Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/I_EG02VU5_D7_nD4RuJobx3eHNU.roa
File: I_EG02VU5_D7_nD4RuJobx3eHNU.roa (raw, json)
Hash identifier: ynR7UTXRp8pBX7UAXt1swZLXr/m6pHhZreiih5zqgR4=
Subject key identifier: 23:F1:06:D3:65:54:E7:F0:FB:FE:70:F8:46:E2:68:6F:1D:DE:1C:D5
Certificate issuer: /CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Certificate serial: 018CC5DCC8170AD9A5ACB49F78FBAC7C7DC8
Authority key identifier: 7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/I_EG02VU5_D7_nD4RuJobx3eHNU.roa
Signing time: Mon 01 Jan 2024 16:30:29 +0000
ROA not before: Mon 01 Jan 2024 16:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60501
IP address blocks: 185.187.62.0/24 maxlen: 24
193.43.208.0/24 maxlen: 24
194.156.180.0/22 maxlen: 22
185.30.64.0/22 maxlen: 22
185.109.24.0/22 maxlen: 22
185.109.24.0/24 maxlen: 24
185.109.25.0/24 maxlen: 24
185.109.26.0/24 maxlen: 24
185.109.27.0/24 maxlen: 24
185.253.53.0/24 maxlen: 24
2a00:ae20::/32 maxlen: 32
2a06:4dc0::/29 maxlen: 29
2a04:f440::/29 maxlen: 29
2a10:b740::/29 maxlen: 29
2a0d:cc0::/29 maxlen: 29
2a0f:ccc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:c8:17:0a:d9:a5:ac:b4:9f:78:fb:ac:7c:7d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Validity
Not Before: Jan 1 16:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23f106d36554e7f0fbfe70f846e2686f1dde1cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c5:92:c5:a4:b9:e0:96:53:da:b0:fe:79:39:
60:2d:fe:c7:f5:4a:e8:b4:a8:77:f8:00:ce:a4:c9:
b2:01:84:43:f1:45:f0:fe:e0:59:69:9b:6a:5d:8e:
ad:5a:6e:e4:93:47:dd:68:1c:15:72:95:05:83:95:
77:49:de:b8:bf:10:f2:6c:ee:71:20:96:fe:23:ce:
f8:84:b6:9b:cd:1c:9e:f1:c3:21:98:86:cc:5a:f2:
32:ab:3e:50:e9:3f:1d:cb:ba:e0:ab:13:48:bc:e3:
cb:06:a7:a6:02:09:0c:82:67:e9:6f:3d:71:52:10:
a6:6a:78:5d:63:36:d4:d1:1a:80:33:2a:7a:0e:a4:
18:d1:96:e9:9f:95:a2:7a:23:a7:47:6c:09:2e:af:
55:dd:13:8c:09:fc:14:b9:67:c5:89:7c:ce:f3:c4:
d9:4b:78:84:3a:a9:a2:da:ac:65:f5:54:54:53:92:
f1:40:2c:6c:15:64:74:87:2f:5a:98:fb:8e:ae:2a:
e1:67:f8:75:3f:38:ab:0a:a8:9a:53:00:74:14:d2:
65:f2:cf:28:22:f5:d1:e4:17:92:78:c1:c1:f6:ee:
53:7a:32:59:50:51:f2:be:81:39:7e:d3:d2:32:62:
24:ec:92:e2:b3:9f:f1:b2:95:1f:d1:ef:c0:f6:b8:
45:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F1:06:D3:65:54:E7:F0:FB:FE:70:F8:46:E2:68:6F:1D:DE:1C:D5
X509v3 Authority Key Identifier:
keyid:7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/I_EG02VU5_D7_nD4RuJobx3eHNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.64.0/22
185.109.24.0/22
185.187.62.0/24
185.253.53.0/24
193.43.208.0/24
194.156.180.0/22
IPv6:
2a00:ae20::/32
2a04:f440::/29
2a06:4dc0::/29
2a0d:cc0::/29
2a0f:ccc0::/29
2a10:b740::/29
