Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/ifIyx49x8K3e0IN4rJuVDKOxoMc.roa
File: ifIyx49x8K3e0IN4rJuVDKOxoMc.roa (raw, json)
Hash identifier: 2Muj5EnaiJRcHSvAfpd/VYUp8/Fe+bGu/WfCGhRdi90=
Subject key identifier: 89:F2:32:C7:8F:71:F0:AD:DE:D0:83:78:AC:9B:95:0C:A3:B1:A0:C7
Certificate issuer: /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Certificate serial: 018CC9BCF079090B3405BB619F7330D9A498
Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/ifIyx49x8K3e0IN4rJuVDKOxoMc.roa
Signing time: Tue 02 Jan 2024 10:34:11 +0000
ROA not before: Tue 02 Jan 2024 10:34:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35583
IP address blocks: 185.191.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:f0:79:09:0b:34:05:bb:61:9f:73:30:d9:a4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Validity
Not Before: Jan 2 10:34:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89f232c78f71f0added08378ac9b950ca3b1a0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e9:94:f3:25:cf:2e:77:9c:2b:56:35:27:1c:
84:6c:93:67:e6:64:4c:9c:b4:d6:5c:a7:0f:dd:95:
7d:b5:74:d5:f7:23:97:ab:98:83:f4:99:cc:d4:6b:
53:a3:1b:35:a9:0c:63:d4:2c:22:bb:9c:0e:cb:9b:
5b:8b:d0:c9:d3:17:b9:58:01:72:d5:fa:52:98:f4:
d8:4b:01:77:a9:2e:2d:9c:e0:f2:0d:f1:69:fa:91:
d5:91:ac:eb:e1:2c:bc:df:79:40:89:1c:71:fe:9d:
2f:65:27:61:4f:2d:90:ed:9f:4d:a5:0a:d5:4b:b8:
8c:d9:f4:13:82:23:8b:3b:99:6e:9f:dd:e5:fd:fc:
4d:f2:39:eb:48:73:fe:bc:61:e0:a7:ca:09:e5:49:
cb:8e:07:20:7a:0b:cb:a1:37:2b:d9:c9:19:74:9b:
01:2f:80:be:7f:f8:98:40:7b:db:50:bd:13:e7:a7:
18:91:70:23:31:40:ca:78:da:24:0d:f6:bf:95:22:
5c:40:7d:64:9b:3e:7f:95:52:73:de:18:23:60:97:
99:ad:33:0d:3d:19:9f:0c:15:1c:10:6c:c2:d4:48:
ce:4e:8a:27:be:8a:c2:16:2f:24:b7:94:b3:69:6b:
0a:84:6e:cf:4f:72:78:10:66:78:ea:ec:92:a4:79:
96:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F2:32:C7:8F:71:F0:AD:DE:D0:83:78:AC:9B:95:0C:A3:B1:A0:C7
X509v3 Authority Key Identifier:
keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/ifIyx49x8K3e0IN4rJuVDKOxoMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.150.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:4b:13:ec:de:7e:fe:7b:b9:b7:fc:e3:07:39:dd:1f:ff:04:
22:4c:b4:d6:54:d4:cd:f7:fb:86:c2:92:ca:dd:53:49:b8:60:
6b:42:7e:cf:b6:a6:14:31:25:81:5c:d0:8d:fc:f9:1a:b8:0c:
90:48:cd:77:7e:5b:ff:f9:78:b2:68:46:c6:2a:4e:98:98:17:
51:26:72:3b:b3:e2:ec:b1:cc:00:7f:48:2a:9e:e4:9f:9b:22:
1f:fd:4f:62:6d:56:e8:fd:f6:f4:99:fd:6e:4a:c1:b8:ac:7d:
b4:c5:94:77:cb:d3:71:30:fb:72:53:11:8e:c0:63:8d:c5:d0:
54:84:13:34:53:c1:e3:cd:8d:a2:c6:52:a1:fe:d4:49:50:d4:
29:ce:91:10:7c:82:d1:9d:47:8b:d8:01:d0:ab:77:59:8e:6c:
75:c0:cb:bc:a7:3c:8f:4a:b1:1e:0f:b9:31:ef:52:42:14:3c:
f1:01:23:48:23:b4:96:69:c3:0c:3a:d0:38:5b:d4:45:eb:17:
f1:c7:dd:bb:29:dc:e0:48:1a:86:b1:c8:cb:35:38:b7:99:b8:
86:27:10:56:b0:16:74:fd:8c:81:b1:ba:a6:cb:07:99:53:0e:
9e:84:14:36:35:be:be:2d:a3:50:99:f5:6c:3f:e8:24:4c:ce:
d2:ba:2f:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvPB5CQs0Bbthn3Mw2aSYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzc4OWVjZjY3ZTA0Mjk4YzVlZTQ0YzY3ZDhmYjdmNWQ2
ZDk1YTEwHhcNMjQwMTAyMTAzNDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWYyMzJjNzhmNzFmMGFkZGVkMDgzNzhhYzliOTUwY2EzYjFhMGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OmU8yXPLnecK1Y1JxyEbJNn5mRM
nLTWXKcP3ZV9tXTV9yOXq5iD9JnM1GtToxs1qQxj1Cwiu5wOy5tbi9DJ0xe5WAFy
1fpSmPTYSwF3qS4tnODyDfFp+pHVkazr4Sy833lAiRxx/p0vZSdhTy2Q7Z9NpQrV
S7iM2fQTgiOLO5lun93l/fxN8jnrSHP+vGHgp8oJ5UnLjgcgegvLoTcr2ckZdJsB
L4C+f/iYQHvbUL0T56cYkXAjMUDKeNokDfa/lSJcQH1kmz5/lVJz3hgjYJeZrTMN
PRmfDBUcEGzC1EjOToonvorCFi8kt5SzaWsKhG7PT3J4EGZ46uySpHmWXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFInyMsePcfCt3tCDeKyblQyjsaDHMB8GA1UdIwQY
MBaAFEw3iez2fgQpjF7kTGfY+39dbZWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83ZWQ3YjEtYjhmMy00M2YzLTk2ZTMt
MWRjNTRkMWMwM2EzLzEvaWZJeXg0OXg4SzNlMElONHJKdVZES094b01jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC83ZWQ3YjEtYjhmMy00M2YzLTk2ZTMtMWRjNTRkMWMwM2Ez
LzEvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAub+WMA0G
CSqGSIb3DQEBCwUAA4IBAQBrSxPs3n7+e7m3/OMHOd0f/wQiTLTWVNTN9/uGwpLK
3VNJuGBrQn7PtqYUMSWBXNCN/PkauAyQSM13flv/+XiyaEbGKk6YmBdRJnI7s+Ls
scwAf0gqnuSfmyIf/U9ibVbo/fb0mf1uSsG4rH20xZR3y9NxMPtyUxGOwGONxdBU
hBM0U8HjzY2ixlKh/tRJUNQpzpEQfILRnUeL2AHQq3dZjmx1wMu8pzyPSrEeD7kx
71JCFDzxASNII7SWacMMOtA4W9RF6xfxx927KdzgSBqGscjLNTi3mbiGJxBWsBZ0
/YyBsbqmyweZUw6ehBQ2Nb6+LaNQmfVsP+gkTM7Sui8d
-----END CERTIFICATE-----
Generated at Fri Jun 7 16:36:02 2024 by rpki-client on console-fra.rpki-client.org