/SzB57P3RuuKzjf+NCKEGv6yTND2yZtpFr2dadVULsxQY=
-----END CERTIFICATE-----
Generated at Thu Jun 20 11:36:59 2024 by rpki-client on console-fra.rpki-client.org