Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/exI6i2Bs3-Wva_jrUVMV_9GuCk8.roa
File: exI6i2Bs3-Wva_jrUVMV_9GuCk8.roa (raw, json)
Hash identifier: 8m6wx6PZR3xNOJqmnEe9yQPRO8DWpk+++OElGAhUqbA=
Subject key identifier: 7B:12:3A:8B:60:6C:DF:E5:AF:6B:F8:EB:51:53:15:FF:D1:AE:0A:4F
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 018EA4CF2ECEC3F25C1E8C21D7A72A5F8089
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/exI6i2Bs3-Wva_jrUVMV_9GuCk8.roa
Signing time: Wed 03 Apr 2024 16:33:45 +0000
ROA not before: Wed 03 Apr 2024 16:33:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 85.209.8.0/24 maxlen: 24
92.246.76.0/24 maxlen: 24
185.68.22.0/24 maxlen: 24
185.196.117.0/24 maxlen: 24
213.226.124.0/24 maxlen: 24
213.226.125.0/24 maxlen: 24
213.226.126.0/24 maxlen: 24
213.226.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a4:cf:2e:ce:c3:f2:5c:1e:8c:21:d7:a7:2a:5f:80:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Apr 3 16:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b123a8b606cdfe5af6bf8eb515315ffd1ae0a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ca:97:48:04:28:61:1c:73:6c:87:e9:d4:9c:
4d:5f:92:01:af:81:77:02:01:4d:ba:44:19:a0:f4:
f4:9f:ad:96:e8:0d:1d:be:27:4a:26:10:31:73:3f:
c6:4d:6b:b6:8f:9b:f1:38:94:80:1a:09:43:97:33:
47:51:aa:9a:66:16:dc:64:e5:75:5b:2a:0d:6a:c6:
34:63:0d:f3:44:ff:8d:c3:86:5f:d7:66:98:18:be:
7a:81:a1:58:64:01:e5:aa:fc:e1:ed:ff:ab:ff:61:
e2:86:ae:bb:e2:5c:16:ba:66:27:9c:c1:c2:ed:61:
cc:0d:15:3b:88:97:4f:21:c5:b7:2e:fa:52:65:05:
3c:16:da:e6:e6:20:ae:04:1e:42:78:a9:80:29:85:
26:15:be:93:61:96:ef:d0:87:ce:6c:e8:1b:7c:54:
18:60:5f:21:62:30:44:21:fd:3a:96:9a:b8:9a:2e:
86:ed:d6:75:2c:42:59:f9:be:f8:c4:27:99:71:14:
0d:ea:89:6a:82:ff:e3:f9:ff:fa:3b:15:fe:03:54:
31:ed:c0:6f:1e:12:c5:e2:3a:8b:5e:90:ec:b5:6f:
b4:28:a2:cf:8d:7c:4f:6a:ec:46:af:c7:31:c4:67:
40:6f:e3:e3:0c:2a:7a:e5:c5:95:47:61:d0:e9:9d:
6b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:12:3A:8B:60:6C:DF:E5:AF:6B:F8:EB:51:53:15:FF:D1:AE:0A:4F
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/exI6i2Bs3-Wva_jrUVMV_9GuCk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.8.0/24
92.246.76.0/24
185.68.22.0/24
185.196.117.0/24
213.226.124.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:d1:ee:98:a3:ed:ab:b6:62:42:79:17:d4:a4:67:f5:ba:01:
66:a7:b8:b9:96:e0:a5:db:81:d5:77:af:2c:62:3d:77:a4:ee:
fe:c3:ab:41:5e:03:90:47:65:09:2c:77:94:14:88:b9:24:c7:
24:4d:2b:b3:fa:82:23:c2:c3:2d:71:6f:1b:9f:73:04:05:c8:
14:1d:76:e1:78:b0:17:b0:4e:3a:26:46:fa:84:93:48:11:11:
a1:12:08:ed:c2:02:6b:d7:e1:29:ba:df:0c:07:f5:73:b2:df:
b0:f8:2c:ce:bf:83:87:15:17:0e:c4:6e:61:22:b9:2c:b0:37:
67:80:2c:3f:31:4c:68:b8:72:bd:97:9d:04:59:e1:02:67:00:
c0:9d:84:f0:6c:4f:19:6e:f8:b4:22:69:50:40:ce:99:38:08:
23:38:7a:30:7b:a5:a7:81:e8:8a:8b:c5:d8:1c:66:26:53:72:
bf:b1:89:c9:0c:74:86:c7:25:6c:10:c5:47:d7:d9:63:b0:48:
4b:61:c2:95:59:ac:f0:5a:c1:50:4a:f1:1f:39:10:18:1e:bf:
e4:52:30:3e:5d:f3:35:64:05:a9:eb:27:7d:11:a7:5b:bd:dc:
62:af:a4:5f:7a:87:e5:70:36:a1:eb:71:64:83:08:04:d8:dc:
eb:db:6a:ab
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAY6kzy7Ow/JcHowh16cqX4CJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjQwNDAzMTYzMzQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjEyM2E4YjYwNmNkZmU1YWY2YmY4ZWI1MTUzMTVmZmQxYWUwYTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMqXSAQoYRxzbIfp1JxNX5IBr4F3
AgFNukQZoPT0n62W6A0dvidKJhAxcz/GTWu2j5vxOJSAGglDlzNHUaqaZhbcZOV1
WyoNasY0Yw3zRP+Nw4Zf12aYGL56gaFYZAHlqvzh7f+r/2Hihq674lwWumYnnMHC
7WHMDRU7iJdPIcW3LvpSZQU8Ftrm5iCuBB5CeKmAKYUmFb6TYZbv0IfObOgbfFQY
YF8hYjBEIf06lpq4mi6G7dZ1LEJZ+b74xCeZcRQN6olqgv/j+f/6OxX+A1Qx7cBv
HhLF4jqLXpDstW+0KKLPjXxPauxGr8cxxGdAb+PjDCp65cWVR2HQ6Z1rhQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFHsSOotgbN/lr2v461FTFf/RrgpPMB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvZXhJNmkyQnMzLVd2YV9qclVWTVZfOUd1Q2s4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVdEIAwQA
XPZMAwQAuUQWAwQAucR1AwQC1eJ8MA0GCSqGSIb3DQEBCwUAA4IBAQCk0e6Yo+2r
tmJCeRfUpGf1ugFmp7i5luCl24HVd68sYj13pO7+w6tBXgOQR2UJLHeUFIi5JMck
TSuz+oIjwsMtcW8bn3MEBcgUHXbheLAXsE46Jkb6hJNIERGhEgjtwgJr1+Eput8M
B/Vzst+w+CzOv4OHFRcOxG5hIrkssDdngCw/MUxouHK9l50EWeECZwDAnYTwbE8Z
bvi0ImlQQM6ZOAgjOHowe6WngeiKi8XYHGYmU3K/sYnJDHSGxyVsEMVH19ljsEhL
YcKVWazwWsFQSvEfORAYHr/kUjA+XfM1ZAWp6yd9Eadbvdxir6RfeoflcDah63Fk
gwgE2Nzr22qr
-----END CERTIFICATE-----
Generated at Sun May 19 20:39:37 2024 by rpki-client on console-fra.rpki-client.org