Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/IeIB738EEzohtMgfTzZQ7DS7fK0.roa
File: IeIB738EEzohtMgfTzZQ7DS7fK0.roa (raw, json)
Hash identifier: KrP4ZqBb34Jm75OsoRIIBpEz0oSUcTbsPPbdJy7JZlc=
Subject key identifier: 21:E2:01:EF:7F:04:13:3A:21:B4:C8:1F:4F:36:50:EC:34:BB:7C:AD
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC79555CE26B1C48BD3EE9A53C7F03939
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/IeIB738EEzohtMgfTzZQ7DS7fK0.roa
Signing time: Tue 02 Jan 2024 00:31:41 +0000
ROA not before: Tue 02 Jan 2024 00:31:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50990
IP address blocks: 94.176.180.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:55:ce:26:b1:c4:8b:d3:ee:9a:53:c7:f0:39:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21e201ef7f04133a21b4c81f4f3650ec34bb7cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:99:bd:8e:3f:93:82:45:c2:64:eb:92:3c:13:
df:4f:66:37:bb:b0:37:d7:61:d8:a0:8b:c3:df:ae:
a3:39:01:29:f0:09:04:48:1e:62:62:fa:8c:02:dc:
39:91:8e:bc:9e:f6:92:62:c9:24:b3:41:d8:d7:66:
75:b2:de:c7:38:60:48:c5:c6:62:28:71:26:a9:08:
9c:72:02:b1:5c:f8:2c:38:9b:6e:b9:a9:8e:5f:1f:
21:66:36:9a:95:74:37:ee:09:7d:c8:a9:b2:31:37:
b0:b5:fd:00:7f:e5:99:13:53:05:a0:61:e5:58:fe:
f5:c9:1b:c3:05:22:cf:6e:17:8a:79:18:1f:3f:af:
13:2d:37:36:88:78:d1:83:8a:c2:76:65:98:ae:1a:
a4:81:f5:58:1a:cf:d6:e6:76:5f:19:6c:33:9c:9c:
09:95:62:ea:b8:f2:96:6b:f4:f1:c4:5a:29:88:27:
93:a5:2c:42:b1:b8:3a:64:06:17:ad:6b:b4:5e:0e:
fe:ec:37:04:f9:96:42:c5:8f:21:1b:24:dc:ba:54:
60:4b:db:3c:db:a2:c9:66:5b:8c:2b:90:d6:91:30:
78:6a:85:07:09:ce:d8:a7:ce:2c:e5:0f:68:60:b1:
20:60:c9:aa:0f:29:92:4c:72:af:85:81:99:7d:dd:
3e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E2:01:EF:7F:04:13:3A:21:B4:C8:1F:4F:36:50:EC:34:BB:7C:AD
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/IeIB738EEzohtMgfTzZQ7DS7fK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.180.0/23
Signature Algorithm: sha256WithRSAEncryption
80:ad:c1:4b:8b:bc:70:3e:7e:cb:97:0c:5c:57:76:e2:f5:e2:
a0:33:30:30:59:56:4d:08:6f:01:d0:29:cc:e2:53:35:ba:78:
02:e1:bd:e6:e7:86:9c:33:c1:84:14:c4:a9:26:07:b9:e9:e1:
20:a0:27:c7:b5:8d:b2:4c:10:d4:1f:9c:3f:df:cf:79:87:73:
06:15:0d:7d:d9:c9:b0:0c:66:ca:4e:c0:f0:3f:15:0c:5e:ad:
ad:86:e8:01:9c:7b:bb:2b:94:81:a4:e2:3d:c7:b4:86:90:80:
4f:24:4a:cc:d7:2b:7b:ab:22:57:82:fc:d6:f9:a5:fb:19:d2:
fb:87:19:60:f0:bd:0c:1a:a1:d9:4b:7b:c0:64:cb:30:dd:5c:
25:ad:85:cc:52:1e:15:71:f1:1e:b2:9c:34:3d:56:36:d7:80:
ab:62:cd:89:f3:09:61:a6:8b:47:ac:a5:de:6d:91:48:53:f0:
61:f9:a4:c7:66:6a:a3:0f:4f:b9:c8:0e:5f:a8:2e:fb:31:aa:
b1:c5:13:42:c3:2b:57:42:9e:cd:53:70:b6:19:2c:c4:b3:a1:
76:df:7d:08:8b:54:43:3e:65:41:40:cf:a2:9b:e3:81:4c:78:
5a:44:74:dd:45:23:74:51:14:df:27:c7:88:4f:75:a9:f5:91:
f7:90:5e:52
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzHlVXOJrHEi9PumlPH8Dk5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjQwMTAyMDAzMTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWUyMDFlZjdmMDQxMzNhMjFiNGM4MWY0ZjM2NTBlYzM0YmI3Y2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZm9jj+TgkXCZOuSPBPfT2Y3u7A3
12HYoIvD366jOQEp8AkESB5iYvqMAtw5kY68nvaSYskks0HY12Z1st7HOGBIxcZi
KHEmqQiccgKxXPgsOJtuuamOXx8hZjaalXQ37gl9yKmyMTewtf0Af+WZE1MFoGHl
WP71yRvDBSLPbheKeRgfP68TLTc2iHjRg4rCdmWYrhqkgfVYGs/W5nZfGWwznJwJ
lWLquPKWa/TxxFopiCeTpSxCsbg6ZAYXrWu0Xg7+7DcE+ZZCxY8hGyTculRgS9s8
26LJZluMK5DWkTB4aoUHCc7Yp84s5Q9oYLEgYMmqDymSTHKvhYGZfd0+IwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFCHiAe9/BBM6IbTIH082UOw0u3ytMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL0llSUI3MzhFRXpvaHRNZ2ZUelpRN0RTN2ZLMC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFesLQw
DQYJKoZIhvcNAQELBQADggEBAICtwUuLvHA+fsuXDFxXduL14qAzMDBZVk0IbwHQ
KcziUzW6eALhvebnhpwzwYQUxKkmB7np4SCgJ8e1jbJMENQfnD/fz3mHcwYVDX3Z
ybAMZspOwPA/FQxera2G6AGce7srlIGk4j3HtIaQgE8kSszXK3urIleC/Nb5pfsZ
0vuHGWDwvQwaodlLe8BkyzDdXCWthcxSHhVx8R6ynDQ9VjbXgKtizYnzCWGmi0es
pd5tkUhT8GH5pMdmaqMPT7nIDl+oLvsxqrHFE0LDK1dCns1TcLYZLMSzoXbffQiL
VEM+ZUFAz6Kb44FMeFpEdN1FI3RRFN8nx4hPdan1kfeQXlI=
-----END CERTIFICATE-----
Generated at Thu May 23 10:57:38 2024 by rpki-client on console-ams.rpki-client.org