Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/ivmg_IUcmJxj9wyT0g9qaxiEv3M.roa
File: ivmg_IUcmJxj9wyT0g9qaxiEv3M.roa (raw, json)
Hash identifier: nfQmQhEerew+NAjgF1s1iflHQ+sTNtT9Tg3IfwrSNKQ=
Subject key identifier: 8A:F9:A0:FC:85:1C:98:9C:63:F7:0C:93:D2:0F:6A:6B:18:84:BF:73
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01934FBA4F97044AA0791DFA8FAEF74008C3
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/ivmg_IUcmJxj9wyT0g9qaxiEv3M.roa
Signing time: Thu 21 Nov 2024 17:17:10 +0000
ROA not before: Thu 21 Nov 2024 17:17:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209982
IP address blocks: 194.35.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4f:ba:4f:97:04:4a:a0:79:1d:fa:8f:ae:f7:40:08:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Nov 21 17:17:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8af9a0fc851c989c63f70c93d20f6a6b1884bf73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:eb:96:bd:e3:8e:7a:11:0d:48:65:86:3e:
78:71:04:b4:0a:5f:6a:30:6a:0e:6a:c1:db:c1:6c:
98:68:66:38:d6:4b:71:41:80:92:7f:31:ea:47:d3:
85:fb:ba:91:49:b4:b5:62:f0:ab:bf:00:e6:a4:99:
a0:a1:77:38:70:85:5e:de:12:e6:86:55:24:12:9a:
1c:20:21:77:f1:17:98:7e:b7:82:f5:7e:ca:e0:89:
e8:38:a8:3f:a7:ac:55:88:c0:09:fa:20:9d:00:34:
4e:91:97:2b:d1:c4:17:19:ed:31:0f:c2:3c:4a:5b:
3c:08:f2:70:24:8a:9c:0a:99:21:cb:85:bf:f8:69:
fb:e5:3d:2a:47:b1:85:ff:0a:fb:e6:7e:45:a7:3f:
3c:46:fa:61:e8:11:6f:52:60:17:a7:e5:b3:1f:09:
9f:ff:c8:ed:95:f4:a5:5d:2b:cd:be:96:91:29:84:
eb:11:03:58:4d:be:76:a9:c7:74:e1:ea:ed:b5:73:
8d:61:27:97:e4:8b:e6:82:8b:3b:52:50:4c:58:bb:
7a:77:fd:29:7b:9c:c6:18:fc:d6:e2:f7:13:49:d4:
cd:62:6c:58:20:f6:35:ef:09:65:94:4b:ed:c9:2a:
e1:20:f6:24:42:ef:f4:c0:d5:dc:f1:aa:e0:0e:3b:
81:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F9:A0:FC:85:1C:98:9C:63:F7:0C:93:D2:0F:6A:6B:18:84:BF:73
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/ivmg_IUcmJxj9wyT0g9qaxiEv3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.52.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:a6:ee:21:27:0e:e7:49:5c:65:8f:fd:aa:bc:83:f4:c0:b4:
e7:54:4f:66:fc:63:32:53:51:51:f4:1d:6d:5b:0e:f4:59:ff:
ce:45:d0:b1:c5:09:ba:a6:34:c4:2c:1d:fc:6b:29:ea:69:18:
34:5d:3d:83:1f:01:ca:b5:2c:75:ca:ed:ce:64:ed:78:fd:7d:
d6:11:77:ec:e3:f1:79:7c:0b:fd:7f:12:d2:8d:ae:6d:d9:84:
0e:5b:c2:90:cf:d9:54:ff:9d:f2:b2:ba:a0:aa:a3:69:5e:10:
0a:23:d4:6c:61:5e:56:92:2b:40:ea:5c:95:e0:de:58:bc:bb:
35:3f:1c:e3:05:c6:bb:2b:a6:29:11:5f:ae:ec:bd:8c:32:43:
21:1a:3b:57:53:22:f3:97:21:e7:e7:99:e9:0e:a8:f6:2a:dc:
b4:73:ae:38:dc:da:66:ce:46:b9:1c:6b:93:53:a8:6b:d1:10:
3a:43:28:50:11:51:ef:0d:70:3a:cc:10:2f:a3:6f:9a:27:be:
c5:3a:ea:07:da:2c:cd:db:43:0b:21:af:24:99:22:80:5a:ac:
78:1f:e1:08:71:12:77:a9:1b:f7:65:34:a3:fc:8a:40:6a:e3:
45:98:b5:cc:fc:26:62:5f:35:73:15:1f:b6:23:b1:b7:09:e9:
90:d8:0b:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNPuk+XBEqgeR36j673QAjDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjQxMTIxMTcxNzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWY5YTBmYzg1MWM5ODljNjNmNzBjOTNkMjBmNmE2YjE4ODRiZjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbfrlr3jjnoRDUhlhj54cQS0Cl9q
MGoOasHbwWyYaGY41ktxQYCSfzHqR9OF+7qRSbS1YvCrvwDmpJmgoXc4cIVe3hLm
hlUkEpocICF38ReYfreC9X7K4InoOKg/p6xViMAJ+iCdADROkZcr0cQXGe0xD8I8
Sls8CPJwJIqcCpkhy4W/+Gn75T0qR7GF/wr75n5Fpz88Rvph6BFvUmAXp+WzHwmf
/8jtlfSlXSvNvpaRKYTrEQNYTb52qcd04erttXONYSeX5Ivmgos7UlBMWLt6d/0p
e5zGGPzW4vcTSdTNYmxYIPY17wlllEvtySrhIPYkQu/0wNXc8argDjuB4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIr5oPyFHJicY/cMk9IPamsYhL9zMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvaXZtZ19JVWNtSnhqOXd5VDBnOXFheGlFdjNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwiM0MA0G
CSqGSIb3DQEBCwUAA4IBAQCfpu4hJw7nSVxlj/2qvIP0wLTnVE9m/GMyU1FR9B1t
Ww70Wf/ORdCxxQm6pjTELB38aynqaRg0XT2DHwHKtSx1yu3OZO14/X3WEXfs4/F5
fAv9fxLSja5t2YQOW8KQz9lU/53ysrqgqqNpXhAKI9RsYV5WkitA6lyV4N5YvLs1
PxzjBca7K6YpEV+u7L2MMkMhGjtXUyLzlyHn55npDqj2Kty0c6443Npmzka5HGuT
U6hr0RA6QyhQEVHvDXA6zBAvo2+aJ77FOuoH2izN20MLIa8kmSKAWqx4H+EIcRJ3
qRv3ZTSj/IpAauNFmLXM/CZiXzVzFR+2I7G3CemQ2Av1
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:49:17 2024 by rpki-client on console-fra.rpki-client.org