Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/0IflaylEo48sunKqv1OGmVOn5xk.roa
File: 0IflaylEo48sunKqv1OGmVOn5xk.roa (raw, json)
Hash identifier: pSkU4z0/6XP9e2uZ3jV0tZx2T+X6WXq4cmh1J2ZNgwE=
Subject key identifier: D0:87:E5:6B:29:44:A3:8F:2C:BA:72:AA:BF:53:86:99:53:A7:E7:19
Certificate issuer: /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Certificate serial: 018CC3B689C67D25B3CBBFD0B79955AF538E
Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/0IflaylEo48sunKqv1OGmVOn5xk.roa
Signing time: Mon 01 Jan 2024 06:29:29 +0000
ROA not before: Mon 01 Jan 2024 06:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39583
IP address blocks: 185.7.4.0/22 maxlen: 22
195.244.20.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:89:c6:7d:25:b3:cb:bf:d0:b7:99:55:af:53:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Validity
Not Before: Jan 1 06:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d087e56b2944a38f2cba72aabf53869953a7e719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e6:9b:bd:21:4d:a1:08:6f:5a:59:19:cf:b5:
dd:8a:01:fa:8b:78:fb:7a:53:2f:48:c0:c3:5f:52:
d0:bc:6c:a2:5b:47:32:69:fe:70:df:59:37:43:cf:
9e:67:c2:a4:bc:f0:50:b6:95:b1:93:fe:3d:45:9b:
70:9b:96:38:af:6f:2b:20:d1:dc:2d:ad:54:05:49:
a1:a7:98:74:52:cb:23:50:2f:43:96:5f:2e:58:9b:
0b:54:2c:45:f1:89:30:23:b2:69:74:3a:57:b5:de:
f6:1d:92:d9:8b:91:28:83:b0:70:29:88:70:d6:d3:
8e:8c:00:87:6d:af:38:c7:94:25:65:e1:3d:2b:ea:
2d:4a:6c:b1:01:05:3a:12:17:42:47:eb:a6:29:b7:
3f:2b:33:43:55:93:39:0b:89:bd:68:5a:3f:48:d4:
42:3e:e5:1b:56:51:1a:23:b6:21:95:c8:49:fd:46:
ed:2d:05:ac:45:2f:ad:ce:6e:de:64:a0:78:5c:ac:
5b:2a:8b:a3:c7:f4:f3:00:e6:28:86:7f:40:2e:d1:
83:85:e4:1c:44:91:42:39:0f:cf:ca:23:a5:e4:ea:
f2:8a:1e:82:39:c0:8a:43:bb:f2:fc:64:ba:79:4a:
1d:36:8f:61:a1:3c:ec:e8:91:cb:3c:f9:bf:62:15:
e4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:87:E5:6B:29:44:A3:8F:2C:BA:72:AA:BF:53:86:99:53:A7:E7:19
X509v3 Authority Key Identifier:
keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/0IflaylEo48sunKqv1OGmVOn5xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.4.0/22
195.244.20.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:13:3b:49:05:d6:45:75:dd:96:b4:68:89:93:07:14:67:04:
59:cd:b0:ac:c8:3b:69:6f:76:71:e3:72:5e:c2:4c:ae:f6:12:
4f:33:e2:7b:bc:a6:64:28:55:71:63:c3:09:2a:15:76:03:79:
c1:0e:e9:70:63:27:66:72:65:92:cc:02:5a:bf:56:77:2c:84:
6e:2f:96:61:51:19:c3:76:0b:7a:99:f6:a4:61:92:18:98:f3:
e1:99:65:22:64:23:2d:9e:ac:c1:b5:2b:d2:48:bb:a7:ed:51:
11:63:78:23:02:37:f4:f4:0e:23:8d:83:66:52:f2:e5:70:8b:
9b:dd:15:82:6f:0d:45:46:2c:50:ee:71:6e:89:76:b2:f8:a8:
15:3f:bf:9f:e8:6b:4b:06:4f:2a:71:ec:e9:18:56:c2:78:50:
10:05:01:e6:36:09:34:66:a8:72:ef:7a:b5:ad:4d:b2:69:89:
fd:bf:1f:ae:38:1d:4b:e2:9e:77:60:29:1c:a2:32:be:77:df:
21:6e:4d:e6:a2:dc:91:f3:f7:f3:69:cc:6a:df:35:3b:47:32:
fa:52:20:33:ae:07:29:c6:27:9f:8b:d5:a0:80:74:64:ee:6e:
ff:ee:3f:47:84:98:55:74:8c:c5:ad:ba:50:6f:f9:24:91:d9:
92:44:7a:8f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzDtonGfSWzy7/Qt5lVr1OOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NGZhNTY3YzA3YTVhMmUxZjJjOGNiMjYxMWYxNzM2OTc4
NzFmNzgwHhcNMjQwMTAxMDYyOTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDg3ZTU2YjI5NDRhMzhmMmNiYTcyYWFiZjUzODY5OTUzYTdlNzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOabvSFNoQhvWlkZz7XdigH6i3j7
elMvSMDDX1LQvGyiW0cyaf5w31k3Q8+eZ8KkvPBQtpWxk/49RZtwm5Y4r28rINHc
La1UBUmhp5h0UssjUC9Dll8uWJsLVCxF8YkwI7JpdDpXtd72HZLZi5Eog7BwKYhw
1tOOjACHba84x5QlZeE9K+otSmyxAQU6EhdCR+umKbc/KzNDVZM5C4m9aFo/SNRC
PuUbVlEaI7YhlchJ/UbtLQWsRS+tzm7eZKB4XKxbKoujx/TzAOYohn9ALtGDheQc
RJFCOQ/PyiOl5Oryih6COcCKQ7vy/GS6eUodNo9hoTzs6JHLPPm/YhXkCwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNCH5WspRKOPLLpyqr9ThplTp+cZMB8GA1UdIwQY
MBaAFAlPpWfAelouHyyMsmEfFzaXhx94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82ZGJhODMtYTRhNC00OTkxLWIyMGIt
YWVhMjUyZGM2M2IzLzEvMElmbGF5bEVvNDhzdW5LcXYxT0dtVk9uNXhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82ZGJhODMtYTRhNC00OTkxLWIyMGItYWVhMjUyZGM2M2Iz
LzEvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuQcEAwQB
w/QUMA0GCSqGSIb3DQEBCwUAA4IBAQAfEztJBdZFdd2WtGiJkwcUZwRZzbCsyDtp
b3Zx43Jewkyu9hJPM+J7vKZkKFVxY8MJKhV2A3nBDulwYydmcmWSzAJav1Z3LIRu
L5ZhURnDdgt6mfakYZIYmPPhmWUiZCMtnqzBtSvSSLun7VERY3gjAjf09A4jjYNm
UvLlcIub3RWCbw1FRixQ7nFuiXay+KgVP7+f6GtLBk8qcezpGFbCeFAQBQHmNgk0
Zqhy73q1rU2yaYn9vx+uOB1L4p53YCkcojK+d98hbk3motyR8/fzacxq3zU7RzL6
UiAzrgcpxiefi9WggHRk7m7/7j9HhJhVdIzFrbpQb/kkkdmSRHqP
-----END CERTIFICATE-----
Generated at Wed May 15 17:57:11 2024 by rpki-client on console-fra.rpki-client.org