Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/WXrP63Z3Q5v1yAaxohfjIPF13Yg.roa
File: WXrP63Z3Q5v1yAaxohfjIPF13Yg.roa (raw, json)
Hash identifier: 1TjSP+VCCqu1PKqU8E4tnZzTvU7+3jEjTwAN0nuvCKM=
Subject key identifier: 59:7A:CF:EB:76:77:43:9B:F5:C8:06:B1:A2:17:E3:20:F1:75:DD:88
Certificate issuer: /CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79
Certificate serial: 018FDDA3C22D32C048541EE19DBF3FE8EA1F
Authority key identifier: 8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/WXrP63Z3Q5v1yAaxohfjIPF13Yg.roa
Signing time: Mon 03 Jun 2024 10:27:27 +0000
ROA not before: Mon 03 Jun 2024 10:27:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198381
IP address blocks: 185.31.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 07:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:dd:a3:c2:2d:32:c0:48:54:1e:e1:9d:bf:3f:e8:ea:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79
Validity
Not Before: Jun 3 10:27:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=597acfeb7677439bf5c806b1a217e320f175dd88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:50:dd:5c:24:6b:01:6e:cc:62:b9:c6:37:4b:
f1:38:3b:b1:ef:c1:46:7b:88:df:7d:1f:0e:6d:b2:
0b:49:8d:65:00:0b:a4:e9:eb:be:8e:33:76:05:13:
61:af:73:09:06:49:2f:78:2d:e8:b6:e3:40:e0:0d:
e3:ae:42:09:00:7d:2d:99:fc:d7:4f:b6:ff:0e:f1:
d1:98:0e:9f:8e:ce:ec:a8:b3:30:97:89:f3:90:1e:
1e:f9:9f:f0:0a:a6:2d:58:7e:df:9a:65:ba:e7:e6:
8d:e5:66:8e:96:e2:c0:04:6e:4c:f0:a1:46:f8:de:
dc:cf:56:1a:1d:31:2a:2e:12:95:26:b5:50:a9:50:
55:68:c4:1d:75:e1:09:e6:b1:05:34:d9:d5:82:56:
d6:2d:bb:60:b8:84:92:b1:80:f7:59:07:f3:15:ec:
fe:4a:1b:2f:38:d3:ec:87:d1:3e:4f:7a:2a:d5:63:
ad:48:b0:a0:4d:05:5b:35:ae:6a:7f:17:8c:7b:cb:
b1:2d:fc:18:3a:d3:e7:d5:2a:e6:9e:8e:3a:b7:88:
3a:20:cf:70:35:77:ff:96:32:cd:1a:fd:9e:15:09:
f6:5d:bc:6c:ae:88:6e:c3:43:c9:4a:f6:ff:3c:1a:
80:ba:44:96:48:dd:3d:71:ce:be:7a:d4:dd:c8:b4:
a3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7A:CF:EB:76:77:43:9B:F5:C8:06:B1:A2:17:E3:20:F1:75:DD:88
X509v3 Authority Key Identifier:
keyid:8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/WXrP63Z3Q5v1yAaxohfjIPF13Yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.188.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:e4:3d:fb:df:0c:6f:c4:a2:2b:4d:ed:36:ee:27:1b:c7:6d:
4a:7f:db:84:55:fe:5f:f2:6c:a6:4e:8f:da:3e:6a:b8:03:a7:
b6:59:00:17:40:45:55:d9:f1:ac:5f:a0:8c:1b:da:0c:e2:2c:
