Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/2iEH4Zi_AHM6O2YyPcQYWWc-3yo.roa
File: 2iEH4Zi_AHM6O2YyPcQYWWc-3yo.roa (raw, json)
Hash identifier: MEgMASg26WVnSVLpS5YR8K5CZ0hFOru7GyH6swkrDvI=
Subject key identifier: DA:21:07:E1:98:BF:00:73:3A:3B:66:32:3D:C4:18:59:67:3E:DF:2A
Certificate issuer: /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Certificate serial: 018CC2DB0150D1A487CE9B2B1DB69736E6DA
Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/2iEH4Zi_AHM6O2YyPcQYWWc-3yo.roa
Signing time: Mon 01 Jan 2024 02:29:41 +0000
ROA not before: Mon 01 Jan 2024 02:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204196
IP address blocks: 185.207.204.0/22 maxlen: 22
185.145.128.0/22 maxlen: 22
80.209.252.0/23 maxlen: 23
185.235.176.0/22 maxlen: 22
185.221.200.0/22 maxlen: 22
185.224.80.0/22 maxlen: 22
185.243.188.0/22 maxlen: 22
185.217.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:01:50:d1:a4:87:ce:9b:2b:1d:b6:97:36:e6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Validity
Not Before: Jan 1 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da2107e198bf00733a3b66323dc41859673edf2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3e:ee:03:b8:14:9e:95:21:fa:91:08:0b:e7:
e6:0f:f9:f0:52:6b:15:2c:e4:c2:9e:7c:81:c9:65:
85:e7:22:ad:fb:c1:00:6a:ab:22:0a:2d:cb:87:09:
9f:4f:20:69:5e:cf:c3:de:37:53:bb:f5:98:52:f7:
31:2b:e7:94:97:e9:99:c6:00:f4:e2:1a:ae:25:d0:
56:cc:f2:5c:62:2f:d9:ae:79:74:db:68:52:a0:a7:
ad:bd:d0:76:19:a5:4e:6e:9b:c1:4d:6e:85:fa:43:
47:25:a9:27:d9:82:24:0c:5d:45:52:8a:3c:6f:8c:
c6:9e:da:81:74:63:20:fa:fe:05:f3:33:b7:20:9a:
05:ed:9c:1b:c9:1a:1b:80:15:55:ce:1c:67:4e:d3:
df:63:9d:3d:ba:5a:db:20:37:d6:8f:e7:32:bd:5c:
3b:02:38:1c:eb:3a:61:c8:ef:06:b7:4f:3f:56:04:
5b:22:68:d0:2d:5a:28:71:e5:26:a6:a2:9b:22:34:
8e:f2:9f:13:f5:69:aa:12:7b:75:82:f2:d3:88:5a:
42:f1:74:13:89:27:26:74:1a:bb:64:53:83:56:e2:
aa:35:7b:29:22:be:1e:24:d2:c4:bd:0e:8f:8d:9d:
5b:1b:0c:ad:f3:82:a0:f3:05:dc:67:76:fe:5f:e5:
af:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:21:07:E1:98:BF:00:73:3A:3B:66:32:3D:C4:18:59:67:3E:DF:2A
X509v3 Authority Key Identifier:
keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/2iEH4Zi_AHM6O2YyPcQYWWc-3yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.209.252.0/23
185.145.128.0/22
185.207.204.0/22
185.217.92.0/22
185.221.200.0/22
185.224.80.0/22
185.235.176.0/22
185.243.188.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:c5:8c:70:10:f7:9a:0d:b2:f5:81:5e:2a:42:75:88:df:1b:
4d:25:3d:ce:32:db:9f:71:18:27:25:d4:99:95:4a:ce:aa:37:
