Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/I5I-yqyly4uilMkSjsc9Bls9uOo.roa
File: I5I-yqyly4uilMkSjsc9Bls9uOo.roa (raw, json)
Hash identifier: 4mzykZF6JiXPpIXRtIL27Fc5FKRTlwpG6UieC4glMwE=
Subject key identifier: 23:92:3E:CA:AC:A5:CB:8B:A2:94:C9:12:8E:C7:3D:06:5B:3D:B8:EA
Certificate issuer: /CN=c82206f506c826eb1057e5c269b3710e38ab696c
Certificate serial: 018CC424F9568BF95B4BCDB76DF892A5CE69
Authority key identifier: C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/I5I-yqyly4uilMkSjsc9Bls9uOo.roa
Signing time: Mon 01 Jan 2024 08:30:06 +0000
ROA not before: Mon 01 Jan 2024 08:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198333
IP address blocks: 176.123.51.0/24 maxlen: 24
194.139.6.0/23 maxlen: 23
194.139.7.0/24 maxlen: 24
194.139.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 23:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:f9:56:8b:f9:5b:4b:cd:b7:6d:f8:92:a5:ce:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82206f506c826eb1057e5c269b3710e38ab696c
Validity
Not Before: Jan 1 08:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23923ecaaca5cb8ba294c9128ec73d065b3db8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b9:64:f1:4e:d8:20:90:56:9f:c0:3f:8d:87:
46:1a:a2:24:0a:4b:db:d5:12:b7:55:2e:8b:94:67:
09:ce:d7:4c:a5:66:7f:07:89:1b:4e:28:ef:eb:20:
6c:f5:cd:e1:8e:17:81:38:4e:fd:51:31:b7:eb:bc:
bd:0f:e9:5e:28:07:67:6c:11:31:86:d7:11:83:e1:
c5:b3:9f:8f:0e:6b:85:16:e3:92:dd:0d:d2:96:ae:
e1:88:c8:52:1a:67:59:80:d6:78:b7:e7:ac:8c:41:
91:05:bd:39:86:7f:c4:af:6f:b5:0d:45:9e:04:ec:
9f:4b:67:71:f0:6b:2e:de:a4:81:90:f4:d6:8c:c9:
c7:75:94:dc:df:e4:48:01:10:1d:dd:b6:fd:6b:2b:
31:13:f3:1a:18:d7:93:c4:d7:42:54:cf:01:35:19:
0d:77:3b:a0:68:51:21:39:40:cf:c2:c9:be:b0:5c:
79:e2:dd:0a:80:86:6c:70:fc:00:af:9a:c7:f0:8d:
0e:e2:e1:74:ad:f3:1e:81:28:19:54:96:cf:0d:cc:
9b:1a:d7:a4:fe:18:c0:25:3e:1f:83:df:32:11:a2:
26:df:04:39:e5:9f:9f:8e:8b:ff:56:e2:66:0f:f1:
0b:86:44:82:77:85:5e:b5:e2:dd:94:0b:ac:cd:e1:
06:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:92:3E:CA:AC:A5:CB:8B:A2:94:C9:12:8E:C7:3D:06:5B:3D:B8:EA
X509v3 Authority Key Identifier:
keyid:C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/I5I-yqyly4uilMkSjsc9Bls9uOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.123.51.0/24
194.139.6.0/23
Signature Algorithm: sha256WithRSAEncryption
87:29:23:70:58:5e:68:c4:69:3d:7c:77:b7:6f:19:d3:7e:07:
3d:88:f9:8a:c4:1c:e3:7d:6b:59:f5:d6:69:14:b3:f8:b1:08:
