Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/kF1kYozzI9ZoZ-VyIbccxhFi8uk.roa
File: kF1kYozzI9ZoZ-VyIbccxhFi8uk.roa (raw, json)
Hash identifier: 9psb1HBl+5E8BagqN6XWkfkHanzoWoZDGP/Pq/pn2mw=
Subject key identifier: 90:5D:64:62:8C:F3:23:D6:68:67:E5:72:21:B7:1C:C6:11:62:F2:E9
Certificate issuer: /CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Certificate serial: 018CC64A8E6FC67B50D3E4A27C9E373417CE
Authority key identifier: D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/kF1kYozzI9ZoZ-VyIbccxhFi8uk.roa
Signing time: Mon 01 Jan 2024 18:30:24 +0000
ROA not before: Mon 01 Jan 2024 18:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 176.117.80.0/22 maxlen: 22
176.117.84.0/22 maxlen: 22
176.117.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:8e:6f:c6:7b:50:d3:e4:a2:7c:9e:37:34:17:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Validity
Not Before: Jan 1 18:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=905d64628cf323d66867e57221b71cc61162f2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2d:50:aa:c6:d2:3c:b3:68:11:47:2a:e0:a5:
e0:5f:2c:f6:f5:96:bc:82:2c:e4:17:da:70:0a:23:
ed:37:59:2d:7c:f2:56:7d:b4:4a:eb:e3:8d:8b:0f:
b0:64:51:e3:f2:85:69:8b:e0:25:54:66:09:97:5b:
c1:a5:04:ed:29:65:9b:0c:25:d5:11:26:ae:b4:c9:
3f:c5:e3:6a:27:5c:02:2a:54:1d:a6:ae:82:88:9e:
06:a0:9d:87:36:bc:54:5c:09:fa:b2:cc:85:98:82:
92:d2:a0:85:c9:9c:08:4a:e4:cb:51:3c:78:b3:ee:
72:6b:00:48:44:15:71:c3:db:cd:56:d9:73:85:65:
0c:16:c2:ac:e4:59:69:05:b7:22:59:35:ba:9a:bb:
30:c4:9a:b8:bf:cc:78:8d:cc:69:b2:3a:58:5d:91:
4d:ed:57:8b:b0:e1:d1:e1:0b:ba:9a:d4:c0:ef:8c:
6a:db:ed:dc:c4:dc:fe:5c:c3:f8:10:a6:c8:f3:d6:
18:72:34:4e:1e:0a:7a:9d:e3:d9:67:ce:4a:df:11:
5e:d5:f7:6a:7a:03:28:6d:76:9c:53:af:c0:11:0e:
7b:6e:58:6c:4d:a8:55:a0:83:21:49:6a:0d:ec:13:
3f:05:c3:2a:f5:e0:dd:7e:7d:a0:38:cf:12:4d:a2:
99:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5D:64:62:8C:F3:23:D6:68:67:E5:72:21:B7:1C:C6:11:62:F2:E9
X509v3 Authority Key Identifier:
keyid:D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/kF1kYozzI9ZoZ-VyIbccxhFi8uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.64.0/22
176.117.80.0/21
Signature Algorithm: sha256WithRSAEncryption
23:f8:16:cb:45:6d:55:c5:87:05:45:55:93:5a:54:f0:f2:cb:
2f:51:8a:58:76:3e:a7:5b:7f:42:45:4e:08:7d:10:fd:89:62:
ce:20:d1:b8:21:99:29:f6:73:b9:ba:d8:0b:88:fa:5f:56:d6:
