Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/iUk2E-Mtc-0VdrvmOYeQgYhgaOE.roa
File: iUk2E-Mtc-0VdrvmOYeQgYhgaOE.roa (raw, json)
Hash identifier: f9r1MzE52bwC7QyNJV64/jZh4q0iv9KFTqWtiHssNjc=
Subject key identifier: 89:49:36:13:E3:2D:73:ED:15:76:BB:E6:39:87:90:81:88:60:68:E1
Certificate issuer: /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Certificate serial: 018CC3495ACB81C599A7C7604EF7E9FF8CDA
Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/iUk2E-Mtc-0VdrvmOYeQgYhgaOE.roa
Signing time: Mon 01 Jan 2024 04:30:13 +0000
ROA not before: Mon 01 Jan 2024 04:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 559
IP address blocks: 129.132.0.0/16 maxlen: 16
192.33.87.0/24 maxlen: 24
192.33.88.0/21 maxlen: 24
192.33.96.0/21 maxlen: 21
192.33.104.0/22 maxlen: 22
192.33.108.0/23 maxlen: 23
82.130.64.0/18 maxlen: 18
192.33.110.0/24 maxlen: 24
2001:67c:10ec::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:5a:cb:81:c5:99:a7:c7:60:4e:f7:e9:ff:8c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Validity
Not Before: Jan 1 04:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89493613e32d73ed1576bbe639879081886068e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:15:99:5b:bc:89:49:cf:15:94:91:da:a5:
80:27:5d:b5:5e:1d:1c:10:65:d2:7b:8e:8d:99:52:
e4:23:c3:b8:47:ee:37:01:18:14:e1:7c:08:5f:e8:
cf:8c:c5:3d:62:99:0d:72:34:f7:b1:eb:46:c1:5d:
83:a4:74:87:23:ed:58:5d:49:f9:8b:8d:3d:f0:12:
40:40:ff:66:b7:4a:57:03:06:d1:20:c3:51:66:27:
b7:a9:93:f7:21:39:55:13:5a:c7:25:c8:4d:54:f7:
d5:74:69:60:b2:da:70:38:fe:4c:3b:ae:40:7b:b6:
e8:98:56:af:0b:a3:7c:5a:c8:1a:ff:be:93:d1:e2:
22:fe:b1:a4:52:57:af:bc:43:7b:d0:b0:75:93:dd:
b9:bb:01:53:89:d9:06:a7:67:48:d4:30:ac:48:ea:
3f:38:6f:52:63:66:e8:6e:4e:39:05:53:26:8d:78:
92:ce:2a:a5:7d:1d:09:84:93:9a:0c:1a:b4:bb:59:
20:83:6f:ad:20:1a:dc:54:58:ca:9b:0b:a8:0d:37:
37:a6:ae:4a:43:d9:0c:30:69:a3:7c:90:f8:7e:01:
17:d6:81:d2:d4:80:d9:1e:28:f7:69:9b:f6:13:9d:
ca:42:c2:d2:8b:b1:fa:0e:23:5c:aa:e5:5e:11:12:
db:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:49:36:13:E3:2D:73:ED:15:76:BB:E6:39:87:90:81:88:60:68:E1
X509v3 Authority Key Identifier:
keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/iUk2E-Mtc-0VdrvmOYeQgYhgaOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.130.64.0/18
129.132.0.0/16
192.33.87.0-192.33.110.255
IPv6:
2001:67c:10ec::/48
Signature Algorithm: sha256WithRSAEncryption
b8:0b:fc:2a:b4:dc:29:90:ca:64:44:2a:1b:fd:ae:be:9b:ab:
