Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/JgntlqCCBixPtmJFDgCJCXE4AJ4.roa
File: JgntlqCCBixPtmJFDgCJCXE4AJ4.roa (raw, json)
Hash identifier: EGq+AzGnOjXSGgOZUdrk3/GKyQ5oYCc8K4p1mwXbyZE=
Subject key identifier: 26:09:ED:96:A0:82:06:2C:4F:B6:62:45:0E:00:89:09:71:38:00:9E
Certificate issuer: /CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Certificate serial: 018E40F179A96F3026F4D8211F8D70F35384
Authority key identifier: 58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/JgntlqCCBixPtmJFDgCJCXE4AJ4.roa
Signing time: Fri 15 Mar 2024 07:09:10 +0000
ROA not before: Fri 15 Mar 2024 07:09:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208041
IP address blocks: 185.222.4.0/22 maxlen: 22
185.222.4.0/24 maxlen: 24
185.222.5.0/24 maxlen: 24
185.222.6.0/24 maxlen: 24
185.222.7.0/24 maxlen: 24
193.160.10.0/23 maxlen: 23
193.160.14.0/23 maxlen: 23
2a0c:8440::/48 maxlen: 48
2a0f:d180::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:40:f1:79:a9:6f:30:26:f4:d8:21:1f:8d:70:f3:53:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Validity
Not Before: Mar 15 07:09:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2609ed96a082062c4fb662450e0089097138009e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e9:a9:11:8e:54:a3:45:8b:da:7c:d9:ee:b4:
e2:12:85:d7:14:79:0f:bb:85:4d:ff:71:8d:43:27:
1c:07:4f:ae:32:51:f3:7a:d9:b4:62:64:7b:26:60:
87:2c:4d:6b:18:50:9e:90:47:72:8b:28:cd:3e:bb:
7d:03:fd:0d:80:f8:e8:33:70:30:0a:59:22:f8:c1:
f0:ac:19:c6:a7:8c:3e:b0:44:1e:4c:5a:bd:e2:a9:
13:09:26:39:e3:c5:fb:c7:3d:64:27:8c:19:19:8e:
74:1b:d8:c0:2e:07:c8:93:a2:51:31:f1:14:c0:51:
07:74:36:0e:22:66:14:03:7c:5b:65:a3:6c:cf:22:
4f:dd:8b:a1:08:a6:63:fc:68:0c:c4:4e:89:b4:61:
f8:b6:3e:08:77:3a:3a:d8:f9:b6:d5:c9:be:bd:0e:
f2:d4:cf:e4:bd:21:25:01:98:63:b5:a8:05:f6:5a:
f4:53:38:6a:e4:d0:21:5f:1a:61:4d:a7:1c:51:04:
71:cc:00:64:35:0a:a3:56:a2:05:5b:fb:a3:9f:10:
c2:b3:d2:cd:eb:78:00:85:b0:c9:42:8a:f5:27:78:
09:7c:ab:f9:05:65:50:fa:25:4c:db:94:c4:3b:f0:
3c:50:44:d9:d6:b0:e5:00:72:1c:33:ec:e6:9a:c8:
10:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:09:ED:96:A0:82:06:2C:4F:B6:62:45:0E:00:89:09:71:38:00:9E
X509v3 Authority Key Identifier:
keyid:58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/JgntlqCCBixPtmJFDgCJCXE4AJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.4.0/22
193.160.10.0/23
193.160.14.0/23
IPv6:
2a0c:8440::/48
2a0f:d180::/29
Signature Algorithm: sha256WithRSAEncryption
26:9d:15:ec:22:d2:38:3b:81:ef:bd:5a:45:c8:82:f2:e9:8d:
