Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/imvwTX9EAABbO2WfOaDCoJj9MgI.roa
File: imvwTX9EAABbO2WfOaDCoJj9MgI.roa (raw, json)
Hash identifier: BvMHAQeCGsS8Q7xOh+IUSriDfFKXsHJNbQx+W1/hEno=
Subject key identifier: 8A:6B:F0:4D:7F:44:00:00:5B:3B:65:9F:39:A0:C2:A0:98:FD:32:02
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018CC8DE8B5CEEB4F1939F26D48761191E0F
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/imvwTX9EAABbO2WfOaDCoJj9MgI.roa
Signing time: Tue 02 Jan 2024 06:31:17 +0000
ROA not before: Tue 02 Jan 2024 06:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199297
IP address blocks: 45.88.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:8b:5c:ee:b4:f1:93:9f:26:d4:87:61:19:1e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 2 06:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a6bf04d7f4400005b3b659f39a0c2a098fd3202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2e:4f:b6:99:96:02:d9:ad:53:4b:b7:a5:1c:
61:57:4c:d3:29:9f:a3:db:9d:13:30:34:b8:38:f3:
fc:b5:6c:d3:8f:76:90:ca:9f:99:6f:77:fd:b8:4d:
78:ff:c5:fe:6b:07:6e:8d:66:ea:c3:47:88:28:21:
8b:99:38:09:20:8f:3b:27:3f:b6:4d:ae:3f:b4:c6:
33:b2:66:3c:1d:3d:b2:55:4f:39:45:0b:36:d9:9e:
26:29:6a:6a:91:49:2e:5d:2a:d9:97:29:7d:3e:fb:
71:08:72:cb:e7:d7:b2:d2:05:75:58:08:09:8c:63:
3f:30:7c:46:a2:7c:55:6e:ce:2f:61:ab:fd:46:8e:
31:77:b6:35:5c:3b:5d:5c:e4:10:2d:f2:e3:4f:70:
03:16:b9:a0:df:07:f6:b8:36:e7:ea:45:a6:c7:22:
1f:75:a7:7b:4b:a9:82:be:42:99:b3:73:08:9f:61:
96:4b:a0:2b:b0:cd:71:40:96:5a:8e:2d:e3:1f:ea:
e1:e9:b2:1f:59:2a:96:3e:22:07:23:df:0e:70:e3:
50:ab:8d:35:43:8e:b1:aa:34:8f:6a:3e:86:d2:84:
db:c0:f8:e3:a0:d5:cf:af:c8:d2:94:e8:c5:61:58:
5f:5d:44:64:ba:73:2a:5b:6b:ff:cd:a1:b8:ce:a1:
ed:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6B:F0:4D:7F:44:00:00:5B:3B:65:9F:39:A0:C2:A0:98:FD:32:02
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/imvwTX9EAABbO2WfOaDCoJj9MgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.180.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ac:d1:eb:9e:2d:9d:8d:f3:1f:31:47:61:d6:f0:65:f6:9b:
42:0e:b1:28:ea:50:90:e6:9f:6f:d0:f3:49:22:af:97:a3:10:
ff:04:8a:38:0a:2c:e5:a8:0e:2a:68:f1:c5:ce:d0:4a:58:bc:
20:9e:69:59:83:d1:21:78:b1:d0:40:4d:fb:c4:6f:54:3d:72:
e6:57:06:48:94:4c:c2:c9:e7:7b:d3:ae:4c:94:9f:56:d5:e6:
e8:19:5e:de:75:4a:ae:68:06:c3:fb:25:3f:41:c6:e0:d0:53:
6e:22:ca:c4:63:13:fc:94:00:32:f8:4e:f8:2a:93:02:a6:91:
7a:b6:5e:de:a4:ab:86:4c:65:7b:ba:db:fd:d5:fd:1e:93:d3:
08:a1:7e:aa:4c:b9:42:41:f8:70:fe:8a:0f:9d:60:31:47:8a:
81:e1:4b:95:4c:cb:f5:91:24:6d:6f:fa:e9:ec:b2:cc:0e:73:
c6:0a:51:c7:9f:89:1c:d1:86:1d:d1:e1:a8:47:82:12:57:b8:
4b:f1:ee:72:19:70:2b:a1:34:2a:36:8f:cc:17:c1:a9:5b:02:
a9:48:21:d4:e6:d6:2d:e8:6a:23:d1:52:02:5b:c8:c2:d4:48:
ab:6f:6b:54:2a:13:a7:ce:b3:cf:34:82:c6:0a:33:ff:53:e6:
70:17:60:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3otc7rTxk58m1IdhGR4PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjQwMTAyMDYzMTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTZiZjA0ZDdmNDQwMDAwNWIzYjY1OWYzOWEwYzJhMDk4ZmQzMjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC5PtpmWAtmtU0u3pRxhV0zTKZ+j
250TMDS4OPP8tWzTj3aQyp+Zb3f9uE14/8X+awdujWbqw0eIKCGLmTgJII87Jz+2
Ta4/tMYzsmY8HT2yVU85RQs22Z4mKWpqkUkuXSrZlyl9PvtxCHLL59ey0gV1WAgJ
jGM/MHxGonxVbs4vYav9Ro4xd7Y1XDtdXOQQLfLjT3ADFrmg3wf2uDbn6kWmxyIf
dad7S6mCvkKZs3MIn2GWS6ArsM1xQJZaji3jH+rh6bIfWSqWPiIHI98OcONQq401
Q46xqjSPaj6G0oTbwPjjoNXPr8jSlOjFYVhfXURkunMqW2v/zaG4zqHtjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIpr8E1/RAAAWztlnzmgwqCY/TICMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvaW12d1RYOUVBQUJiTzJXZk9hRENvSmo5TWdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVi0MA0G
CSqGSIb3DQEBCwUAA4IBAQCqrNHrni2djfMfMUdh1vBl9ptCDrEo6lCQ5p9v0PNJ
Iq+XoxD/BIo4CizlqA4qaPHFztBKWLwgnmlZg9EheLHQQE37xG9UPXLmVwZIlEzC
yed7065MlJ9W1eboGV7edUquaAbD+yU/Qcbg0FNuIsrEYxP8lAAy+E74KpMCppF6
tl7epKuGTGV7utv91f0ek9MIoX6qTLlCQfhw/ooPnWAxR4qB4UuVTMv1kSRtb/rp
7LLMDnPGClHHn4kc0YYd0eGoR4ISV7hL8e5yGXAroTQqNo/MF8GpWwKpSCHU5tYt
6Goj0VICW8jC1Eirb2tUKhOnzrPPNILGCjP/U+ZwF2Ce
-----END CERTIFICATE-----
Generated at Wed May 8 19:40:45 2024 by rpki-client on console-fra.rpki-client.org