bf:02:9b:ab:12:4c:7e:73:39:6b:45:d1:df:68:11:67:17:0c:
28:6f:16:71:53:8e:8b:ea:f9:df:36:b9:fc:71:99:89:80:dd:
9e:82:cc:d7:b2:20:60:2b:12:97:9c:70:e8:f3:96:a6:62:b2:
72:ac:d6:1f:e4:39:7a:84:69:95:42:24:2e:3a:8a:f1:e2:2c:
f6:35:77:90:e4:0e:ce:31:ec:fe:b4:a3:87:18:d0:c7:19:59:
ad:d5:4c:df:a2:d5:32:ad:a3:7f:5d:27:53:74:7f:6d:d2:45:
c4:f9:0b:c3:8a:bc:6d:90:1b:25:2c:54:c9:23:f2:e2:32:d6:
18:4b:c3:27:a4:5e:ce:d1:ed:79:f8:53:37:35:1f:2f:08:ac:
d1:02:22:7d:5f:9a:a6:62:7d:09:af:ef:68:61:a6:07:31:04:
ba:df:6f:ca:92:e7:b2:d9:dc:a4:b8:d2:9e:a1:10:a0:8c:34:
fe:5c:b6:06:e8:cb:4c:28:15:da:5e:9a:eb:a0:88:43:f2:67:
23:92:79:f7:ba:36:f5:ca:da:d1:a9:01:7f:f1:93:0d:3f:33:
f6:19:ef:db:63:6b:1f:89:bd:cb:e0:af:fc:bb:bd:48:9f:4b:
fd:d6:6f:d5
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYzDSVrLgcWZp8dgTvfp/4zaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYTgyNGJjNjMxY2NlZTFhZTk5ZDcxMDNhZmQyZGM3NGYx
ZTI5YzQwHhcNMjQwMTAxMDQzMDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTQ5MzYxM2UzMmQ3M2VkMTU3NmJiZTYzOTg3OTA4MTg4NjA2OGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7cVmVu8iUnPFZSR2qWAJ121Xh0c
EGXSe46NmVLkI8O4R+43ARgU4XwIX+jPjMU9YpkNcjT3setGwV2DpHSHI+1YXUn5
i4098BJAQP9mt0pXAwbRIMNRZie3qZP3ITlVE1rHJchNVPfVdGlgstpwOP5MO65A
e7bomFavC6N8Wsga/76T0eIi/rGkUlevvEN70LB1k925uwFTidkGp2dI1DCsSOo/
OG9SY2bobk45BVMmjXiSziqlfR0JhJOaDBq0u1kgg2+tIBrcVFjKmwuoDTc3pq5K
Q9kMMGmjfJD4fgEX1oHS1IDZHij3aZv2E53KQsLSi7H6DiNcquVeERLb9QIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFIlJNhPjLXPtFXa75jmHkIGIYGjhMB8GA1UdIwQY
MBaAFI2oJLxjHM7hrpnXEDr9LcdPHinEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xY2FhNzktYjhjNC00ZDA4LTliYmUt
Mzg2YzFmOGIwNjQwLzEvaVVrMkUtTXRjLTBWZHJ2bU9ZZVFnWWhnYU9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8xY2FhNzktYjhjNC00ZDA4LTliYmUtMzg2YzFmOGIwNjQw
LzEvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAfBAIAATAZAwQGUoJAAwMA
gYQwDAMEAMAhVwMEAMAhbjAPBAIAAjAJAwcAIAEGfBDsMA0GCSqGSIb3DQEBCwUA
A4IBAQC4C/wqtNwpkMpkRCob/a6+m6u/ApurEkx+czlrRdHfaBFnFwwobxZxU46L
6vnfNrn8cZmJgN2egszXsiBgKxKXnHDo85amYrJyrNYf5Dl6hGmVQiQuOorx4iz2
NXeQ5A7OMez+tKOHGNDHGVmt1UzfotUyraN/XSdTdH9t0kXE+QvDirxtkBslLFTJ
I/LiMtYYS8MnpF7O0e15+FM3NR8vCKzRAiJ9X5qmYn0Jr+9oYaYHMQS632/Kkuey
2dykuNKeoRCgjDT+XLYG6MtMKBXaXprroIhD8mcjknn3ujb1ytrRqQF/8ZMNPzP2
Ge/bY2sfib3L4K/8u71In0v91m/V
-----END CERTIFICATE-----
Generated at Wed May 29 10:09:29 2024 by rpki-client on console-fra.rpki-client.org