Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/toWWXVz-FHwLJoZkBsqKvU9ICJo.roa
File: toWWXVz-FHwLJoZkBsqKvU9ICJo.roa (raw, json)
Hash identifier: evL8JFp97zoIIvt8PqupNDUEdRno1xPrJRIee5TRobs=
Subject key identifier: B6:85:96:5D:5C:FE:14:7C:0B:26:86:64:06:CA:8A:BD:4F:48:08:9A
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018DB2110C9E1739284F9D10FA4E1FC9B93C
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/toWWXVz-FHwLJoZkBsqKvU9ICJo.roa
Signing time: Fri 16 Feb 2024 13:17:58 +0000
ROA not before: Fri 16 Feb 2024 13:17:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215812
IP address blocks: 188.132.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b2:11:0c:9e:17:39:28:4f:9d:10:fa:4e:1f:c9:b9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 16 13:17:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b685965d5cfe147c0b26866406ca8abd4f48089a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d8:f2:20:7e:b0:61:30:4c:e0:25:6f:b1:81:
e6:2d:97:07:3c:09:70:f8:94:8d:bb:e1:c9:04:1e:
bf:4a:d5:09:8f:5c:4a:5c:e5:99:38:06:f9:d1:12:
f5:fa:7b:6a:d2:5f:16:2c:69:43:be:4b:78:65:ee:
14:b3:91:52:e0:16:db:47:82:a0:40:4a:6e:05:3e:
06:cb:f3:72:6b:4e:51:8f:35:c8:49:8d:26:1d:65:
f3:70:6b:3f:5a:36:b2:cd:2f:3c:69:04:07:8d:79:
32:48:4e:fa:77:19:18:3f:95:1d:5c:e9:7c:25:e8:
1b:29:13:cc:53:9e:8d:76:81:05:e9:20:64:e1:68:
d3:61:4e:56:0c:54:c0:da:7f:ed:67:89:2c:e9:0c:
a8:fc:e7:57:fe:2c:ff:94:6c:b5:0e:79:f0:6b:e2:
45:46:5e:7f:c9:c1:fe:9a:5c:16:ce:d8:ce:d8:56:
23:fb:09:d3:b4:a0:36:e9:bc:c0:fa:1d:a1:a6:05:
31:e9:72:5a:d3:4b:f7:58:93:46:22:e3:1b:57:f8:
26:44:9b:f1:24:26:71:f9:54:b9:7c:4e:eb:fe:21:
a8:9c:33:8b:7d:59:91:7a:87:b6:1e:32:c7:62:c9:
da:ca:60:a6:bc:56:5e:54:9c:43:18:46:d1:17:64:
0c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:85:96:5D:5C:FE:14:7C:0B:26:86:64:06:CA:8A:BD:4F:48:08:9A
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/toWWXVz-FHwLJoZkBsqKvU9ICJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.220.0/24
Signature Algorithm: sha256WithRSAEncryption
56:b1:3b:d7:ac:15:e6:f3:48:c4:a6:bf:2e:fd:8e:47:48:0b:
02:40:7d:bc:09:87:6c:67:2a:be:31:01:7b:13:f8:39:cc:65:
9c:38:fc:ce:6f:22:f5:bc:38:13:54:42:5e:d9:e8:a8:85:5a:
09:63:c6:48:7c:e9:65:77:66:70:36:1e:03:a9:a7:2b:dc:1c:
cd:46:a5:8b:31:2f:70:1a:4f:35:cb:d3:4f:48:82:22:b7:71:
8a:3a:30:97:9b:43:8b:4f:5c:07:c8:1a:64:b1:5d:dd:c0:43:
eb:9d:82:8c:64:85:c1:1c:fb:fe:60:1f:bf:ef:30:20:39:94:
67:6c:ce:6a:fb:f0:2f:e1:cb:59:3b:a2:2c:a1:46:40:d7:68:
43:66:04:0f:3a:13:10:d4:75:e6:68:e1:5a:17:6d:bc:fb:4c:
2d:38:28:08:0a:31:f2:4e:57:5f:5a:05:b6:03:91:32:0e:1f:
d2:85:c6:bd:82:54:76:c8:ee:ed:c5:a1:36:ad:02:19:c9:64:
2f:1d:6a:c5:69:6d:a2:aa:7b:3c:dc:cd:cf:60:6f:a6:a8:f1:
3a:73:91:84:cf:f7:f1:db:c4:cf:5a:33:bb:e6:35:8d:86:e5:
d5:41:1f:2e:34:2a:38:cc:48:70:c3:b5:12:cf:ae:1b:10:21:
91:84:7c:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2yEQyeFzkoT50Q+k4fybk8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjQwMjE2MTMxNzU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjg1OTY1ZDVjZmUxNDdjMGIyNjg2NjQwNmNhOGFiZDRmNDgwODlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidjyIH6wYTBM4CVvsYHmLZcHPAlw
+JSNu+HJBB6/StUJj1xKXOWZOAb50RL1+ntq0l8WLGlDvkt4Ze4Us5FS4BbbR4Kg
QEpuBT4Gy/Nya05RjzXISY0mHWXzcGs/WjayzS88aQQHjXkySE76dxkYP5UdXOl8
JegbKRPMU56NdoEF6SBk4WjTYU5WDFTA2n/tZ4ks6Qyo/OdX/iz/lGy1Dnnwa+JF
Rl5/ycH+mlwWztjO2FYj+wnTtKA26bzA+h2hpgUx6XJa00v3WJNGIuMbV/gmRJvx
JCZx+VS5fE7r/iGonDOLfVmReoe2HjLHYsnaymCmvFZeVJxDGEbRF2QMtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLaFll1c/hR8CyaGZAbKir1PSAiaMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvdG9XV1hWei1GSHdMSm9aa0JzcUt2VTlJQ0pvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvITcMA0G
CSqGSIb3DQEBCwUAA4IBAQBWsTvXrBXm80jEpr8u/Y5HSAsCQH28CYdsZyq+MQF7
E/g5zGWcOPzObyL1vDgTVEJe2eiohVoJY8ZIfOlld2ZwNh4Dqacr3BzNRqWLMS9w
Gk81y9NPSIIit3GKOjCXm0OLT1wHyBpksV3dwEPrnYKMZIXBHPv+YB+/7zAgOZRn
bM5q+/Av4ctZO6IsoUZA12hDZgQPOhMQ1HXmaOFaF228+0wtOCgICjHyTldfWgW2
A5EyDh/Shca9glR2yO7txaE2rQIZyWQvHWrFaW2iqns83M3PYG+mqPE6c5GEz/fx
28TPWjO75jWNhuXVQR8uNCo4zEhww7USz64bECGRhHyI
-----END CERTIFICATE-----
Generated at Mon Jun 3 09:09:30 2024 by rpki-client on console-fra.rpki-client.org