Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/ikvKT3esT1EJgVv8ywml9AxVuVI.roa
File: ikvKT3esT1EJgVv8ywml9AxVuVI.roa (raw, json)
Hash identifier: sbn7OO0ltLnCIRA8+xyqw/wgoj/+f7Il57p4cUex4Xc=
Subject key identifier: 8A:4B:CA:4F:77:AC:4F:51:09:81:5B:FC:CB:09:A5:F4:0C:55:B9:52
Certificate issuer: /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial: 018CC2DAB23E1B936EBA49EBFB560F74CEF3
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/ikvKT3esT1EJgVv8ywml9AxVuVI.roa
Signing time: Mon 01 Jan 2024 02:29:21 +0000
ROA not before: Mon 01 Jan 2024 02:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43885
IP address blocks: 188.215.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b2:3e:1b:93:6e:ba:49:eb:fb:56:0f:74:ce:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Validity
Not Before: Jan 1 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a4bca4f77ac4f5109815bfccb09a5f40c55b952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:6c:f5:f9:af:b5:c5:58:89:5f:e4:cf:fd:
3f:9c:b3:96:cc:1e:9a:47:7f:22:d3:67:59:1a:91:
89:42:78:b9:f3:08:c7:e2:04:3a:30:09:36:f1:07:
32:9a:fd:32:83:3d:6c:06:97:6d:5f:37:d4:83:0d:
9e:93:45:d8:ef:8b:9a:1f:5e:af:ad:cc:3d:d8:f2:
8e:0c:d2:ed:14:5b:f7:1d:e5:65:8d:1b:65:55:48:
f6:e2:5d:40:91:76:f1:51:91:5c:c3:5b:f0:1d:ce:
60:d2:82:92:d3:33:fb:6f:dd:f6:27:df:b5:2b:4f:
9d:80:56:56:a0:e5:54:e3:c7:71:ca:8e:74:6b:11:
4c:04:53:61:70:55:e1:24:db:47:30:81:c8:d2:e8:
51:59:c4:3d:91:b2:ad:92:5f:e6:58:ce:79:e8:be:
12:4f:b5:8a:a0:1b:07:28:78:5e:b9:6d:27:4d:26:
7c:a1:5e:1e:00:a5:ce:ac:ca:e3:ce:63:d0:3a:f9:
54:6b:c7:da:68:18:74:9a:c9:ec:e3:f7:df:22:75:
65:57:fe:5b:00:b4:0f:56:47:bc:40:1d:29:ec:e3:
b0:c9:65:c0:ca:ce:b7:77:00:e1:bc:d6:54:6e:80:
9b:31:74:60:5e:14:8a:0a:b9:77:68:6a:3f:7e:e1:
61:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4B:CA:4F:77:AC:4F:51:09:81:5B:FC:CB:09:A5:F4:0C:55:B9:52
X509v3 Authority Key Identifier:
keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/ikvKT3esT1EJgVv8ywml9AxVuVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.215.84.0/24
Signature Algorithm: sha256WithRSAEncryption
31:42:63:bd:92:e4:78:f6:db:fe:43:77:20:8e:84:6c:b4:00:
9b:bf:54:2e:79:34:7f:25:65:c3:9b:12:64:92:64:61:66:15:
74:e9:9f:5f:88:5b:84:80:66:e4:13:c6:ea:6b:58:a4:cd:d0:
9d:e3:d6:3d:9e:5e:0a:f3:be:82:12:49:d3:f3:ad:46:60:0b:
cd:f3:71:92:47:16:90:52:c0:cf:f2:f4:fd:f7:b5:19:d2:75:
a9:1c:b8:72:c9:dc:86:4a:b5:0f:91:fb:a9:cb:84:02:44:a5:
40:43:ba:ca:1b:2c:47:b7:92:51:c4:18:be:5c:cf:cc:3e:9c:
7d:f9:3d:62:81:85:47:53:14:da:75:52:1d:75:41:34:51:67:
e6:32:df:c8:51:aa:0b:d1:62:69:a9:ca:9c:3c:48:d8:25:17:
d5:73:fa:2a:87:50:89:15:a2:d6:eb:d0:e4:96:0b:ae:b6:4d:
2d:cb:53:2c:56:57:a0:31:e2:6d:90:ca:e3:06:9d:ee:0b:d4:
14:d4:81:0f:0d:a6:2b:a4:55:1b:f0:c8:6f:8e:2e:84:c9:69:
88:31:8c:3a:a0:6b:76:42:28:4f:22:f7:9c:ea:be:1d:ae:91:
01:a2:03:73:ca:b9:a8:8c:23:59:07:46:fc:22:e5:41:6d:2f:
62:ff:f6:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2rI+G5Nuuknr+1YPdM7zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4YzhhYTE4NzMwZjRhODNlMjg1MmM1NjkyNTUxYWJiNWIx
ZWU3ZWEwHhcNMjQwMTAxMDIyOTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTRiY2E0Zjc3YWM0ZjUxMDk4MTViZmNjYjA5YTVmNDBjNTViOTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE9s9fmvtcVYiV/kz/0/nLOWzB6a
R38i02dZGpGJQni58wjH4gQ6MAk28Qcymv0ygz1sBpdtXzfUgw2ek0XY74uaH16v
rcw92PKODNLtFFv3HeVljRtlVUj24l1AkXbxUZFcw1vwHc5g0oKS0zP7b932J9+1
K0+dgFZWoOVU48dxyo50axFMBFNhcFXhJNtHMIHI0uhRWcQ9kbKtkl/mWM556L4S
T7WKoBsHKHheuW0nTSZ8oV4eAKXOrMrjzmPQOvlUa8faaBh0msns4/ffInVlV/5b
ALQPVke8QB0p7OOwyWXAys63dwDhvNZUboCbMXRgXhSKCrl3aGo/fuFhIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIpLyk93rE9RCYFb/MsJpfQMVblSMB8GA1UdIwQY
MBaAFLjIqhhzD0qD4oUsVpJVGrtbHufqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU1pcUdITVBTb1BpaFN4V2tsVWF1MXNlNS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hOTQ5OTItNTY2Yi00YjZmLWE2ODkt
YTU3NjA0YTNmNmJiLzEvaWt2S1QzZXNUMUVKZ1Z2OHl3bWw5QXhWdVZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9hOTQ5OTItNTY2Yi00YjZmLWE2ODktYTU3NjA0YTNmNmJi
LzEvdU1pcUdITVBTb1BpaFN4V2tsVWF1MXNlNS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNdUMA0G
CSqGSIb3DQEBCwUAA4IBAQAxQmO9kuR49tv+Q3cgjoRstACbv1QueTR/JWXDmxJk
kmRhZhV06Z9fiFuEgGbkE8bqa1ikzdCd49Y9nl4K876CEknT861GYAvN83GSRxaQ
UsDP8vT997UZ0nWpHLhyydyGSrUPkfupy4QCRKVAQ7rKGyxHt5JRxBi+XM/MPpx9
+T1igYVHUxTadVIddUE0UWfmMt/IUaoL0WJpqcqcPEjYJRfVc/oqh1CJFaLW69Dk
lguutk0ty1MsVlegMeJtkMrjBp3uC9QU1IEPDaYrpFUb8Mhvji6EyWmIMYw6oGt2
QihPIvec6r4drpEBogNzyrmojCNZB0b8IuVBbS9i//ZH
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:45:14 2024 by rpki-client on console-ams.rpki-client.org