Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/vew22ISIK4D_Cwvu2xuPm-rbiHc.roa
File: vew22ISIK4D_Cwvu2xuPm-rbiHc.roa (raw, json)
Hash identifier: XFmBZTgT6giAtyZFuxioVxnnycVXcOUyK0nzdoZ46lQ=
Subject key identifier: BD:EC:36:D8:84:88:2B:80:FF:0B:0B:EE:DB:1B:8F:9B:EA:DB:88:77
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC7955415AC640A787E2AC0529501B176
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/vew22ISIK4D_Cwvu2xuPm-rbiHc.roa
Signing time: Tue 02 Jan 2024 00:31:41 +0000
ROA not before: Tue 02 Jan 2024 00:31:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50637
IP address blocks: 188.212.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:54:15:ac:64:0a:78:7e:2a:c0:52:95:01:b1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdec36d884882b80ff0b0beedb1b8f9beadb8877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6a:22:0b:4a:1c:39:82:c4:5f:4b:51:fa:37:
c1:83:54:52:d2:c1:67:fd:83:3d:33:f9:d7:91:51:
c6:a5:3c:7e:5e:66:c3:32:76:61:27:c9:6a:19:94:
d2:db:ca:56:b1:87:80:18:b4:4b:9c:86:09:a2:ff:
41:59:9c:39:f2:82:ce:c1:91:b2:1b:92:59:9d:78:
14:62:a9:c1:4c:a1:2a:6f:21:d9:23:1f:9f:62:10:
a6:73:c2:66:cc:30:cc:9e:4e:45:fa:97:f6:d7:d1:
5a:cf:93:1a:89:c5:2d:95:87:b4:aa:b5:41:96:c2:
53:3c:e5:ab:e1:a9:99:6f:5b:8d:5e:e1:db:2b:f8:
39:ab:ae:34:53:93:7f:36:ad:ef:dd:7b:ca:13:47:
11:4e:13:96:88:8d:43:4f:ef:4a:69:2c:25:5f:9f:
5e:ed:aa:48:03:8b:30:25:7b:7d:01:84:05:12:ef:
63:74:d5:24:ea:9e:12:58:f8:70:f2:88:4e:41:88:
ef:b2:a7:15:e5:bb:88:b0:e3:22:66:0a:76:17:79:
4f:57:f9:8a:25:0c:d1:fe:17:56:c4:94:82:8d:57:
ea:57:75:e2:b6:b2:a5:a4:a2:1a:af:77:62:94:76:
bf:92:f2:39:67:d0:46:f2:62:d3:11:12:1c:8f:c3:
d4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EC:36:D8:84:88:2B:80:FF:0B:0B:EE:DB:1B:8F:9B:EA:DB:88:77
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/vew22ISIK4D_Cwvu2xuPm-rbiHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.130.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:cc:bb:db:2e:4a:ce:85:1f:e2:91:59:2d:5c:51:50:3c:57:
72:dc:92:e4:45:01:67:ef:e2:eb:95:bf:81:e3:0d:64:93:11:
97:b4:c3:64:e9:84:03:c0:e9:4b:83:34:28:54:13:91:ac:88:
42:d0:24:64:46:d4:a2:35:3c:ae:6b:08:cc:95:e6:2a:df:d1:
7f:77:44:19:cb:7e:78:3d:36:b6:49:43:8b:da:f8:fb:70:6e:
53:78:f9:2d:c2:94:ee:66:e7:47:f7:9f:5d:d5:1e:c0:b8:85:
d9:3e:13:21:06:ca:a1:4d:4d:5b:1d:69:78:3a:84:4e:75:d1:
36:c7:06:b2:3b:e8:b2:96:12:24:ed:7f:f5:f9:4d:fd:5e:02:
65:73:eb:60:18:17:45:7e:88:13:62:d9:2a:4c:03:42:d3:d4:
e1:5c:72:fe:5d:19:2e:42:68:bd:bb:92:29:24:a6:4d:3e:c4:
83:fe:cc:0e:c1:6f:d1:53:56:3d:83:8d:e5:bb:04:b9:d8:2f:
f5:eb:04:53:2d:64:a2:cb:ab:75:19:cd:66:fa:fe:ca:35:58:
f7:13:3e:20:16:ac:31:2e:89:c8:b3:68:8a:b6:d6:64:a1:b8:
ea:6a:d5:c6:aa:30:ed:d1:d4:4a:e0:f6:8d:fe:15:99:1d:04:
cb:36:94:7f
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzHlVQVrGQKeH4qwFKVAbF2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjQwMTAyMDAzMTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGVjMzZkODg0ODgyYjgwZmYwYjBiZWVkYjFiOGY5YmVhZGI4ODc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2oiC0ocOYLEX0tR+jfBg1RS0sFn
/YM9M/nXkVHGpTx+XmbDMnZhJ8lqGZTS28pWsYeAGLRLnIYJov9BWZw58oLOwZGy
G5JZnXgUYqnBTKEqbyHZIx+fYhCmc8JmzDDMnk5F+pf219Faz5MaicUtlYe0qrVB
lsJTPOWr4amZb1uNXuHbK/g5q640U5N/Nq3v3XvKE0cRThOWiI1DT+9KaSwlX59e
7apIA4swJXt9AYQFEu9jdNUk6p4SWPhw8ohOQYjvsqcV5buIsOMiZgp2F3lPV/mK
JQzR/hdWxJSCjVfqV3XitrKlpKIar3dilHa/kvI5Z9BG8mLTERIcj8PU3wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFL3sNtiEiCuA/wsL7tsbj5vq24h3MB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL3ZldzIySVNJSzREX0N3dnUyeHVQbS1yYmlIYy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC81IIw
DQYJKoZIhvcNAQELBQADggEBAC/Mu9suSs6FH+KRWS1cUVA8V3LckuRFAWfv4uuV
v4HjDWSTEZe0w2TphAPA6UuDNChUE5GsiELQJGRG1KI1PK5rCMyV5irf0X93RBnL
fng9NrZJQ4va+PtwblN4+S3ClO5m50f3n13VHsC4hdk+EyEGyqFNTVsdaXg6hE51
0TbHBrI76LKWEiTtf/X5Tf1eAmVz62AYF0V+iBNi2SpMA0LT1OFccv5dGS5CaL27
kikkpk0+xIP+zA7Bb9FTVj2DjeW7BLnYL/XrBFMtZKLLq3UZzWb6/so1WPcTPiAW
rDEuicizaIq21mShuOpq1caqMO3R1Erg9o3+FZkdBMs2lH8=
-----END CERTIFICATE-----
Generated at Thu May 23 14:02:12 2024 by rpki-client on console-ams.rpki-client.org