Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/IG-HgkT_eOT58v9etN3SqRVbGHA.roa
File: IG-HgkT_eOT58v9etN3SqRVbGHA.roa (raw, json)
Hash identifier: ErEBO1Re+mvkxi3q1QTgAgxPkKdnHRZECqzH6rHW4lI=
Subject key identifier: 20:6F:87:82:44:FF:78:E4:F9:F2:FF:5E:B4:DD:D2:A9:15:5B:18:70
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018CC56E13F417D9C3CFD671E3D3E603B656
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/IG-HgkT_eOT58v9etN3SqRVbGHA.roa
Signing time: Mon 01 Jan 2024 14:29:34 +0000
ROA not before: Mon 01 Jan 2024 14:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216185
IP address blocks: 5.8.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:13:f4:17:d9:c3:cf:d6:71:e3:d3:e6:03:b6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 14:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=206f878244ff78e4f9f2ff5eb4ddd2a9155b1870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:64:7e:a6:20:86:94:f5:15:c3:be:0b:76:40:
2b:c4:5b:ae:6a:f9:fd:ef:87:42:64:4e:0d:77:08:
fd:5f:71:0e:ea:76:ab:57:85:ef:ba:65:dd:fb:ad:
30:da:46:7c:df:f1:52:d5:b7:7c:46:ba:50:31:64:
ae:98:ff:a2:2f:6f:e7:95:c6:c9:c6:78:79:01:0f:
e2:79:49:e5:54:c1:fe:0d:0e:0e:2c:71:4c:c3:8c:
16:bc:82:b5:76:28:ae:e1:04:3f:24:69:4c:dc:21:
91:0f:72:f0:d6:27:d0:9b:ec:2d:b3:03:76:c1:38:
19:55:87:f4:95:87:b6:0b:2c:ea:ee:44:81:fe:3e:
d6:7e:55:af:a4:1e:ea:1f:6e:22:0b:1c:3f:80:73:
8c:b2:07:4e:dd:ee:ed:d2:62:d5:f0:7d:e0:c0:5f:
cb:d1:4e:8d:1c:5a:e6:2c:db:01:da:8d:b4:31:22:
e3:2c:4f:a3:cb:15:5c:84:d1:40:41:04:7a:ab:0f:
48:3a:a4:47:a0:93:d7:a3:1a:0c:03:9c:2f:78:fe:
15:76:f5:75:f9:f1:27:a0:79:36:00:4b:c3:a2:fa:
70:da:cb:77:b7:c2:99:98:e2:cc:12:ed:21:43:72:
67:2c:1c:5e:2a:96:04:e4:69:6f:7b:7f:a7:39:65:
0b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6F:87:82:44:FF:78:E4:F9:F2:FF:5E:B4:DD:D2:A9:15:5B:18:70
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/IG-HgkT_eOT58v9etN3SqRVbGHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.62.0/24
Signature Algorithm: sha256WithRSAEncryption
90:03:54:f0:6d:00:a4:07:bd:26:54:d7:ca:91:d0:c2:26:8f:
b2:46:97:62:94:aa:2f:96:fd:ec:f2:0a:c1:ff:5a:c6:b0:15:
e9:03:f9:02:18:60:3f:ff:8a:b0:01:62:1c:26:22:bb:6f:26:
00:75:68:f8:c9:2d:97:6b:a8:d9:3d:79:55:39:99:be:f5:d0:
11:7e:e3:97:66:15:8e:b5:5e:b7:65:82:b2:e6:6c:73:3d:aa:
28:0a:dd:42:cd:56:1d:f0:22:7b:80:fd:a4:65:40:12:a0:3b:
37:d8:40:2f:1c:56:34:cb:3b:83:e8:4b:a9:d6:de:25:6b:2f:
14:49:6d:3a:f4:d6:a5:51:e0:f1:9c:1b:8c:8e:40:06:3d:75:
02:04:5e:5f:3f:b8:21:c2:cb:cd:88:7a:ac:e6:63:99:f0:a3:
58:5f:dc:2a:81:87:b9:cf:f6:59:7d:1b:c7:13:24:0e:04:38:
e4:ab:11:60:4c:d9:3b:78:2a:6e:5e:7f:90:32:c6:85:b7:8c:
00:80:39:94:be:18:04:9a:8c:d2:cf:75:15:1a:4a:c4:86:a3:
a3:73:98:e2:9d:99:19:52:9e:12:6e:ec:0f:86:c8:d4:61:8f:
58:75:8a:e9:c2:ac:64:3a:67:74:80:b0:aa:30:34:9b:93:aa:
4c:b8:e9:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbhP0F9nDz9Zx49PmA7ZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjQwMTAxMTQyOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDZmODc4MjQ0ZmY3OGU0ZjlmMmZmNWViNGRkZDJhOTE1NWIxODcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWR+piCGlPUVw74LdkArxFuuavn9
74dCZE4Ndwj9X3EO6narV4XvumXd+60w2kZ83/FS1bd8RrpQMWSumP+iL2/nlcbJ
xnh5AQ/ieUnlVMH+DQ4OLHFMw4wWvIK1diiu4QQ/JGlM3CGRD3Lw1ifQm+wtswN2
wTgZVYf0lYe2Cyzq7kSB/j7WflWvpB7qH24iCxw/gHOMsgdO3e7t0mLV8H3gwF/L
0U6NHFrmLNsB2o20MSLjLE+jyxVchNFAQQR6qw9IOqRHoJPXoxoMA5wveP4VdvV1
+fEnoHk2AEvDovpw2st3t8KZmOLMEu0hQ3JnLBxeKpYE5Glve3+nOWULGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCBvh4JE/3jk+fL/XrTd0qkVWxhwMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvSUctSGdrVF9lT1Q1OHY5ZXROM1NxUlZiR0hBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQg+MA0G
CSqGSIb3DQEBCwUAA4IBAQCQA1TwbQCkB70mVNfKkdDCJo+yRpdilKovlv3s8grB
/1rGsBXpA/kCGGA//4qwAWIcJiK7byYAdWj4yS2Xa6jZPXlVOZm+9dARfuOXZhWO
tV63ZYKy5mxzPaooCt1CzVYd8CJ7gP2kZUASoDs32EAvHFY0yzuD6Eup1t4lay8U
SW069NalUeDxnBuMjkAGPXUCBF5fP7ghwsvNiHqs5mOZ8KNYX9wqgYe5z/ZZfRvH
EyQOBDjkqxFgTNk7eCpuXn+QMsaFt4wAgDmUvhgEmozSz3UVGkrEhqOjc5jinZkZ
Up4SbuwPhsjUYY9YdYrpwqxkOmd0gLCqMDSbk6pMuOlM
-----END CERTIFICATE-----
Generated at Mon May 13 07:43:15 2024 by rpki-client on console-fra.rpki-client.org