28:40:87:78:fb:06:2c:b9:8d:16:ac:7e:b2:86:21:74:65:4c:
14:63:44:48:ed:1a:d8:fb:4b:d4:29:4b:58:29:e3:1e:8f:7b:
d1:c1:a0:8a:12:26:45:f4:84:5f:da:ba:db:b4:e6:25:99:cb:
5a:ff:36:db:b7:af:84:5a:1d:62:39:23:6d:fc:8b:9c:e4:4f:
fd:9b:a4:4b:0e:34:69:13:7f:1c:69:b2:3e:1d:e3:11:90:fa:
c1:d6:96:22:da:4a:55:ef:60:4b:9c:50:85:4a:9f:af:d6:9c:
04:31:a8:1a:f9:a9:8b:d2:18:19:be:ff:a9:24:f6:f6:d3:a8:
06:f5:2b:cc:30:13:d7:e5:58:0f:73:88:4e:d1:92:28:b6:2d:
c2:f2:e2:9b:af:cb:c7:1d:43:d2:03:3a:99:fd:29:40:9c:69:
2b:20:50:9f:f0:5b:19:74:a4:2b:7e:3e:7b:b0:d9:ac:85:27:
44:01:b1:50:2f:59:7f:4b:1f:2b:85:82:07:d5:d3:d0:46:05:
43:07:58:c9:ef:f8:58:02:50:cc:f7:cb:7a:d0:0b:9f:f7:a2:
47:38:60:23
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzEJPlWi/lbS823bfiSpc5pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MjIwNmY1MDZjODI2ZWIxMDU3ZTVjMjY5YjM3MTBlMzhh
YjY5NmMwHhcNMjQwMTAxMDgzMDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzkyM2VjYWFjYTVjYjhiYTI5NGM5MTI4ZWM3M2QwNjViM2RiOGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7lk8U7YIJBWn8A/jYdGGqIkCkvb
1RK3VS6LlGcJztdMpWZ/B4kbTijv6yBs9c3hjheBOE79UTG367y9D+leKAdnbBEx
htcRg+HFs5+PDmuFFuOS3Q3Slq7hiMhSGmdZgNZ4t+esjEGRBb05hn/Er2+1DUWe
BOyfS2dx8Gsu3qSBkPTWjMnHdZTc3+RIARAd3bb9aysxE/MaGNeTxNdCVM8BNRkN
dzugaFEhOUDPwsm+sFx54t0KgIZscPwAr5rH8I0O4uF0rfMegSgZVJbPDcybGtek
/hjAJT4fg98yEaIm3wQ55Z+fjov/VuJmD/ELhkSCd4VeteLdlAuszeEGGQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCOSPsqspcuLopTJEo7HPQZbPbjqMB8GA1UdIwQY
MBaAFMgiBvUGyCbrEFflwmmzcQ44q2lsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUNJRzlRYklKdXNRVi1YQ2FiTnhEamlyYVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yOWIwODItZDZkMS00MTQ3LWFmMWMt
NjFiMGM3ZmYyZTRlLzEvSTVJLXlxeWx5NHVpbE1rU2pzYzlCbHM5dU9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yOWIwODItZDZkMS00MTQ3LWFmMWMtNjFiMGM3ZmYyZTRl
LzEveUNJRzlRYklKdXNRVi1YQ2FiTnhEamlyYVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsHszAwQB
wosGMA0GCSqGSIb3DQEBCwUAA4IBAQCHKSNwWF5oxGk9fHe3bxnTfgc9iPmKxBzj
fWtZ9dZpFLP4sQgoQId4+wYsuY0WrH6yhiF0ZUwUY0RI7RrY+0vUKUtYKeMej3vR
waCKEiZF9IRf2rrbtOYlmcta/zbbt6+EWh1iOSNt/Iuc5E/9m6RLDjRpE38cabI+
HeMRkPrB1pYi2kpV72BLnFCFSp+v1pwEMaga+amL0hgZvv+pJPb206gG9SvMMBPX
5VgPc4hO0ZIoti3C8uKbr8vHHUPSAzqZ/SlAnGkrIFCf8FsZdKQrfj57sNmshSdE
AbFQL1l/Sx8rhYIH1dPQRgVDB1jJ7/hYAlDM98t60Auf96JHOGAj
-----END CERTIFICATE-----
Generated at Wed Nov 27 06:19:56 2024 by rpki-client on console-ams.rpki-client.org