Signature Algorithm: sha256WithRSAEncryption
89:8b:0f:81:5c:ed:50:bf:df:b0:4e:df:ab:02:d9:49:23:75:
30:9c:94:17:a1:39:34:59:36:20:f7:65:e0:71:00:37:20:16:
2f:bf:be:a4:56:e6:36:b8:81:cc:1c:07:e0:27:ae:2a:6a:cf:
0c:08:ef:b8:60:82:7a:95:eb:fc:cb:46:46:d3:d1:77:b1:56:
96:fc:36:72:69:b5:84:31:97:a8:8f:5c:0c:68:f1:28:12:c8:
6f:cf:e9:50:c3:20:b4:83:04:e7:84:02:a7:a0:43:86:cf:c2:
42:07:1e:a3:04:5d:5a:03:06:bc:37:4a:16:e9:21:69:23:29:
5a:96:a0:c4:fd:54:46:f2:7b:b6:e9:31:db:b4:ca:64:b0:6d:
1c:50:77:a1:99:58:ed:11:29:72:dd:83:8e:54:ce:7e:72:21:
1e:b6:d3:ff:dd:4c:66:66:4d:c4:61:b2:13:25:33:e7:60:7c:
f7:e4:d0:f6:be:82:3b:b9:6a:bc:29:64:08:61:6b:27:41:75:
03:c2:1b:fd:29:b8:eb:04:a1:c6:fc:05:98:ca:0c:c6:02:38:
48:0d:c4:ee:cf:a9:48:16:89:49:58:3c:06:41:c5:52:a3:19:
28:25:28:89:f1:44:35:69:02:43:4b:3e:ba:a9:e4:82:85:b7:
50:0d:28:be
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAYzF3MgXCtmlrLSfePusfH3IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMTQ4ZGI0MmY5MGU5NjQ0N2JkN2Y2M2VkZDhhN2NjYmVl
YWE4NDIwHhcNMjQwMTAxMTYzMDI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2YxMDZkMzY1NTRlN2YwZmJmZTcwZjg0NmUyNjg2ZjFkZGUxY2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8WSxaS54JZT2rD+eTlgLf7H9Uro
tKh3+ADOpMmyAYRD8UXw/uBZaZtqXY6tWm7kk0fdaBwVcpUFg5V3Sd64vxDybO5x
IJb+I874hLabzRye8cMhmIbMWvIyqz5Q6T8dy7rgqxNIvOPLBqemAgkMgmfpbz1x
UhCmanhdYzbU0RqAMyp6DqQY0Zbpn5WieiOnR2wJLq9V3ROMCfwUuWfFiXzO88TZ
S3iEOqmi2qxl9VRUU5LxQCxsFWR0hy9amPuOrirhZ/h1PzirCqiaUwB0FNJl8s8o
IvXR5BeSeMHB9u5TejJZUFHyvoE5ftPSMmIk7JLis5/xspUf0e/A9rhFQQIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFCPxBtNlVOfw+/5w+EbiaG8d3hzVMB8GA1UdIwQY
MBaAFHsUjbQvkOlkR71/Y+3Yp8y+6qhCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXhTTnRDLVE2V1JIdlg5ajdkaW56TDdxcUVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mMjQ4ODUtYTRkYi00ZmExLWE3MmQt
ODZkNmMxMzA1MzU3LzEvSV9FRzAyVlU1X0Q3X25ENFJ1Sm9ieDNlSE5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9mMjQ4ODUtYTRkYi00ZmExLWE3MmQtODZkNmMxMzA1MzU3
LzEvZXhTTnRDLVE2V1JIdlg5ajdkaW56TDdxcUVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjAqBAIAATAkAwQCuR5AAwQC
uW0YAwQAubs+AwQAuf01AwQAwSvQAwQCwpy0MDAEAgACMCoDBQAqAK4gAwUDKgT0
QAMFAyoGTcADBQMqDQzAAwUDKg/MwAMFAyoQt0AwDQYJKoZIhvcNAQELBQADggEB
AImLD4Fc7VC/37BO36sC2UkjdTCclBehOTRZNiD3ZeBxADcgFi+/vqRW5ja4gcwc
B+AnripqzwwI77hggnqV6/zLRkbT0XexVpb8NnJptYQxl6iPXAxo8SgSyG/P6VDD
ILSDBOeEAqegQ4bPwkIHHqMEXVoDBrw3ShbpIWkjKVqWoMT9VEbye7bpMdu0ymSw
bRxQd6GZWO0RKXLdg45Uzn5yIR620//dTGZmTcRhshMlM+dgfPfk0Pa+gju5arwp
ZAhhaydBdQPCG/0puOsEocb8BZjKDMYCOEgNxO7PqUgWiUlYPAZBxVKjGSglKInx
RDVpAkNLPrqp5IKFt1ANKL4=
-----END CERTIFICATE-----
Generated at Sat Jun 1 23:02:56 2024 by rpki-client on console-fra.rpki-client.org