be:54:00:8d:36:da:be:46:89:e2:b6:8e:2f:ad:0c:9c:8c:af:
96:25:52:df:d7:ac:e3:39:d5:55:ed:2a:a4:15:dc:d7:e1:e5:
15:a5:d0:e8:df:ef:33:e3:08:4c:d5:81:95:11:86:79:9b:90:
0c:71:11:f5:39:88:47:55:7b:bf:9c:35:2f:26:6c:24:a6:2b:
b1:aa:a2:26:01:56:88:d8:7e:69:3a:b4:d7:4a:3e:0e:44:ba:
34:0e:56:1d:9b:d0:fd:80:0f:e4:05:a7:bf:6f:28:9d:9d:1f:
b1:c4:52:bd:03:64:aa:22:07:aa:fc:ab:4a:da:52:9e:e2:30:
4e:4b:c5:1f:5c:64:6c:6a:bd:19:ff:bc:e6:e4:e0:43:a6:1f:
e8:d1:fc:6e:1a:b4:a6:2f:fb:23:a1:37:42:34:a3:8e:5d:16:
f9:99:dc:34:fd:ff:e1:a7:3d:ed:d7:3a:81:1f:c4:3f:67:fc:
f8:be:e8:f3:75:b0:ce:36:2f:c8:07:73:8b:4e:27:c8:f7:e3:
2a:16:ec:36:b7:91:07:fa:08:ee:57:fa:64:68:a3:5b:68:ab:
9f:72:d0:f1:6e:aa:dc:06:11:56:81:26:14:d6:03:48:51:9d:
9c:1d:6a:f6
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAY5A8XmpbzAm9NghH41w81OEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MWVjYzFhNzRjZjkyYWI2MTljNWY3MTAxMjM5MzdjZTUw
ZDljNDMwHhcNMjQwMzE1MDcwOTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjA5ZWQ5NmEwODIwNjJjNGZiNjYyNDUwZTAwODkwOTcxMzgwMDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+mpEY5Uo0WL2nzZ7rTiEoXXFHkP
u4VN/3GNQyccB0+uMlHzetm0YmR7JmCHLE1rGFCekEdyiyjNPrt9A/0NgPjoM3Aw
Clki+MHwrBnGp4w+sEQeTFq94qkTCSY548X7xz1kJ4wZGY50G9jALgfIk6JRMfEU
wFEHdDYOImYUA3xbZaNszyJP3YuhCKZj/GgMxE6JtGH4tj4Idzo62Pm21cm+vQ7y
1M/kvSElAZhjtagF9lr0Uzhq5NAhXxphTaccUQRxzABkNQqjVqIFW/ujnxDCs9LN
63gAhbDJQor1J3gJfKv5BWVQ+iVM25TEO/A8UETZ1rDlAHIcM+zmmsgQqQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFCYJ7ZagggYsT7ZiRQ4AiQlxOACeMB8GA1UdIwQY
MBaAFFgezBp0z5KrYZxfcQEjk3zlDZxDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0I3TUduVFBrcXRobkY5eEFTT1RmT1VObkVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jNzFkYWYtZGQ2Ni00MWQ4LWIwNGYt
ZGE4OGI2YmRiMzE2LzEvSmdudGxxQ0NCaXhQdG1KRkRnQ0pDWEU0QUo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9jNzFkYWYtZGQ2Ni00MWQ4LWIwNGYtZGE4OGI2YmRiMzE2
LzEvV0I3TUduVFBrcXRobkY5eEFTT1RmT1VObkVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAYBAIAATASAwQCud4EAwQB
waAKAwQBwaAOMBYEAgACMBADBwAqDIRAAAADBQMqD9GAMA0GCSqGSIb3DQEBCwUA
A4IBAQAmnRXsItI4O4HvvVpFyILy6Y2+VACNNtq+Ronito4vrQycjK+WJVLf16zj
OdVV7SqkFdzX4eUVpdDo3+8z4whM1YGVEYZ5m5AMcRH1OYhHVXu/nDUvJmwkpiux
qqImAVaI2H5pOrTXSj4ORLo0DlYdm9D9gA/kBae/byidnR+xxFK9A2SqIgeq/KtK
2lKe4jBOS8UfXGRsar0Z/7zm5OBDph/o0fxuGrSmL/sjoTdCNKOOXRb5mdw0/f/h
pz3t1zqBH8Q/Z/z4vujzdbDONi/IB3OLTifI9+MqFuw2t5EH+gjuV/pkaKNbaKuf
ctDxbqrcBhFWgSYU1gNIUZ2cHWr2
-----END CERTIFICATE-----
Generated at Sat Jun 8 09:40:39 2024 by rpki-client on console-fra.rpki-client.org