Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/IG6XDX585tZTx-wq_HBGHEpD2VY.roa
File: IG6XDX585tZTx-wq_HBGHEpD2VY.roa (raw, json)
Hash identifier: +ral+btXLGYBub8oYyZPJNfbWgTS4n0DJv1iBpn94rE=
Subject key identifier: 20:6E:97:0D:7E:7C:E6:D6:53:C7:EC:2A:FC:70:46:1C:4A:43:D9:56
Certificate issuer: /CN=c0c9413f076a782110c14490d890f1b3e98e0785
Certificate serial: 018CC7270569AD895B5878A288F3483768EE
Authority key identifier: C0:C9:41:3F:07:6A:78:21:10:C1:44:90:D8:90:F1:B3:E9:8E:07:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/IG6XDX585tZTx-wq_HBGHEpD2VY.roa
Signing time: Mon 01 Jan 2024 22:31:12 +0000
ROA not before: Mon 01 Jan 2024 22:31:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51177
IP address blocks: 188.214.30.0/24 maxlen: 24
193.29.187.0/24 maxlen: 24
84.234.96.0/22 maxlen: 22
188.241.58.0/24 maxlen: 24
45.128.116.0/22 maxlen: 22
193.201.82.0/24 maxlen: 24
91.235.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:05:69:ad:89:5b:58:78:a2:88:f3:48:37:68:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0c9413f076a782110c14490d890f1b3e98e0785
Validity
Not Before: Jan 1 22:31:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=206e970d7e7ce6d653c7ec2afc70461c4a43d956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:44:0d:76:6c:bf:d6:bf:0d:21:e9:6b:8e:d6:
c6:41:84:5e:52:a1:a3:11:95:76:3b:8f:79:59:83:
16:9b:32:f2:62:b9:2e:e1:b1:02:25:64:77:f1:91:
dd:1e:c5:58:38:e6:ec:fc:e4:6f:8f:ab:b3:b9:1d:
d2:28:75:c9:91:01:b6:05:a5:95:db:b3:a5:34:32:
83:a1:5d:b5:9f:e3:24:38:47:e0:5c:83:77:d0:fa:
42:9e:28:06:46:9e:60:96:35:25:32:7e:3f:ed:6f:
dd:98:70:f2:aa:05:f3:51:d9:f8:3b:71:c2:87:f8:
24:08:69:24:e7:27:0b:e3:d3:3d:4e:3d:94:3c:09:
32:34:d8:d3:15:17:4f:71:da:78:37:31:0b:54:2b:
95:fe:0f:04:80:f0:4d:62:2b:d6:0d:1f:c2:4a:f2:
1a:54:17:fb:0b:61:35:03:a3:b8:62:d9:21:e1:28:
88:18:8f:81:b3:40:9f:d9:78:bc:7d:8a:0a:1e:c1:
b4:c2:29:56:5b:11:0e:cf:11:b9:bf:d9:9c:f0:4f:
6a:da:51:db:bf:0c:b2:df:7a:70:9d:c1:99:df:a7:
fa:39:65:c6:75:b6:85:32:6c:98:87:db:5b:76:b5:
1d:73:a7:5d:68:64:07:73:1e:94:dc:14:bd:cd:42:
88:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6E:97:0D:7E:7C:E6:D6:53:C7:EC:2A:FC:70:46:1C:4A:43:D9:56
X509v3 Authority Key Identifier:
keyid:C0:C9:41:3F:07:6A:78:21:10:C1:44:90:D8:90:F1:B3:E9:8E:07:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/IG6XDX585tZTx-wq_HBGHEpD2VY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.116.0/22
84.234.96.0/22
91.235.116.0/24
188.214.30.0/24
188.241.58.0/24
193.29.187.0/24
193.201.82.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:5a:a5:02:11:43:d2:8c:51:20:7b:03:aa:06:71:b3:02:d6:
30:05:97:19:29:31:cb:8f:4d:1a:ca:5a:7b:1f:be:6a:76:12:
bc:85:73:b1:8d:53:1a:d8:06:51:36:2c:b7:53:aa:e0:04:02:
5e:67:11:46:45:68:77:5c:11:7d:2a:b6:df:ed:21:81:84:48:
89:c1:5e:60:d7:69:de:e1:69:ea:46:64:ab:8d:76:53:2d:24:
50:57:d5:05:a7:85:12:7f:39:7d:62:11:2e:24:00:ec:e0:c7:
9a:16:c5:bf:90:43:b1:95:d2:0d:7f:0c:c3:95:37:6e:32:42:
f3:fb:fd:44:d8:70:7b:d5:07:8f:5e:19:5c:21:7b:65:ed:82:
51:a5:ae:6b:b2:01:b0:a1:ea:42:f2:7c:25:0b:42:93:89:ff:
25:43:a5:05:9d:9a:77:3c:25:ce:d9:55:15:8c:b3:66:27:28:
78:5f:f5:37:9b:77:50:b2:4e:28:23:a4:a7:e3:86:2a:97:e4:
c4:1e:d3:30:bd:92:93:54:ed:b4:0a:85:5a:b9:19:53:34:ee:
31:0a:e6:97:ba:36:87:7b:20:69:56:71:b1:16:57:0a:63:4b:
39:3f:77:43:6e:f8:bd:d0:2a:b1:29:82:b8:14:07:32:96:45:
34:eb:a2:c8
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYzHJwVprYlbWHiiiPNIN2juMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwYzk0MTNmMDc2YTc4MjExMGMxNDQ5MGQ4OTBmMWIzZTk4
ZTA3ODUwHhcNMjQwMTAxMjIzMTEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDZlOTcwZDdlN2NlNmQ2NTNjN2VjMmFmYzcwNDYxYzRhNDNkOTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEQNdmy/1r8NIelrjtbGQYReUqGj
EZV2O495WYMWmzLyYrku4bECJWR38ZHdHsVYOObs/ORvj6uzuR3SKHXJkQG2BaWV
27OlNDKDoV21n+MkOEfgXIN30PpCnigGRp5gljUlMn4/7W/dmHDyqgXzUdn4O3HC
h/gkCGkk5ycL49M9Tj2UPAkyNNjTFRdPcdp4NzELVCuV/g8EgPBNYivWDR/CSvIa
VBf7C2E1A6O4Ytkh4SiIGI+Bs0Cf2Xi8fYoKHsG0wilWWxEOzxG5v9mc8E9q2lHb
vwyy33pwncGZ36f6OWXGdbaFMmyYh9tbdrUdc6ddaGQHcx6U3BS9zUKIrwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFCBulw1+fObWU8fsKvxwRhxKQ9lWMB8GA1UdIwQY
MBaAFMDJQT8HanghEMFEkNiQ8bPpjgeFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd01sQlB3ZHFlQ0VRd1VTUTJKRHhzLW1PQjRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yNGI1YmEtYmYwNi00YjUxLTk1YmMt
YTQ1MjE4YzU4NDE4LzEvSUc2WERYNTg1dFpUeC13cV9IQkdIRXBEMlZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8yNGI1YmEtYmYwNi00YjUxLTk1YmMtYTQ1MjE4YzU4NDE4
LzEvd01sQlB3ZHFlQ0VRd1VTUTJKRHhzLW1PQjRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCLYB0AwQC
VOpgAwQAW+t0AwQAvNYeAwQAvPE6AwQAwR27AwQAwclSMA0GCSqGSIb3DQEBCwUA
A4IBAQDHWqUCEUPSjFEgewOqBnGzAtYwBZcZKTHLj00aylp7H75qdhK8hXOxjVMa
2AZRNiy3U6rgBAJeZxFGRWh3XBF9Krbf7SGBhEiJwV5g12ne4WnqRmSrjXZTLSRQ
V9UFp4USfzl9YhEuJADs4MeaFsW/kEOxldINfwzDlTduMkLz+/1E2HB71QePXhlc
IXtl7YJRpa5rsgGwoepC8nwlC0KTif8lQ6UFnZp3PCXO2VUVjLNmJyh4X/U3m3dQ
sk4oI6Sn44Yql+TEHtMwvZKTVO20CoVauRlTNO4xCuaXujaHeyBpVnGxFlcKY0s5
P3dDbvi90CqxKYK4FAcylkU066LI
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:25 2024 by rpki-client on console-ams.rpki-client.org