2e:54:08:f8:64:6e:1b:35:a4:b9:44:af:c7:8b:1b:6f:be:a2:
15:f9:66:80:44:41:09:6a:2d:b5:eb:6a:56:98:d4:49:26:fe:
6b:91:d3:cc:0a:b9:4e:43:dd:73:17:4a:5c:ac:da:3c:1c:db:
70:8f:66:8b:7b:96:16:0c:4e:24:d4:2b:5c:ca:ec:4c:ba:38:
0e:48:a5:3c:5a:01:e8:13:29:f8:d9:b0:74:a0:c5:d3:6f:45:
35:d4:78:a9:d2:fa:7f:df:51:93:02:8f:5d:89:13:7f:5e:67:
88:86:f1:7d:ee:9a:4b:ec:33:77:2b:f5:e8:a6:cb:62:66:35:
1c:56:f8:cd:e6:f5:e7:99:8e:f7:4f:bc:e4:aa:1f:88:d3:a6:
f6:fb:58:7b:41:cb:1f:f0:22:4c:14:bf:34:ee:d0:70:ee:0e:
23:e7:34:09:b1:a8:47:27:f7:3f:74:fb:12:2c:6e:99:8b:6b:
1d:46:4f:b5:d9:31:c7:73:2f:89:49:29:fa:60:de:7a:d5:ca:
a9:2b:f5:6a:21:d4:ca:3d:3d:d7:94:de:22:90:08:b5:d1:85:
00:99:6a:27
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAYzC2wFQ0aSHzpsrHbaXNubaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMmU3MmFiZjdiMTcyOGZkYTZhYTBiMDQxM2Q4ODU0ODEy
ZWEzNjEwHhcNMjQwMTAxMDIyOTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTIxMDdlMTk4YmYwMDczM2EzYjY2MzIzZGM0MTg1OTY3M2VkZjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD7uA7gUnpUh+pEIC+fmD/nwUmsV
LOTCnnyByWWF5yKt+8EAaqsiCi3LhwmfTyBpXs/D3jdTu/WYUvcxK+eUl+mZxgD0
4hquJdBWzPJcYi/Zrnl022hSoKetvdB2GaVObpvBTW6F+kNHJakn2YIkDF1FUoo8
b4zGntqBdGMg+v4F8zO3IJoF7ZwbyRobgBVVzhxnTtPfY509ulrbIDfWj+cyvVw7
Ajgc6zphyO8Gt08/VgRbImjQLVooceUmpqKbIjSO8p8T9WmqEnt1gvLTiFpC8XQT
iScmdBq7ZFODVuKqNXspIr4eJNLEvQ6PjZ1bGwyt84Kg8wXcZ3b+X+WvDQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFNohB+GYvwBzOjtmMj3EGFlnPt8qMB8GA1UdIwQY
MBaAFPoucqv3sXKP2mqgsEE9iFSBLqNhMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1pNXlxX2V4Y29fYWFxQ3dRVDJJVklFdW8yRS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvZjYxNTkxLTdjYTgtNGE5YS04OTlm
LWEzNjZkYTI1MWE4My8xLzJpRUg0WmlfQUhNNk8yWXlQY1FZV1djLTN5by5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOWMvZjYxNTkxLTdjYTgtNGE5YS04OTlmLWEzNjZkYTI1MWE4
My8xLzEtaTV5cV9leGNvX2FhcUN3UVQySVZJRXVvMkUuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwSQYIKwYBBQUHAQcBAf8EOjA4MDYEAgABMDADBAFQ0fwD
BAK5kYADBAK5z8wDBAK52VwDBAK53cgDBAK54FADBAK567ADBAK587wwDQYJKoZI
hvcNAQELBQADggEBAHrFjHAQ95oNsvWBXipCdYjfG00lPc4y259xGCcl1JmVSs6q
Ny5UCPhkbhs1pLlEr8eLG2++ohX5ZoBEQQlqLbXralaY1Ekm/muR08wKuU5D3XMX
Slys2jwc23CPZot7lhYMTiTUK1zK7Ey6OA5IpTxaAegTKfjZsHSgxdNvRTXUeKnS
+n/fUZMCj12JE39eZ4iG8X3umkvsM3cr9eimy2JmNRxW+M3m9eeZjvdPvOSqH4jT
pvb7WHtByx/wIkwUvzTu0HDuDiPnNAmxqEcn9z90+xIsbpmLax1GT7XZMcdzL4lJ
Kfpg3nrVyqkr9Woh1Mo9PdeU3iKQCLXRhQCZaic=
-----END CERTIFICATE-----
Generated at Sat Jun 1 22:17:02 2024 by rpki-client on console-fra.rpki-client.org