Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/igP57x0ebjVgVBRPUddUD3PV9ok.roa
File: igP57x0ebjVgVBRPUddUD3PV9ok.roa (raw, json)
Hash identifier: MeDSOwa7gvf5w6Srr/c2Q4SqxaqVEodcU0RY4WunFYQ=
Subject key identifier: 8A:03:F9:EF:1D:1E:6E:35:60:54:14:4F:51:D7:54:0F:73:D5:F6:89
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018CCA2BBC9F56B9B9AF5595F46CEC46EE55
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/igP57x0ebjVgVBRPUddUD3PV9ok.roa
Signing time: Tue 02 Jan 2024 12:35:13 +0000
ROA not before: Tue 02 Jan 2024 12:35:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197431
IP address blocks: 85.232.225.0/24 maxlen: 24
85.232.246.0/24 maxlen: 24
213.189.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jul 2024 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:bc:9f:56:b9:b9:af:55:95:f4:6c:ec:46:ee:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 12:35:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a03f9ef1d1e6e356054144f51d7540f73d5f689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f7:87:17:d3:7a:b7:02:fb:68:24:9d:79:96:
dd:68:c2:78:af:9a:53:bf:80:f9:5b:d8:53:b5:86:
49:7b:ef:06:b6:d0:28:b3:98:fc:f6:8d:05:18:e1:
dc:95:8c:a5:74:fd:ce:30:52:b1:43:36:07:ae:35:
c5:bf:1b:66:e3:6c:85:4b:6d:43:33:ab:b8:33:83:
6c:f8:ee:f8:17:7d:16:4e:b6:de:a4:67:8c:cd:b3:
69:76:e7:3b:87:01:60:ca:79:51:68:5d:95:bf:52:
c3:55:2b:bf:1e:7b:24:de:23:91:e7:3b:db:c1:75:
a5:20:b0:ba:0e:1a:c1:61:41:1a:a1:14:ca:c0:df:
0a:bb:1c:a0:56:2c:c5:66:c1:06:4b:72:20:6b:d3:
12:ba:db:d6:a5:b1:f9:bc:78:02:82:8a:58:9e:1f:
05:7b:bd:a3:5a:7e:21:37:d0:18:27:f8:0b:36:e6:
28:8e:8d:01:dd:ac:97:c1:a7:b8:3a:2b:4b:4a:51:
3a:74:08:57:31:7b:48:6c:bc:39:c2:b8:25:e9:89:
5b:da:64:72:dc:57:fe:32:bd:03:7e:0c:b9:85:bf:
48:c2:8d:1b:bc:49:c3:0e:48:c9:cb:6c:93:51:5a:
24:ca:49:95:1e:04:d6:a8:ea:c9:b5:72:e4:90:db:
d7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:03:F9:EF:1D:1E:6E:35:60:54:14:4F:51:D7:54:0F:73:D5:F6:89
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/igP57x0ebjVgVBRPUddUD3PV9ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.225.0/24
85.232.246.0/24
213.189.48.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:0a:0a:2f:34:4a:0c:bf:b5:7f:b4:f1:2e:50:19:6c:b9:f1:
21:a5:7c:1b:c7:20:50:a0:76:a4:a0:8f:ab:36:91:e1:cd:67:
5b:5c:66:ff:34:20:81:67:91:18:53:de:6b:55:47:78:e7:fe:
a5:df:e6:1b:ef:3b:fd:0d:74:57:2d:7a:cc:9a:3e:62:4c:a0:
66:4c:60:ec:8f:a8:3d:35:26:f8:5a:d2:ae:f6:b8:77:d1:12:
31:70:4f:1c:f0:0c:c3:55:74:a4:9b:b2:18:54:19:59:e6:5e:
10:85:5e:aa:b0:fe:e3:47:ca:28:41:03:98:f2:53:62:3b:80:
7a:1e:a3:7e:ab:f6:c7:2e:73:58:95:36:f1:55:55:5d:c1:9a:
b5:c4:85:f6:ce:0b:a2:9d:10:67:3d:5f:2d:92:9a:32:86:cc:
54:bf:c8:60:f7:fd:e2:83:62:c1:98:e5:46:7f:ca:41:74:87:
b0:3a:ba:e7:05:4a:d5:9a:4e:ee:b5:77:79:71:fd:5a:c8:c7:
9a:4b:f8:27:aa:13:cb:75:d0:ec:a4:5d:0b:63:89:48:39:bc:
ea:49:4c:4b:eb:e8:2b:b3:a7:35:12:f6:3f:a1:1e:a1:05:61:
ac:bc:fb:95:07:cd:3a:21:f2:5c:13:02:4d:6c:43:4a:4d:2d:
68:6c:8e:eb
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzKK7yfVrm5r1WV9GzsRu5VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz
MzBjNWIwHhcNMjQwMTAyMTIzNTEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTAzZjllZjFkMWU2ZTM1NjA1NDE0NGY1MWQ3NTQwZjczZDVmNjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPeHF9N6twL7aCSdeZbdaMJ4r5pT
v4D5W9hTtYZJe+8GttAos5j89o0FGOHclYyldP3OMFKxQzYHrjXFvxtm42yFS21D
M6u4M4Ns+O74F30WTrbepGeMzbNpduc7hwFgynlRaF2Vv1LDVSu/Hnsk3iOR5zvb
wXWlILC6DhrBYUEaoRTKwN8KuxygVizFZsEGS3Iga9MSutvWpbH5vHgCgopYnh8F
e72jWn4hN9AYJ/gLNuYojo0B3ayXwae4OitLSlE6dAhXMXtIbLw5wrgl6Ylb2mRy
3Ff+Mr0Dfgy5hb9Iwo0bvEnDDkjJy2yTUVokykmVHgTWqOrJtXLkkNvXQQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIoD+e8dHm41YFQUT1HXVA9z1faJMB8GA1UdIwQY
MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt
NWQ2NjVlOTk4ZjZhLzEvaWdQNTd4MGVialZnVkJSUFVkZFVEM1BWOW9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh
LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVejhAwQA
Vej2AwQA1b0wMA0GCSqGSIb3DQEBCwUAA4IBAQAbCgovNEoMv7V/tPEuUBlsufEh
pXwbxyBQoHakoI+rNpHhzWdbXGb/NCCBZ5EYU95rVUd45/6l3+Yb7zv9DXRXLXrM
mj5iTKBmTGDsj6g9NSb4WtKu9rh30RIxcE8c8AzDVXSkm7IYVBlZ5l4QhV6qsP7j
R8ooQQOY8lNiO4B6HqN+q/bHLnNYlTbxVVVdwZq1xIX2zguinRBnPV8tkpoyhsxU
v8hg9/3ig2LBmOVGf8pBdIewOrrnBUrVmk7utXd5cf1ayMeaS/gnqhPLddDspF0L
Y4lIObzqSUxL6+grs6c1EvY/oR6hBWGsvPuVB806IfJcEwJNbENKTS1obI7r
-----END CERTIFICATE-----
Generated at Wed Jul 3 09:26:19 2024 by rpki-client on console-ams.rpki-client.org