Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/8pi08_qRIrB_2Sk2lnDma0qtA88.roa
File: 8pi08_qRIrB_2Sk2lnDma0qtA88.roa (raw, json)
Hash identifier: ov+LL0Qiw3Y6T3gRp6Da78+3dxmAvf3rhiUVyyoCPkk=
Subject key identifier: F2:98:B4:F3:FA:91:22:B0:7F:D9:29:36:96:70:E6:6B:4A:AD:03:CF
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC501259582795423245B866B7E02D481
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/8pi08_qRIrB_2Sk2lnDma0qtA88.roa
Signing time: Mon 01 Jan 2024 12:30:35 +0000
ROA not before: Mon 01 Jan 2024 12:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204721
IP address blocks: 188.212.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:25:95:82:79:54:23:24:5b:86:6b:7e:02:d4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f298b4f3fa9122b07fd929369670e66b4aad03cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0c:f2:f9:a3:8e:1e:ff:d7:55:4c:96:38:7d:
8f:61:e2:6f:81:43:93:0b:3e:10:65:1e:3d:cf:df:
71:68:05:ce:ce:86:ed:83:80:55:72:fd:5d:87:28:
38:2e:50:f2:e8:41:88:76:bf:8c:cb:ac:75:bf:c4:
30:a7:8d:88:6c:ed:b2:92:f2:e5:b2:f5:bd:21:02:
4c:1b:8f:6d:39:87:d7:9c:f8:8c:28:fe:88:b0:35:
17:d8:ee:55:ca:65:b9:3d:12:88:b8:cc:39:3a:f3:
a6:8f:6f:9e:79:5b:12:35:52:b8:ba:4e:63:22:1a:
58:5e:cb:e0:db:40:a9:ae:29:8f:62:34:d6:cc:07:
af:73:f6:a5:e6:86:08:c9:59:c7:bb:7e:b6:30:72:
80:07:39:54:cd:ce:c8:3b:a3:18:8c:91:50:10:e8:
7d:70:4b:a0:eb:8e:08:e1:dd:0a:49:1c:6b:38:ae:
79:d8:54:04:0e:a0:3d:a6:62:36:54:80:2e:3f:54:
39:99:ef:2c:89:0d:65:be:74:c3:ce:9a:0e:6a:0f:
c9:da:73:76:46:2f:c1:b7:86:8e:dd:b8:8e:4e:1c:
36:bf:4f:ec:cd:fc:c9:0d:f1:b8:03:37:5a:c8:87:
bd:d1:09:03:b1:5c:e0:fa:33:41:9d:05:0c:3a:3a:
9c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:98:B4:F3:FA:91:22:B0:7F:D9:29:36:96:70:E6:6B:4A:AD:03:CF
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/8pi08_qRIrB_2Sk2lnDma0qtA88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.133.0/24
Signature Algorithm: sha256WithRSAEncryption
02:54:36:35:e4:07:ab:43:44:62:e9:9d:6f:d7:56:a2:4f:b2:
ae:74:52:77:a6:2e:bc:ad:23:e9:d2:bd:42:34:74:fd:87:43:
74:74:a9:3e:48:4d:98:91:ea:93:e8:34:ab:34:ea:9d:b7:10:
40:a4:0c:72:2e:f7:78:63:0c:ca:18:af:4f:e7:6d:19:f5:76:
e3:af:c9:a5:61:35:e0:fc:f0:9f:fc:11:96:36:b9:ce:ca:6c:
4b:20:a9:59:22:df:cd:34:88:c6:3b:eb:ed:99:1a:c6:ad:ae:
27:88:6d:23:a6:bb:ac:5e:06:2c:e8:04:8f:67:2d:84:4a:d3:
3c:c1:29:e5:67:8d:ee:7c:61:8b:71:57:8d:85:d2:32:b1:cd:
0e:b6:55:30:3f:ad:1b:2a:f2:da:c9:5c:07:db:34:95:f9:e8:
22:f6:c8:69:a2:c5:74:7a:62:7d:86:aa:e9:c8:bc:8c:0a:92:
75:c1:f5:af:02:98:49:c6:d9:49:ed:02:22:37:97:41:7a:37:
49:47:41:c0:41:f8:24:7c:8b:f1:57:4a:2e:c5:91:5a:58:c8:
d5:6e:67:6d:9b:90:d3:93:97:eb:71:2a:42:56:84:2f:96:0f:
f8:c3:4d:fe:20:06:12:58:f7:c6:de:f7:d1:cb:d8:e2:0e:28:
6b:60:05:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFASWVgnlUIyRbhmt+AtSBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjQwMTAxMTIzMDM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjk4YjRmM2ZhOTEyMmIwN2ZkOTI5MzY5NjcwZTY2YjRhYWQwM2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwzy+aOOHv/XVUyWOH2PYeJvgUOT
Cz4QZR49z99xaAXOzobtg4BVcv1dhyg4LlDy6EGIdr+My6x1v8Qwp42IbO2ykvLl
svW9IQJMG49tOYfXnPiMKP6IsDUX2O5VymW5PRKIuMw5OvOmj2+eeVsSNVK4uk5j
IhpYXsvg20CprimPYjTWzAevc/al5oYIyVnHu362MHKABzlUzc7IO6MYjJFQEOh9
cEug644I4d0KSRxrOK552FQEDqA9pmI2VIAuP1Q5me8siQ1lvnTDzpoOag/J2nN2
Ri/Bt4aO3biOThw2v0/szfzJDfG4AzdayIe90QkDsVzg+jNBnQUMOjqc/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPKYtPP6kSKwf9kpNpZw5mtKrQPPMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvOHBpMDhfcVJJckJfMlNrMmxuRG1hMHF0QTg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNSFMA0G
CSqGSIb3DQEBCwUAA4IBAQACVDY15AerQ0Ri6Z1v11aiT7KudFJ3pi68rSPp0r1C
NHT9h0N0dKk+SE2YkeqT6DSrNOqdtxBApAxyLvd4YwzKGK9P520Z9Xbjr8mlYTXg
/PCf/BGWNrnOymxLIKlZIt/NNIjGO+vtmRrGra4niG0jprusXgYs6ASPZy2EStM8
wSnlZ43ufGGLcVeNhdIysc0OtlUwP60bKvLayVwH2zSV+egi9shposV0emJ9hqrp
yLyMCpJ1wfWvAphJxtlJ7QIiN5dBejdJR0HAQfgkfIvxV0ouxZFaWMjVbmdtm5DT
k5frcSpCVoQvlg/4w03+IAYSWPfG3vfRy9jiDihrYAUP
-----END CERTIFICATE-----
Generated at Mon May 6 07:49:04 2024 by rpki-client on console-fra.rpki-client.org