Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/8m1N6ph7lgaXP9h2hdf-M_bdqv8.roa
File: 8m1N6ph7lgaXP9h2hdf-M_bdqv8.roa (raw, json)
Hash identifier: dfdH63JHzvubJko02V/plwf2F5g/YwbIPqbrCXbQnZM=
Subject key identifier: F2:6D:4D:EA:98:7B:96:06:97:3F:D8:76:85:D7:FE:33:F6:DD:AA:FF
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018CC64A89B5997088B7414D0EA8BE1FAB91
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/8m1N6ph7lgaXP9h2hdf-M_bdqv8.roa
Signing time: Mon 01 Jan 2024 18:30:22 +0000
ROA not before: Mon 01 Jan 2024 18:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208388
IP address blocks: 37.230.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:89:b5:99:70:88:b7:41:4d:0e:a8:be:1f:ab:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 18:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f26d4dea987b9606973fd87685d7fe33f6ddaaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:19:b2:68:5c:a9:0d:ab:23:b0:79:c2:2b:
17:2e:ed:75:a4:c6:f7:c4:3f:60:1f:5f:13:78:e6:
48:1f:e3:32:e8:1d:aa:9a:01:d9:b7:7c:f5:6c:af:
d1:44:36:b4:38:40:d8:c6:69:e9:17:e4:fb:23:e9:
f5:1c:39:28:fb:02:b2:da:c1:2c:6a:8f:e4:82:15:
b3:64:d6:68:23:a7:8f:08:31:31:11:a7:9a:cc:11:
08:9f:95:8d:ed:ff:25:14:25:1c:bd:9b:6a:d1:a8:
98:c3:33:91:97:81:ff:b3:7d:0e:3e:32:d8:61:5c:
c4:e6:21:8b:cc:b6:a7:86:d9:38:4c:89:23:e4:c8:
9e:c0:91:f2:7c:b8:78:72:98:ca:65:ae:41:45:5c:
42:67:49:6a:2c:09:7a:d3:cf:da:f4:5a:66:17:8f:
16:d8:b0:d0:42:95:21:57:1f:87:2c:02:c3:b5:b0:
53:ed:0a:ea:66:78:24:1f:9f:bb:89:53:52:86:e4:
df:ff:2e:d3:39:f6:d7:4f:70:29:40:49:6e:e0:eb:
72:fb:6a:6c:20:f2:c0:55:7c:30:c3:4f:7a:96:50:
c2:3a:f4:b0:60:6b:3a:b8:87:c8:cb:fe:62:06:de:
79:8c:13:0d:d3:e5:b3:0d:39:2b:c7:1f:73:4c:25:
9d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6D:4D:EA:98:7B:96:06:97:3F:D8:76:85:D7:FE:33:F6:DD:AA:FF
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/8m1N6ph7lgaXP9h2hdf-M_bdqv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.204.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ca:55:f7:b6:a3:fa:88:d9:2b:fb:2b:2a:09:2f:ac:8d:44:
1b:ab:f1:11:0c:f9:9d:c7:69:4e:70:28:45:da:70:ae:a1:9b:
d4:57:54:e6:e8:fc:8b:29:d3:de:4c:81:5e:a9:62:6f:67:9b:
50:91:c3:05:80:9c:52:f4:c4:98:cf:63:48:57:a7:1d:fb:a1:
77:ea:0b:d6:62:cf:51:32:50:a1:47:87:b0:30:40:49:ab:42:
b2:26:58:1f:a8:bd:ec:c4:5c:4b:90:04:fe:69:2f:4b:62:70:
25:33:2a:68:fd:87:7a:a1:8a:68:b3:4c:cc:21:f4:27:59:44:
39:76:11:19:49:1a:0b:8c:5a:79:91:ec:29:de:01:7a:e8:6d:
ad:0d:97:d3:5c:c6:eb:4f:32:2c:77:de:b8:11:21:19:ed:6b:
17:ad:bc:8f:72:a2:c1:59:0f:61:9e:03:f3:b6:07:7d:36:88:
12:25:03:74:c1:3f:28:49:10:d6:55:d0:bb:71:9a:d9:3e:1e:
56:b9:7c:62:86:c1:9c:e1:f8:b5:ba:d2:5e:e6:dd:ed:43:e1:
bc:9e:4f:69:53:f9:33:77:0d:17:00:7a:8a:f5:0c:0c:82:b1:
2c:12:5b:26:5f:f7:b6:4e:e0:f1:a1:f0:da:2c:1b:c3:63:d1:
75:a7:46:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSom1mXCIt0FNDqi+H6uRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjQwMTAxMTgzMDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjZkNGRlYTk4N2I5NjA2OTczZmQ4NzY4NWQ3ZmUzM2Y2ZGRhYWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0cZsmhcqQ2rI7B5wisXLu11pMb3
xD9gH18TeOZIH+My6B2qmgHZt3z1bK/RRDa0OEDYxmnpF+T7I+n1HDko+wKy2sEs
ao/kghWzZNZoI6ePCDExEaeazBEIn5WN7f8lFCUcvZtq0aiYwzORl4H/s30OPjLY
YVzE5iGLzLanhtk4TIkj5MiewJHyfLh4cpjKZa5BRVxCZ0lqLAl608/a9FpmF48W
2LDQQpUhVx+HLALDtbBT7QrqZngkH5+7iVNShuTf/y7TOfbXT3ApQElu4Oty+2ps
IPLAVXwww096llDCOvSwYGs6uIfIy/5iBt55jBMN0+WzDTkrxx9zTCWdZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPJtTeqYe5YGlz/YdoXX/jP23ar/MB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvOG0xTjZwaDdsZ2FYUDloMmhkZi1NX2JkcXY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJebMMA0G
CSqGSIb3DQEBCwUAA4IBAQBJylX3tqP6iNkr+ysqCS+sjUQbq/ERDPmdx2lOcChF
2nCuoZvUV1Tm6PyLKdPeTIFeqWJvZ5tQkcMFgJxS9MSYz2NIV6cd+6F36gvWYs9R
MlChR4ewMEBJq0KyJlgfqL3sxFxLkAT+aS9LYnAlMypo/Yd6oYpos0zMIfQnWUQ5
dhEZSRoLjFp5kewp3gF66G2tDZfTXMbrTzIsd964ESEZ7WsXrbyPcqLBWQ9hngPz
tgd9NogSJQN0wT8oSRDWVdC7cZrZPh5WuXxihsGc4fi1utJe5t3tQ+G8nk9pU/kz
dw0XAHqK9QwMgrEsElsmX/e2TuDxofDaLBvDY9F1p0bl
-----END CERTIFICATE-----
Generated at Wed Jun 26 10:34:53 2024 by rpki-client on console-fra.rpki-client.org