Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/8gIJvJEK3tw30sECrJaaB3CHNeU.roa
File: 8gIJvJEK3tw30sECrJaaB3CHNeU.roa (raw, json)
Hash identifier: 4T9uku0smlukHCq66ovc2eb4bCkR/kf4rI0R/xAhUwY=
Subject key identifier: F2:02:09:BC:91:0A:DE:DC:37:D2:C1:02:AC:96:9A:07:70:87:35:E5
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 018CC86F967867DA0362FCF38E7ACA38B7F3
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/8gIJvJEK3tw30sECrJaaB3CHNeU.roa
Signing time: Tue 02 Jan 2024 04:30:05 +0000
ROA not before: Tue 02 Jan 2024 04:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64425
IP address blocks: 185.244.39.0/24 maxlen: 24
5.182.210.0/23 maxlen: 24
2a0d:2406:200::/39 maxlen: 39
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:96:78:67:da:03:62:fc:f3:8e:7a:ca:38:b7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Jan 2 04:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f20209bc910adedc37d2c102ac969a07708735e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cf:da:86:bf:b5:fc:37:64:8d:b5:67:43:a9:
71:fe:de:30:96:bd:ff:25:a4:26:1c:b8:67:3c:80:
11:81:d7:e4:2e:78:a3:d6:da:29:36:e9:96:4e:fb:
b1:5e:74:95:dc:a0:90:27:a0:f5:c5:af:11:6c:fa:
a8:d2:bd:ed:1c:7c:2f:e4:ad:7e:ca:2c:a6:0c:41:
c6:83:36:0f:a0:76:68:19:90:5c:66:6b:b7:2b:2f:
fb:8d:74:c8:be:31:cf:58:a3:25:f8:8c:89:24:ba:
52:1d:01:bf:6e:d6:56:44:5f:13:ba:8e:77:22:30:
c1:1f:66:27:bd:43:2c:7a:13:79:06:28:81:db:c5:
f7:66:56:ba:b2:ae:42:a2:95:21:fb:03:b4:9a:51:
b5:06:96:55:df:b1:01:d7:d7:30:d7:48:4f:ad:0d:
df:cc:6d:8a:0b:b7:6b:54:4d:3a:bd:09:0c:29:97:
c8:67:c2:74:2a:1b:e0:fd:fe:8f:85:fd:7b:a5:9b:
e5:a4:bb:8c:2e:6e:3c:71:29:c4:b2:26:ef:ac:96:
79:6f:e2:6d:bd:08:e5:11:67:f6:4e:3d:ef:39:ee:
75:66:8c:e6:6f:a9:65:54:70:48:aa:60:de:bf:46:
66:03:e5:14:ea:95:99:28:25:e8:07:a4:01:90:24:
50:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:02:09:BC:91:0A:DE:DC:37:D2:C1:02:AC:96:9A:07:70:87:35:E5
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/8gIJvJEK3tw30sECrJaaB3CHNeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.210.0/23
185.244.39.0/24
IPv6:
2a0d:2406:200::/39
Signature Algorithm: sha256WithRSAEncryption
36:fd:09:42:f8:a5:09:2a:99:1d:86:02:4e:ad:0f:29:ba:49:
c1:c0:66:5d:79:c2:c8:b0:4f:18:10:a2:b1:61:17:02:c4:d4:
a8:cc:b3:d8:75:55:0d:bc:eb:ca:ca:44:00:36:fc:9d:d4:e7:
25:7b:a2:68:44:18:7b:e1:0b:1e:53:d6:f4:2d:2e:f1:aa:fd:
19:54:6a:42:fd:b0:b9:ae:ee:e4:5e:3d:8f:8c:b6:24:6c:69:
4b:0b:f9:46:73:39:a1:b0:26:f7:c1:dc:83:58:30:f6:7c:bc:
8c:e6:d8:65:5a:e6:d4:83:93:c4:4a:9a:b9:b1:fa:3e:50:69:
54:10:79:68:f3:92:49:46:95:92:9d:84:cd:b7:b0:b2:fd:bd:
d4:d4:b7:c9:e1:fd:d1:46:eb:77:52:a7:47:4b:76:9c:33:a6:
c6:70:6b:5f:5b:4d:57:54:62:d7:f0:ef:36:3f:30:3d:f7:8b:
db:e8:54:53:ff:42:1b:e4:63:12:20:16:5d:62:dc:a5:d3:02:
42:fc:28:2f:ad:bf:c0:11:98:22:1a:ec:23:8f:64:65:56:f1:
b7:ab:e2:fe:4b:f7:80:6b:8f:f3:43:d2:bc:1a:ad:72:90:8c:
69:27:56:80:60:3b:db:d4:a7:3d:13:78:92:5f:04:10:60:06:
16:85:20:16
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYzIb5Z4Z9oDYvzzjnrKOLfzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNGZiMDYxYTk0MjZlNGZiMjg4NWQ4MjI4Njc1NzJhMWI1
OGE0YzAwHhcNMjQwMTAyMDQzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjAyMDliYzkxMGFkZWRjMzdkMmMxMDJhYzk2OWEwNzcwODczNWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc/ahr+1/DdkjbVnQ6lx/t4wlr3/
JaQmHLhnPIARgdfkLnij1topNumWTvuxXnSV3KCQJ6D1xa8RbPqo0r3tHHwv5K1+
yiymDEHGgzYPoHZoGZBcZmu3Ky/7jXTIvjHPWKMl+IyJJLpSHQG/btZWRF8Tuo53
IjDBH2YnvUMsehN5BiiB28X3Zla6sq5CopUh+wO0mlG1BpZV37EB19cw10hPrQ3f
zG2KC7drVE06vQkMKZfIZ8J0Khvg/f6Phf17pZvlpLuMLm48cSnEsibvrJZ5b+Jt
vQjlEWf2Tj3vOe51Zozmb6llVHBIqmDev0ZmA+UU6pWZKCXoB6QBkCRQPwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFPICCbyRCt7cN9LBAqyWmgdwhzXlMB8GA1UdIwQY
MBaAFOxPsGGpQm5PsohdgihnVyobWKTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83YmMzYWItZDliNi00YWU0LWJjZDEt
Y2U1NzE1MDY5NWE5LzEvOGdJSnZKRUszdHczMHNFQ3JKYWFCM0NITmVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83YmMzYWItZDliNi00YWU0LWJjZDEtY2U1NzE1MDY5NWE5
LzEvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQBBbbSAwQA
ufQnMA4EAgACMAgDBgEqDSQGAjANBgkqhkiG9w0BAQsFAAOCAQEANv0JQvilCSqZ
HYYCTq0PKbpJwcBmXXnCyLBPGBCisWEXAsTUqMyz2HVVDbzryspEADb8ndTnJXui
aEQYe+ELHlPW9C0u8ar9GVRqQv2wua7u5F49j4y2JGxpSwv5RnM5obAm98Hcg1gw
9ny8jObYZVrm1IOTxEqaubH6PlBpVBB5aPOSSUaVkp2Ezbewsv291NS3yeH90Ubr
d1KnR0t2nDOmxnBrX1tNV1Ri1/DvNj8wPfeL2+hUU/9CG+RjEiAWXWLcpdMCQvwo
L62/wBGYIhrsI49kZVbxt6vi/kv3gGuP80PSvBqtcpCMaSdWgGA729SnPRN4kl8E
EGAGFoUgFg==
-----END CERTIFICATE-----
Generated at Sun May 19 06:21:54 2024 by rpki-client on console-ams.rpki-client.org