Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/Z5jxzIIOZ9_JE2zG-X3d9uFqJYw.roa
File: Z5jxzIIOZ9_JE2zG-X3d9uFqJYw.roa (raw, json)
Hash identifier: 6JumyvHtxz7XhF3DUB0rtc3A64gaOUqQ9LZX6niTs3k=
Subject key identifier: 67:98:F1:CC:82:0E:67:DF:C9:13:6C:C6:F9:7D:DD:F6:E1:6A:25:8C
Certificate issuer: /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial: 018D18DC0F8EFC4015F62D985DE3AF26D6C5
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/Z5jxzIIOZ9_JE2zG-X3d9uFqJYw.roa
Signing time: Wed 17 Jan 2024 19:18:11 +0000
ROA not before: Wed 17 Jan 2024 19:18:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42689
IP address blocks: 188.215.80.0/24 maxlen: 24
188.215.81.0/24 maxlen: 24
188.215.82.0/24 maxlen: 24
188.215.83.0/24 maxlen: 24
188.215.85.0/24 maxlen: 24
188.215.86.0/24 maxlen: 24
188.215.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:18:dc:0f:8e:fc:40:15:f6:2d:98:5d:e3:af:26:d6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Validity
Not Before: Jan 17 19:18:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6798f1cc820e67dfc9136cc6f97dddf6e16a258c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:aa:21:7b:c2:56:ce:76:13:8b:ec:d5:92:11:
40:78:5a:22:35:43:a4:fc:8f:96:55:b7:7a:41:fe:
79:cd:bb:41:d2:99:ed:54:75:8a:f4:c7:6f:45:4e:
85:c5:ae:db:04:fc:a7:00:35:57:1e:04:67:3b:4f:
7f:91:8d:2b:ca:ac:ea:51:92:84:3e:aa:ed:50:71:
c0:2e:26:5c:65:3f:b6:9e:df:1e:4c:55:45:ab:a5:
2f:83:12:c6:78:55:dd:83:f7:82:38:09:29:f5:57:
ab:c3:4b:b0:38:4c:9e:c3:01:70:69:7a:e3:71:99:
d3:a7:55:f2:a6:f4:c9:e5:ac:80:7b:09:d4:f9:a7:
e8:aa:25:c6:96:df:c1:2e:56:4e:5d:b0:8d:4c:37:
76:36:87:6b:48:b4:f2:d2:be:c9:4c:78:65:f1:ce:
39:2b:cd:92:a5:93:e3:08:85:a5:0a:a9:e9:5b:e0:
2d:59:1e:c2:98:d6:52:93:15:24:0c:b8:4d:b3:a2:
5f:ce:09:cc:a0:90:8d:62:53:40:9a:8f:77:d6:88:
e0:48:ec:ca:d7:50:8e:15:e2:8c:ca:d5:18:05:3a:
86:3c:24:4b:55:a0:ce:01:81:12:1c:d9:ea:07:8e:
ed:b0:52:83:e3:77:62:b8:3b:a2:14:2b:1e:2d:95:
7f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:98:F1:CC:82:0E:67:DF:C9:13:6C:C6:F9:7D:DD:F6:E1:6A:25:8C
X509v3 Authority Key Identifier:
keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/Z5jxzIIOZ9_JE2zG-X3d9uFqJYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.215.80.0/22
188.215.85.0-188.215.87.255
Signature Algorithm: sha256WithRSAEncryption
a4:d3:90:af:4b:c4:95:4b:5a:c2:38:ff:61:16:76:45:0b:b4:
a7:e9:cc:96:b4:b2:25:87:b3:40:3a:8d:1f:7c:f2:ec:fe:94:
a1:66:b2:4d:de:1d:f0:78:53:12:ab:25:43:6e:aa:02:ee:8a:
21:71:7f:40:b3:e3:9b:d6:09:8a:66:c2:d8:67:55:32:ad:13:
d4:7a:cc:ce:00:e4:10:2c:97:2b:de:da:17:1b:77:d4:ee:6b:
21:7b:b8:0c:4a:07:8e:56:5f:65:47:3f:14:a3:75:7a:58:79:
67:05:5f:f1:fc:fe:a1:2b:82:70:cb:3f:10:1a:9b:f1:58:cf:
e5:c1:7f:4e:c5:74:1c:19:75:db:7f:59:d5:95:f4:0a:29:9d:
04:b3:89:b8:60:b4:78:23:c6:20:f8:ad:ad:13:32:0c:50:91:
28:be:fa:34:a6:36:cc:2c:75:ef:59:91:05:8b:14:c6:45:68:
b5:7b:98:35:aa:b6:3f:0d:64:b9:45:9b:3a:67:4c:d6:07:c2:
aa:bf:6f:2c:9f:2f:7d:49:e2:60:c7:c2:af:4b:4c:e7:67:6a:
7d:f6:dc:dc:c6:7c:8c:37:84:a4:e1:6a:76:c1:67:a2:08:85:
51:71:e7:74:92:35:8b:3d:ea:ed:c0:68:26:25:9f:ac:1f:b4:
1c:13:19:37
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAY0Y3A+O/EAV9i2YXeOvJtbFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4YzhhYTE4NzMwZjRhODNlMjg1MmM1NjkyNTUxYWJiNWIx
ZWU3ZWEwHhcNMjQwMTE3MTkxODExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Nzk4ZjFjYzgyMGU2N2RmYzkxMzZjYzZmOTdkZGRmNmUxNmEyNThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqohe8JWznYTi+zVkhFAeFoiNUOk
/I+WVbd6Qf55zbtB0pntVHWK9MdvRU6Fxa7bBPynADVXHgRnO09/kY0ryqzqUZKE
PqrtUHHALiZcZT+2nt8eTFVFq6UvgxLGeFXdg/eCOAkp9Verw0uwOEyewwFwaXrj
cZnTp1XypvTJ5ayAewnU+afoqiXGlt/BLlZOXbCNTDd2NodrSLTy0r7JTHhl8c45
K82SpZPjCIWlCqnpW+AtWR7CmNZSkxUkDLhNs6JfzgnMoJCNYlNAmo931ojgSOzK
11COFeKMytUYBTqGPCRLVaDOAYESHNnqB47tsFKD43diuDuiFCseLZV/gQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFGeY8cyCDmffyRNsxvl93fbhaiWMMB8GA1UdIwQY
MBaAFLjIqhhzD0qD4oUsVpJVGrtbHufqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU1pcUdITVBTb1BpaFN4V2tsVWF1MXNlNS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hOTQ5OTItNTY2Yi00YjZmLWE2ODkt
YTU3NjA0YTNmNmJiLzEvWjVqeHpJSU9aOV9KRTJ6Ry1YM2Q5dUZxSll3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9hOTQ5OTItNTY2Yi00YjZmLWE2ODktYTU3NjA0YTNmNmJi
LzEvdU1pcUdITVBTb1BpaFN4V2tsVWF1MXNlNS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCvNdQMAwD
BAC811UDBAO811AwDQYJKoZIhvcNAQELBQADggEBAKTTkK9LxJVLWsI4/2EWdkUL
tKfpzJa0siWHs0A6jR988uz+lKFmsk3eHfB4UxKrJUNuqgLuiiFxf0Cz45vWCYpm
wthnVTKtE9R6zM4A5BAslyve2hcbd9TuayF7uAxKB45WX2VHPxSjdXpYeWcFX/H8
/qErgnDLPxAam/FYz+XBf07FdBwZddt/WdWV9AopnQSzibhgtHgjxiD4ra0TMgxQ
kSi++jSmNswsde9ZkQWLFMZFaLV7mDWqtj8NZLlFmzpnTNYHwqq/byyfL31J4mDH
wq9LTOdnan323NzGfIw3hKThanbBZ6IIhVFx53SSNYs96u3AaCYln6wftBwTGTc=
-----END CERTIFICATE-----
Generated at Sat Jun 1 16:49:38 2024 by rpki-client on console-ams.rpki-client.org