Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/IGFZdi20AQt5RH_u_uAm_q4OCOo.roa
File: IGFZdi20AQt5RH_u_uAm_q4OCOo.roa (raw, json)
Hash identifier: dYGq1gqy7BQxbsKVh3Lhvu51bImBIpANaPXpd9JBvRQ=
Subject key identifier: 20:61:59:76:2D:B4:01:0B:79:44:7F:EE:FE:E0:26:FE:AE:0E:08:EA
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 018CC7958D541ECC84BC3E83C9FDE5C60564
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/IGFZdi20AQt5RH_u_uAm_q4OCOo.roa
Signing time: Tue 02 Jan 2024 00:31:56 +0000
ROA not before: Tue 02 Jan 2024 00:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206647
IP address blocks: 89.223.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:8d:54:1e:cc:84:bc:3e:83:c9:fd:e5:c6:05:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Jan 2 00:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=206159762db4010b79447feefee026feae0e08ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7f:01:42:57:c3:0b:82:45:fe:05:46:87:d3:
9c:bc:e8:46:a6:d6:28:2c:5f:d1:48:a6:fb:20:97:
59:80:d8:1a:24:d1:e1:10:b2:b2:0e:dd:d4:50:86:
e6:0c:41:53:50:bf:27:92:1b:d4:00:36:1e:ac:14:
ff:62:93:14:ea:cf:d9:01:a5:f1:ef:be:51:19:86:
0c:33:81:a3:29:89:23:cd:73:4a:8f:a6:da:3b:8e:
bd:9c:05:3c:5d:13:0e:f1:00:41:db:d5:a3:7d:62:
26:79:a3:d3:27:e4:90:67:63:c0:4a:7d:02:3a:93:
05:1a:32:85:6c:4a:06:b7:21:ac:c4:6b:ae:f4:7f:
b1:27:9e:7f:a8:3c:f1:98:af:59:e6:58:88:96:7e:
dd:18:e5:75:6b:31:5b:46:ce:43:ec:50:bc:ea:6a:
90:53:75:37:bd:22:8d:0a:0f:f5:65:fd:2a:68:c7:
04:dd:9c:b7:ca:02:13:8b:08:85:21:69:7f:54:d8:
84:7b:72:05:d1:25:ae:13:bc:f9:3b:5c:35:e9:76:
91:d8:7a:8c:be:29:7b:85:ca:42:9f:36:07:9b:62:
91:a3:1d:b9:c2:50:52:08:f3:52:9b:5a:47:3d:be:
00:04:83:b6:34:70:37:55:ea:6c:9c:14:1e:4d:56:
d2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:61:59:76:2D:B4:01:0B:79:44:7F:EE:FE:E0:26:FE:AE:0E:08:EA
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/IGFZdi20AQt5RH_u_uAm_q4OCOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.223.17.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:ba:c0:bf:ea:97:35:82:3c:f5:7f:c1:b3:84:99:bf:6f:c2:
3c:5b:ea:80:cf:04:a3:42:70:2f:32:14:c4:61:32:7c:00:2b:
66:4d:be:78:90:86:43:f6:ee:54:d2:3c:0a:b3:50:82:66:f3:
70:91:0b:92:fa:ac:fa:f8:9a:05:39:d8:ef:a6:e6:68:77:eb:
2e:21:c8:c3:41:84:76:3d:e8:78:51:a7:ba:ee:ac:73:5a:96:
7f:10:49:e7:2f:e5:56:22:48:ef:27:49:ac:35:79:d7:96:d7:
63:f2:d7:39:cb:7e:84:e2:a5:a2:30:9e:b6:09:c8:63:82:4b:
dc:a6:bc:b2:37:9a:d9:40:af:f8:c7:b9:e7:42:e3:f9:13:ea:
22:ec:a8:29:9a:2c:76:1e:ca:8b:89:50:e1:4e:88:03:08:56:
10:25:c4:90:94:4c:65:f9:1d:f4:26:34:81:3d:2c:9f:17:b4:
4c:9a:a7:f6:0e:f0:9d:fc:22:84:67:11:e6:e2:6a:66:4c:7c:
56:c7:f5:4e:e5:60:76:98:1b:cb:b2:86:18:1f:f5:ca:fa:78:
8d:d6:e5:08:c2:60:4c:f4:9b:5a:5f:5e:d4:07:71:36:ab:64:
1b:20:69:11:7c:44:8a:07:97:d0:2b:59:49:d5:b0:c5:4b:be:
16:78:77:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlY1UHsyEvD6Dyf3lxgVkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz
NmM0ZmYwHhcNMjQwMTAyMDAzMTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDYxNTk3NjJkYjQwMTBiNzk0NDdmZWVmZWUwMjZmZWFlMGUwOGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo38BQlfDC4JF/gVGh9OcvOhGptYo
LF/RSKb7IJdZgNgaJNHhELKyDt3UUIbmDEFTUL8nkhvUADYerBT/YpMU6s/ZAaXx
775RGYYMM4GjKYkjzXNKj6baO469nAU8XRMO8QBB29WjfWImeaPTJ+SQZ2PASn0C
OpMFGjKFbEoGtyGsxGuu9H+xJ55/qDzxmK9Z5liIln7dGOV1azFbRs5D7FC86mqQ
U3U3vSKNCg/1Zf0qaMcE3Zy3ygITiwiFIWl/VNiEe3IF0SWuE7z5O1w16XaR2HqM
vil7hcpCnzYHm2KRox25wlBSCPNSm1pHPb4ABIO2NHA3VepsnBQeTVbSVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCBhWXYttAELeUR/7v7gJv6uDgjqMB8GA1UdIwQY
MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt
ODg2MmI1MTczMTdjLzEvSUdGWmRpMjBBUXQ1UkhfdV91QW1fcTRPQ09vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj
LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWd8RMA0G
CSqGSIb3DQEBCwUAA4IBAQCsusC/6pc1gjz1f8GzhJm/b8I8W+qAzwSjQnAvMhTE
YTJ8ACtmTb54kIZD9u5U0jwKs1CCZvNwkQuS+qz6+JoFOdjvpuZod+suIcjDQYR2
Peh4Uae67qxzWpZ/EEnnL+VWIkjvJ0msNXnXltdj8tc5y36E4qWiMJ62Cchjgkvc
pryyN5rZQK/4x7nnQuP5E+oi7Kgpmix2HsqLiVDhTogDCFYQJcSQlExl+R30JjSB
PSyfF7RMmqf2DvCd/CKEZxHm4mpmTHxWx/VO5WB2mBvLsoYYH/XK+niN1uUIwmBM
9JtaX17UB3E2q2QbIGkRfESKB5fQK1lJ1bDFS74WeHeI
-----END CERTIFICATE-----
Generated at Tue Jun 25 04:37:52 2024 by rpki-client on console-fra.rpki-client.org