77:78:46:70:be:15:f5:02:34:e8:3a:ab:2b:eb:15:bb:df:a9:
c6:7c:16:8b:80:98:cb:d1:a6:c5:5c:4b:ad:82:88:57:b6:0c:
73:c7:40:6f:e6:ea:ec:48:ba:e3:3c:0b:ce:5c:56:a6:04:7c:
a0:dd:c8:7e:3a:95:5c:d0:63:8a:be:08:8e:56:54:9d:8f:52:
56:18:3d:4a:49:95:4f:ec:cd:d1:13:ec:4f:74:9f:7b:f2:ab:
a0:e4:68:b5:d8:4b:a3:4d:1d:81:20:24:e5:4c:a1:0b:5a:8d:
db:e6:5f:d9:b3:c6:17:44:8a:3a:e1:a9:74:9e:94:bb:24:c5:
fb:8f:b3:45:87:48:08:b3:65:6b:67:df:a7:04:4c:c7:ea:c2:
bd:90:03:80:78:7d:a1:14:b7:50:6e:fb:ab:32:82:fd:a8:dc:
b8:99:98:81:0a:62:98:86:79:7b:b9:96:db:87:55:60:e1:36:
50:9f:bc:34:c6:17:5b:a5:f4:01:95:1c:44:7b:d3:76:43:d7:
fa:ee:c9:40
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzGSo5vxntQ0+SifJ43NBfOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMjk5Y2YxMmIzOGZmMTJkOTVmZmMwZDEzYWMxMmM2OWZl
MmMxY2EwHhcNMjQwMTAxMTgzMDI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDVkNjQ2MjhjZjMyM2Q2Njg2N2U1NzIyMWI3MWNjNjExNjJmMmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiS1QqsbSPLNoEUcq4KXgXyz29Za8
gizkF9pwCiPtN1ktfPJWfbRK6+ONiw+wZFHj8oVpi+AlVGYJl1vBpQTtKWWbDCXV
ESautMk/xeNqJ1wCKlQdpq6CiJ4GoJ2HNrxUXAn6ssyFmIKS0qCFyZwISuTLUTx4
s+5yawBIRBVxw9vNVtlzhWUMFsKs5FlpBbciWTW6mrswxJq4v8x4jcxpsjpYXZFN
7VeLsOHR4Qu6mtTA74xq2+3cxNz+XMP4EKbI89YYcjROHgp6nePZZ85K3xFe1fdq
egMobXacU6/AEQ57blhsTahVoIMhSWoN7BM/BcMq9eDdfn2gOM8STaKZpQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJBdZGKM8yPWaGflciG3HMYRYvLpMB8GA1UdIwQY
MBaAFNApnPErOP8S2V/8DROsEsaf4sHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMENtYzhTczRfeExaWF93TkU2d1N4cF9pd2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kNTgyYzQtMzZlMy00YTU3LTg3NTIt
ZTY0MWU3MTNkMWZhLzEva0Yxa1lvenpJOVpvWi1WeUliY2N4aEZpOHVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9kNTgyYzQtMzZlMy00YTU3LTg3NTItZTY0MWU3MTNkMWZh
LzEvMENtYzhTczRfeExaWF93TkU2d1N4cF9pd2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCsHVAAwQD
sHVQMA0GCSqGSIb3DQEBCwUAA4IBAQAj+BbLRW1VxYcFRVWTWlTw8ssvUYpYdj6n
W39CRU4IfRD9iWLOING4IZkp9nO5utgLiPpfVtZ3eEZwvhX1AjToOqsr6xW736nG
fBaLgJjL0abFXEutgohXtgxzx0Bv5ursSLrjPAvOXFamBHyg3ch+OpVc0GOKvgiO
VlSdj1JWGD1KSZVP7M3RE+xPdJ978qug5Gi12EujTR2BICTlTKELWo3b5l/Zs8YX
RIo64al0npS7JMX7j7NFh0gIs2VrZ9+nBEzH6sK9kAOAeH2hFLdQbvurMoL9qNy4
mZiBCmKYhnl7uZbbh1Vg4TZQn7w0xhdbpfQBlRxEe9N2Q9f67slA
-----END CERTIFICATE-----
Generated at Fri May 17 06:52:39 2024 by rpki-client on console-ams.rpki-client.org