fb:25:3e:cc:29:60:1a:88:c1:8c:a4:7f:a4:68:e0:86:7e:62:
98:1d:df:0b:a1:2e:87:15:9e:50:42:62:5a:9c:2e:e0:d6:4c:
82:d9:69:8b:16:46:95:87:ec:27:dc:6d:d6:f7:fc:bd:f6:cf:
fa:b8:f1:b8:38:68:3f:11:08:4c:c5:81:2d:f9:2b:f5:55:e8:
68:21:83:3e:c3:4f:d0:99:4e:66:05:dc:5f:21:e2:8a:28:cc:
89:3e:5b:18:00:17:b9:cc:ab:a0:eb:88:35:69:12:d7:92:19:
a6:a3:fd:dd:0e:9d:70:61:fd:6b:e9:81:68:72:5c:b6:fd:ca:
46:59:ab:3d:80:ac:f2:3b:d8:6c:da:d2:e3:1f:68:e1:bc:7b:
56:bc:c1:55:c4:2f:16:35:c9:59:46:dd:a7:32:56:36:fa:d3:
73:db:83:44:19:89:98:33:0f:c3:9b:91:18:2e:39:ac:db:c5:
c6:0e:61:b1:68:8d:c9:30:21:1a:65:da:5f:bf:09:32:62:08:
be:57:7c:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY/do8ItMsBIVB7hnb8/6OofMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZmE3ZTBiMzRhNDc2MjIyY2IxZjViYzBjMDVlYzEzYmJi
MTRhNzkwHhcNMjQwNjAzMTAyNzI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTdhY2ZlYjc2Nzc0MzliZjVjODA2YjFhMjE3ZTMyMGYxNzVkZDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1DdXCRrAW7MYrnGN0vxODux78FG
e4jffR8ObbILSY1lAAuk6eu+jjN2BRNhr3MJBkkveC3otuNA4A3jrkIJAH0tmfzX
T7b/DvHRmA6fjs7sqLMwl4nzkB4e+Z/wCqYtWH7fmmW65+aN5WaOluLABG5M8KFG
+N7cz1YaHTEqLhKVJrVQqVBVaMQddeEJ5rEFNNnVglbWLbtguISSsYD3WQfzFez+
ShsvONPsh9E+T3oq1WOtSLCgTQVbNa5qfxeMe8uxLfwYOtPn1Srmno46t4g6IM9w
NXf/ljLNGv2eFQn2Xbxsrohuw0PJSvb/PBqAukSWSN09cc6+etTdyLSjgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFl6z+t2d0Ob9cgGsaIX4yDxdd2IMB8GA1UdIwQY
MBaAFIr6fgs0pHYiLLH1vAwF7BO7sUp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXZwLUN6U2tkaUlzc2ZXOERBWHNFN3V4U25rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iYTg3NjktOGQ4YS00YzE3LTkxYzct
NmJhN2E5NDdhN2Y3LzEvV1hyUDYzWjNRNXYxeUFheG9oZmpJUEYxM1lnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9iYTg3NjktOGQ4YS00YzE3LTkxYzctNmJhN2E5NDdhN2Y3
LzEvaXZwLUN6U2tkaUlzc2ZXOERBWHNFN3V4U25rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuR+8MA0G
CSqGSIb3DQEBCwUAA4IBAQCN5D373wxvxKIrTe027icbx21Kf9uEVf5f8mymTo/a
Pmq4A6e2WQAXQEVV2fGsX6CMG9oM4iz7JT7MKWAaiMGMpH+kaOCGfmKYHd8LoS6H
FZ5QQmJanC7g1kyC2WmLFkaVh+wn3G3W9/y99s/6uPG4OGg/EQhMxYEt+Sv1Veho
IYM+w0/QmU5mBdxfIeKKKMyJPlsYABe5zKug64g1aRLXkhmmo/3dDp1wYf1r6YFo
cly2/cpGWas9gKzyO9hs2tLjH2jhvHtWvMFVxC8WNclZRt2nMlY2+tNz24NEGYmY
Mw/Dm5EYLjms28XGDmGxaI3JMCEaZdpfvwkyYgi+V3y6
-----END CERTIFICATE-----
Generated at Tue Jun 18 11:32:08 2024 by rpki-client on console-ams.rpki-client.org