Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/i8Mwi0GK1eRkxR3JO_mEXIip19w.roa
File: i8Mwi0GK1eRkxR3JO_mEXIip19w.roa (raw, json)
Hash identifier: jIgFHPikOCv4OzsrWTEdZ5MA9K+zVQSu5RFE24idWLs=
Subject key identifier: 8B:C3:30:8B:41:8A:D5:E4:64:C5:1D:C9:3B:F9:84:5C:88:A9:D7:DC
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018D2C2EAA8F19D011C865C6635BAD47E6C9
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/i8Mwi0GK1eRkxR3JO_mEXIip19w.roa
Signing time: Sun 21 Jan 2024 13:21:11 +0000
ROA not before: Sun 21 Jan 2024 13:21:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39521
IP address blocks: 104.238.27.0/24 maxlen: 24
216.173.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:2c:2e:aa:8f:19:d0:11:c8:65:c6:63:5b:ad:47:e6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 21 13:21:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8bc3308b418ad5e464c51dc93bf9845c88a9d7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d8:2e:68:e9:ad:4a:cc:b2:d9:77:4f:37:ac:
6f:6a:c0:19:86:a6:1f:ac:c2:57:c5:7b:8b:f4:3d:
2f:6b:ca:88:01:b5:a5:5e:46:6e:5f:41:f3:02:7f:
2e:9c:5b:de:55:4b:79:fa:f8:78:e9:ff:c0:a8:ce:
99:ea:2f:67:85:63:f9:a9:ea:a5:f9:0a:42:2a:18:
b1:45:61:4a:50:92:5d:19:21:1a:42:74:51:96:1b:
2d:0b:ea:d9:a4:6b:5f:a2:52:8e:51:2b:a2:9b:0c:
af:81:be:27:52:81:27:0b:7e:86:39:64:f4:59:12:
f2:19:9f:5b:7d:02:bf:dd:c3:aa:6f:9b:38:ca:52:
8b:fd:f0:00:71:02:5d:68:6e:3d:b3:46:20:bf:89:
98:6c:2e:0b:60:6d:ad:ba:20:b9:cc:e8:99:cb:81:
84:c2:2d:ad:ac:fa:8a:64:09:74:25:62:39:d3:71:
5b:b1:ff:f5:9a:bf:f0:2a:36:a9:63:ad:f3:9b:a1:
51:10:77:8a:f5:b3:a3:da:c7:46:95:d9:8b:f4:f9:
81:69:05:a8:a6:ea:b0:f0:f9:04:fb:65:c4:00:9c:
dc:40:35:ac:95:e1:32:9b:7b:e8:5d:d5:7a:53:27:
ef:98:99:e8:a0:be:81:9b:ec:5d:4f:e9:80:81:c8:
c5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C3:30:8B:41:8A:D5:E4:64:C5:1D:C9:3B:F9:84:5C:88:A9:D7:DC
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/i8Mwi0GK1eRkxR3JO_mEXIip19w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.238.27.0/24
216.173.68.0/22
Signature Algorithm: sha256WithRSAEncryption
46:2e:ad:08:5a:05:68:8d:46:9b:d8:d8:ae:97:cc:c4:6c:5b:
cc:b9:ce:92:da:6d:f4:cf:a2:f1:fe:97:4e:ba:a4:93:bd:94:
29:bd:d6:6d:8a:99:dc:18:de:ee:dd:d8:e1:b7:29:09:58:78:
6e:58:49:cb:84:04:a6:f5:8d:b5:4c:95:db:39:c1:f4:1d:a6:
b9:24:78:46:70:ea:40:a5:13:ae:7e:37:62:2e:27:e5:1f:61:
77:82:db:e2:a6:3b:2e:a6:34:95:ef:87:19:e8:86:b7:b3:85:
05:5d:da:6c:e8:a0:ad:1a:0a:a6:a1:84:c1:16:4c:6f:e7:85:
1d:58:cd:ea:56:e0:9a:fe:f2:fc:d2:9e:6b:17:a7:de:a4:35:
60:6d:8c:04:42:51:7c:52:73:b2:d9:ef:0f:1a:e7:54:56:ea:
60:09:19:6a:1c:06:b2:3b:3b:f6:fd:2f:d3:3f:9c:14:46:9d:
ad:72:9b:ef:ee:46:59:5c:b3:fe:de:18:cf:b2:16:be:ac:2a:
ea:3d:2d:75:29:8b:9a:c9:78:1c:ee:66:56:89:0c:cd:1d:8f:
67:cc:41:2e:28:af:d7:b2:5b:95:2a:ed:82:c4:df:4f:5f:f5:
3f:4e:56:a7:45:95:43:c4:f6:eb:e9:8b:ca:33:f7:b6:0a:74:
9c:1d:bf:70
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY0sLqqPGdARyGXGY1utR+bJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjQwMTIxMTMyMTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YmMzMzA4YjQxOGFkNWU0NjRjNTFkYzkzYmY5ODQ1Yzg4YTlkN2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNguaOmtSsyy2XdPN6xvasAZhqYf
rMJXxXuL9D0va8qIAbWlXkZuX0HzAn8unFveVUt5+vh46f/AqM6Z6i9nhWP5qeql
+QpCKhixRWFKUJJdGSEaQnRRlhstC+rZpGtfolKOUSuimwyvgb4nUoEnC36GOWT0
WRLyGZ9bfQK/3cOqb5s4ylKL/fAAcQJdaG49s0Ygv4mYbC4LYG2tuiC5zOiZy4GE
wi2trPqKZAl0JWI503Fbsf/1mr/wKjapY63zm6FREHeK9bOj2sdGldmL9PmBaQWo
puqw8PkE+2XEAJzcQDWsleEym3voXdV6UyfvmJnooL6Bm+xdT+mAgcjFvQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIvDMItBitXkZMUdyTv5hFyIqdfcMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvaThNd2kwR0sxZVJreFIzSk9fbUVYSWlwMTl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaO4bAwQC
2K1EMA0GCSqGSIb3DQEBCwUAA4IBAQBGLq0IWgVojUab2Niul8zEbFvMuc6S2m30
z6Lx/pdOuqSTvZQpvdZtipncGN7u3djhtykJWHhuWEnLhASm9Y21TJXbOcH0Haa5
JHhGcOpApROufjdiLiflH2F3gtvipjsupjSV74cZ6Ia3s4UFXdps6KCtGgqmoYTB
Fkxv54UdWM3qVuCa/vL80p5rF6fepDVgbYwEQlF8UnOy2e8PGudUVupgCRlqHAay
Ozv2/S/TP5wURp2tcpvv7kZZXLP+3hjPsha+rCrqPS11KYuayXgc7mZWiQzNHY9n
zEEuKK/XsluVKu2CxN9PX/U/TlanRZVDxPbr6YvKM/e2CnScHb9w
-----END CERTIFICATE-----
Generated at Sun Apr 28 10:22:37 2024 by rpki-client on console-ams.rpki-client.org