Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/DrIgMUGAis-LaZ9DilrgXVPSrII.roa
File: DrIgMUGAis-LaZ9DilrgXVPSrII.roa (raw, json)
Hash identifier: PlEQOyk3TyzWRwnv1e4DcNpUrzalC4wdQ+1lEfwB0kU=
Subject key identifier: 0E:B2:20:31:41:80:8A:CF:8B:69:9F:43:8A:5A:E0:5D:53:D2:AC:82
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01933A0166153461DDE827E2A3348EAEE0AF
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/DrIgMUGAis-LaZ9DilrgXVPSrII.roa
Signing time: Sun 17 Nov 2024 12:03:10 +0000
ROA not before: Sun 17 Nov 2024 12:03:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 188.209.132.0/22 maxlen: 24
188.209.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3a:01:66:15:34:61:dd:e8:27:e2:a3:34:8e:ae:e0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Nov 17 12:03:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0eb2203141808acf8b699f438a5ae05d53d2ac82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c8:68:82:a1:54:4d:83:42:01:32:91:ec:11:
9a:b1:61:2e:d3:8d:8b:c9:b9:21:32:9c:e2:bf:71:
17:52:f5:82:ad:1b:6f:65:01:63:a4:5d:57:7e:2a:
6b:5a:e3:fa:7a:c1:0e:39:a4:e1:11:c0:0a:06:e3:
7f:38:b1:52:d1:b0:5f:d6:6e:90:ad:9d:03:f8:7e:
7c:f4:f4:9c:07:28:06:6d:07:79:e1:f9:6c:88:05:
71:00:79:1e:94:e9:f3:93:47:63:36:71:92:32:2e:
f5:97:9c:50:b2:28:5a:86:03:7f:3e:0c:03:16:e5:
24:2c:ed:ab:70:91:03:cc:74:6d:24:9f:ea:1b:c0:
7d:9a:8e:06:53:ab:02:af:4f:9f:ed:81:9c:d1:d2:
3c:25:da:14:d3:40:51:5b:16:bd:ce:d6:fe:70:b8:
b8:c3:1b:56:9f:5c:98:17:65:b3:e8:4f:19:41:96:
66:09:f4:29:81:c7:eb:ef:76:d1:be:fe:46:69:77:
03:57:4c:bd:4b:82:05:7c:74:e5:54:56:05:ce:ab:
e0:7b:cd:8a:a4:ea:6c:56:3f:4b:e6:79:3f:f0:f8:
d6:90:ff:fe:97:bb:4d:b7:85:dd:7f:88:a2:ef:d0:
c2:53:03:c0:50:ce:63:b3:9b:ee:91:fc:a9:28:ca:
b5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B2:20:31:41:80:8A:CF:8B:69:9F:43:8A:5A:E0:5D:53:D2:AC:82
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/DrIgMUGAis-LaZ9DilrgXVPSrII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.132.0/22
188.209.139.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:cb:ad:55:b5:5a:17:6c:d9:10:97:69:e4:9a:a4:d9:fb:8a:
6c:99:d7:e6:82:42:c3:2e:a6:04:ed:fb:02:90:fa:bf:46:8b:
b5:f8:e5:2e:c4:e9:97:8b:48:4e:a4:68:da:05:67:40:c9:dc:
13:a2:ec:be:7b:e7:66:09:54:d6:51:a3:e4:fc:37:6b:36:83:
03:08:14:a1:6e:62:64:9d:f6:34:d7:4f:b9:a6:b2:3c:31:6c:
38:59:1d:3e:f7:07:6c:6a:a3:35:79:42:c3:ee:84:89:db:ec:
3d:7c:80:63:30:57:b5:d5:49:66:ff:35:f5:c7:0b:6b:ef:a4:
24:21:f1:01:98:31:0d:22:bc:7f:48:f8:9c:f5:32:84:ec:81:
52:e5:0d:c8:3b:3a:cf:2e:52:39:59:fa:80:6a:21:f0:c6:cb:
93:62:1c:f0:fe:30:47:a7:92:99:69:b6:7d:f5:8e:d9:6f:b2:
3f:ed:ef:93:b8:6d:c0:f7:1d:47:6a:6a:e4:d1:8d:44:46:ef:
bf:27:61:65:6b:2d:3f:8e:e8:0c:85:c6:4f:d8:04:68:53:39:
22:5b:bf:3e:0a:29:41:02:4c:1c:5e:85:c2:05:c3:45:e3:2d:
39:5c:33:ec:26:a7:7b:6b:90:82:a4:fd:6b:cb:01:41:01:e6:
59:cb:e0:f5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZM6AWYVNGHd6CfiozSOruCvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjQxMTE3MTIwMzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWIyMjAzMTQxODA4YWNmOGI2OTlmNDM4YTVhZTA1ZDUzZDJhYzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtchogqFUTYNCATKR7BGasWEu042L
ybkhMpziv3EXUvWCrRtvZQFjpF1XfiprWuP6esEOOaThEcAKBuN/OLFS0bBf1m6Q
rZ0D+H589PScBygGbQd54flsiAVxAHkelOnzk0djNnGSMi71l5xQsihahgN/PgwD
FuUkLO2rcJEDzHRtJJ/qG8B9mo4GU6sCr0+f7YGc0dI8JdoU00BRWxa9ztb+cLi4
wxtWn1yYF2Wz6E8ZQZZmCfQpgcfr73bRvv5GaXcDV0y9S4IFfHTlVFYFzqvge82K
pOpsVj9L5nk/8PjWkP/+l7tNt4Xdf4ii79DCUwPAUM5js5vukfypKMq1bwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA6yIDFBgIrPi2mfQ4pa4F1T0qyCMB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvRHJJZ01VR0Fpcy1MYVo5RGlscmdYVlBTcklJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCvNGEAwQA
vNGLMA0GCSqGSIb3DQEBCwUAA4IBAQBqy61VtVoXbNkQl2nkmqTZ+4psmdfmgkLD
LqYE7fsCkPq/Rou1+OUuxOmXi0hOpGjaBWdAydwTouy+e+dmCVTWUaPk/DdrNoMD
CBShbmJknfY010+5prI8MWw4WR0+9wdsaqM1eULD7oSJ2+w9fIBjMFe11Ulm/zX1
xwtr76QkIfEBmDENIrx/SPic9TKE7IFS5Q3IOzrPLlI5WfqAaiHwxsuTYhzw/jBH
p5KZabZ99Y7Zb7I/7e+TuG3A9x1Hamrk0Y1ERu+/J2Flay0/jugMhcZP2ARoUzki
W78+CilBAkwcXoXCBcNF4y05XDPsJqd7a5CCpP1rywFBAeZZy+D1
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:30 2024 by rpki-client on console-ams.rpki-client.org