Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/I1a4CIgv97vBfZS98hPFWPuYdEE.roa
File: I1a4CIgv97vBfZS98hPFWPuYdEE.roa (raw, json)
Hash identifier: x12T4ygdGHJu2Zoiw3UEaqcIDiG+qScQRv9iZ/ueck8=
Subject key identifier: 23:56:B8:08:88:2F:F7:BB:C1:7D:94:BD:F2:13:C5:58:FB:98:74:41
Certificate issuer: /CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958
Certificate serial: 018CC9BCC884D4CCEF8455D1585BD5C990D6
Authority key identifier: BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/I1a4CIgv97vBfZS98hPFWPuYdEE.roa
Signing time: Tue 02 Jan 2024 10:34:01 +0000
ROA not before: Tue 02 Jan 2024 10:34:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50596
IP address blocks: 188.68.8.0/21 maxlen: 22
46.254.160.0/21 maxlen: 22
37.75.200.0/21 maxlen: 22
185.8.220.0/22 maxlen: 23
188.68.168.0/21 maxlen: 22
93.179.104.0/21 maxlen: 22
109.201.96.0/19 maxlen: 22
188.68.192.0/21 maxlen: 22
178.57.208.0/21 maxlen: 22
2a03:3cc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:c8:84:d4:cc:ef:84:55:d1:58:5b:d5:c9:90:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958
Validity
Not Before: Jan 2 10:34:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2356b808882ff7bbc17d94bdf213c558fb987441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:ea:14:7f:6a:ad:ff:94:50:c4:dd:dd:91:
13:ce:bb:fd:c3:32:6a:dd:9d:b8:65:51:a2:f4:43:
0f:4a:6d:c5:6c:f4:a1:02:60:ac:dd:0a:5e:6c:19:
84:a0:d9:ed:a2:24:6d:19:5d:45:db:78:01:b0:be:
f1:06:b8:21:b7:92:dc:a5:64:d5:05:32:c5:54:bf:
8e:13:f5:ef:76:4f:bd:55:68:30:9f:07:93:9c:71:
15:9c:b7:2e:d3:3f:f3:f0:c2:4c:84:f1:c0:75:6a:
10:6f:69:ee:9c:3a:37:97:9a:38:26:15:5f:9a:a7:
6b:d2:0b:08:ba:97:1a:96:2b:6c:8a:e6:94:86:9c:
ce:0c:bc:ab:9a:6b:69:93:1d:76:c9:26:8b:04:d7:
d9:20:26:07:60:1c:5e:b6:0c:95:d7:5f:47:4e:29:
7e:c5:9e:cc:8b:a7:07:ce:f5:05:a9:5d:6a:58:cc:
cc:7a:d7:8c:79:4e:e1:ba:e3:7b:ec:0c:c8:2f:70:
38:df:5d:48:b6:68:e4:7c:b6:ea:e6:d6:73:d4:e5:
5d:54:ba:a6:4d:e1:ec:b1:8c:f2:75:96:00:66:91:
23:1f:2d:89:6d:67:05:ab:70:76:79:30:69:c9:2e:
e6:d5:e9:41:a0:0d:d6:34:9b:84:af:a7:fa:d8:48:
77:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:56:B8:08:88:2F:F7:BB:C1:7D:94:BD:F2:13:C5:58:FB:98:74:41
X509v3 Authority Key Identifier:
keyid:BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/I1a4CIgv97vBfZS98hPFWPuYdEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.200.0/21
46.254.160.0/21
93.179.104.0/21
109.201.96.0/19
178.57.208.0/21
185.8.220.0/22
188.68.8.0/21
188.68.168.0/21
188.68.192.0/21
IPv6:
2a03:3cc0::/29
Signature Algorithm: sha256WithRSAEncryption
c4:ab:42:58:eb:3d:f5:fe:c2:56:13:50:38:e6:5b:a5:b7:ee:
af:64:0e:96:e7:ed:64:1f:f8:b4:e8:60:47:2f:53:c6:d3:f5:
d4:da:59:c7:0a:1a:ec:3d:11:2a:2e:a5:2c:c6:e9:f7:17:fa:
6d:b6:ad:da:05:d7:b3:56:15:70:9c:ed:7d:08:60:1e:f3:a3:
27:92:b9:3e:af:e4:9d:8b:26:7d:af:19:58:95:15:ff:5e:b2:
0a:3a:e6:59:6a:89:c0:2c:81:2d:fd:3c:dd:05:f1:34:1f:1a:
38:1e:95:89:5a:7e:09:53:33:69:13:e0:b5:62:44:32:64:e1:
98:d2:0a:a0:81:dc:d1:48:9d:e0:08:b2:0a:9d:44:12:c8:ab:
20:43:a9:70:9d:1e:f4:3e:6f:8a:58:ad:bf:a8:00:84:e3:99:
7e:4d:1a:21:51:f7:b4:2d:f2:bf:db:b8:ec:9b:4a:54:15:d2:
cb:9f:29:9f:3c:e0:b4:44:95:80:df:fb:4f:36:6a:f3:87:43:
a3:de:a4:cd:8a:f0:fc:d2:22:f2:06:89:9c:1d:f0:b8:49:72:
84:69:f7:2b:cc:d2:e5:e0:d3:5f:b7:0c:8f:b9:f6:b6:cf:b4:
f9:f6:bf:5d:d4:b8:ff:fa:09:30:fa:96:c4:9f:97:31:09:8d:
7f:8a:af:15
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAYzJvMiE1MzvhFXRWFvVyZDWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMGUxMjY0ZTA3YjM3MDhiY2I5ZGI1YTE0ZTdjYzkyNzA4
NjM5NTgwHhcNMjQwMTAyMTAzNDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzU2YjgwODg4MmZmN2JiYzE3ZDk0YmRmMjEzYzU1OGZiOTg3NDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdnqFH9qrf+UUMTd3ZETzrv9wzJq
3Z24ZVGi9EMPSm3FbPShAmCs3QpebBmEoNntoiRtGV1F23gBsL7xBrght5LcpWTV
BTLFVL+OE/Xvdk+9VWgwnweTnHEVnLcu0z/z8MJMhPHAdWoQb2nunDo3l5o4JhVf
mqdr0gsIupcalitsiuaUhpzODLyrmmtpkx12ySaLBNfZICYHYBxetgyV119HTil+
xZ7Mi6cHzvUFqV1qWMzMeteMeU7huuN77AzIL3A4311ItmjkfLbq5tZz1OVdVLqm
TeHssYzydZYAZpEjHy2JbWcFq3B2eTBpyS7m1elBoA3WNJuEr6f62Eh33wIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFCNWuAiIL/e7wX2UvfITxVj7mHRBMB8GA1UdIwQY
MBaAFLoOEmTgezcIvLnbWhTnzJJwhjlYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWc0U1pPQjdOd2k4dWR0YUZPZk1rbkNHT1ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS82NGMyZmEtZGY1NC00N2ZmLWE4Yzkt
YmZlMGNjYjc5ZmNjLzEvSTFhNENJZ3Y5N3ZCZlpTOThoUEZXUHVZZEVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS82NGMyZmEtZGY1NC00N2ZmLWE4YzktYmZlMGNjYjc5ZmNj
LzEvdWc0U1pPQjdOd2k4dWR0YUZPZk1rbkNHT1ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDJUvIAwQD
Lv6gAwQDXbNoAwQFbclgAwQDsjnQAwQCuQjcAwQDvEQIAwQDvESoAwQDvETAMA0E
AgACMAcDBQMqAzzAMA0GCSqGSIb3DQEBCwUAA4IBAQDEq0JY6z31/sJWE1A45lul
t+6vZA6W5+1kH/i06GBHL1PG0/XU2lnHChrsPREqLqUsxun3F/pttq3aBdezVhVw
nO19CGAe86Mnkrk+r+SdiyZ9rxlYlRX/XrIKOuZZaonALIEt/TzdBfE0Hxo4HpWJ
Wn4JUzNpE+C1YkQyZOGY0gqggdzRSJ3gCLIKnUQSyKsgQ6lwnR70Pm+KWK2/qACE
45l+TRohUfe0LfK/27jsm0pUFdLLnymfPOC0RJWA3/tPNmrzh0Oj3qTNivD80iLy
BomcHfC4SXKEafcrzNLl4NNftwyPufa2z7T59r9d1Lj/+gkw+pbEn5cxCY1/iq8V
-----END CERTIFICATE-----
Generated at Sat Jun 22 08:59:34 2024 by rpki-client on console-fra.rpki-client.org