Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/S2VDxqp4UnH28noCQQr3XbhVEKs.roa
File: S2VDxqp4UnH28noCQQr3XbhVEKs.roa (raw, json)
Hash identifier: /YVm+mfnvBgmBO/Exd89wksMs1XS12lgYni5bwCXWrs=
Subject key identifier: 4B:65:43:C6:AA:78:52:71:F6:F2:7A:02:41:0A:F7:5D:B8:55:10:AB
Certificate issuer: /CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Certificate serial: 018CC64A897D8D6ADB1BCA1463598F41BF28
Authority key identifier: 23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/S2VDxqp4UnH28noCQQr3XbhVEKs.roa
Signing time: Mon 01 Jan 2024 18:30:22 +0000
ROA not before: Mon 01 Jan 2024 18:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207143
IP address blocks: 213.167.224.0/24 maxlen: 24
213.167.226.0/24 maxlen: 24
213.167.225.0/24 maxlen: 24
213.167.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:89:7d:8d:6a:db:1b:ca:14:63:59:8f:41:bf:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Validity
Not Before: Jan 1 18:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b6543c6aa785271f6f27a02410af75db85510ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:68:1d:68:4e:77:ae:b2:a0:7d:19:f5:86:
74:b4:4b:93:c3:dc:4f:43:61:8c:7f:8d:1f:02:2d:
e8:e5:c8:2b:fe:f2:24:7a:ec:34:46:86:fb:f9:d5:
02:e2:f9:2b:fd:a0:fe:90:40:40:54:49:e9:dc:2a:
6c:e7:f3:a9:22:ca:c7:dc:50:91:9c:4a:97:ad:e0:
51:a4:3a:42:37:9c:6d:c7:d7:58:67:be:77:62:cb:
45:31:cc:45:63:ba:1c:5e:7e:af:2f:25:69:82:86:
8d:d8:5f:4c:07:a5:10:90:ac:b6:81:9c:fb:62:ae:
95:52:c9:83:62:84:ca:52:a9:3b:b2:ec:22:db:f1:
78:4f:27:90:a1:bb:80:8d:bb:07:e5:e9:65:f5:ef:
ef:c7:1f:58:bb:3e:8d:04:60:03:5e:5e:fe:ec:6b:
82:21:18:1d:65:02:77:4f:64:c6:c4:38:cb:7d:0e:
33:16:88:ff:3f:cc:55:d7:38:3c:f2:7d:f5:0f:24:
e6:0e:bd:49:07:b6:66:ae:da:49:79:3f:b6:74:60:
db:55:1a:f3:4e:37:69:96:01:2b:4e:54:5b:b6:e4:
c1:9b:33:c5:12:71:af:a3:30:e4:25:df:4c:8e:ed:
83:9b:50:c0:9c:53:82:9e:64:99:e4:a9:1d:c7:6a:
66:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:65:43:C6:AA:78:52:71:F6:F2:7A:02:41:0A:F7:5D:B8:55:10:AB
X509v3 Authority Key Identifier:
keyid:23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/S2VDxqp4UnH28noCQQr3XbhVEKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.167.224.0/22
Signature Algorithm: sha256WithRSAEncryption
63:b9:c7:2c:4c:80:3e:a5:0d:ad:e2:8f:d7:be:9f:86:96:01:
d8:9f:67:5b:19:d7:5c:1c:15:eb:ff:c5:61:9e:12:92:3c:1c:
00:ac:16:b1:e5:0d:e8:83:34:f6:59:e8:9b:36:26:a7:4b:6e:
03:0f:a7:cd:47:8f:e1:26:93:76:2d:24:cb:bb:8a:81:e5:77:
6b:f8:e6:92:af:81:be:6c:33:2f:ed:bb:32:a3:7e:93:be:ab:
e8:14:da:b7:a9:64:ce:a9:70:94:44:13:2c:b2:65:f9:5b:ce:
f7:58:64:59:01:4b:b2:4c:8b:68:f0:3e:64:7c:5a:50:d9:d5:
df:28:b8:98:fb:60:8a:d1:e1:cf:2c:ef:e1:b5:be:41:d9:6c:
9a:83:5f:ef:64:4d:f0:e3:a5:94:f0:1b:6d:db:c7:ae:c1:42:
b7:f0:4f:ee:81:4c:f7:50:ca:d9:c8:63:8d:05:4c:1d:87:dd:
6e:06:9b:8c:bc:76:a3:a3:72:f1:f2:63:90:75:5d:00:0e:ab:
5f:86:ee:cd:ba:49:9e:03:69:0f:31:02:8d:1a:6c:08:b9:3a:
e7:c8:91:d5:96:f3:25:e7:92:51:54:e0:18:89:7e:78:5d:a0:
20:42:b7:72:d2:c4:2f:e5:e7:e5:a3:9b:c1:ba:1a:df:37:31:
9d:a5:58:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSol9jWrbG8oUY1mPQb8oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZTIyZjhiZGVkY2JlMTliYjMzZmNlMTRmYzFkYjZhZTNh
NDBlOTAwHhcNMjQwMTAxMTgzMDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjY1NDNjNmFhNzg1MjcxZjZmMjdhMDI0MTBhZjc1ZGI4NTUxMGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHFoHWhOd66yoH0Z9YZ0tEuTw9xP
Q2GMf40fAi3o5cgr/vIkeuw0Rob7+dUC4vkr/aD+kEBAVEnp3Cps5/OpIsrH3FCR
nEqXreBRpDpCN5xtx9dYZ753YstFMcxFY7ocXn6vLyVpgoaN2F9MB6UQkKy2gZz7
Yq6VUsmDYoTKUqk7suwi2/F4TyeQobuAjbsH5ell9e/vxx9Yuz6NBGADXl7+7GuC
IRgdZQJ3T2TGxDjLfQ4zFoj/P8xV1zg88n31DyTmDr1JB7ZmrtpJeT+2dGDbVRrz
TjdplgErTlRbtuTBmzPFEnGvozDkJd9Mju2Dm1DAnFOCnmSZ5Kkdx2pmPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEtlQ8aqeFJx9vJ6AkEK9124VRCrMB8GA1UdIwQY
MBaAFCPiL4ve3L4ZuzP84U/B22rjpA6QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSS1Jdmk5N2N2aG03TV96aFQ4SGJhdU9rRHBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lNmEwZGItYzc2Ni00OTkxLWI3MmMt
NzRiZDA0NWIyYWY3LzEvUzJWRHhxcDRVbkgyOG5vQ1FRcjNYYmhWRUtzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9lNmEwZGItYzc2Ni00OTkxLWI3MmMtNzRiZDA0NWIyYWY3
LzEvSS1Jdmk5N2N2aG03TV96aFQ4SGJhdU9rRHBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1afgMA0G
CSqGSIb3DQEBCwUAA4IBAQBjuccsTIA+pQ2t4o/Xvp+GlgHYn2dbGddcHBXr/8Vh
nhKSPBwArBax5Q3ogzT2WeibNianS24DD6fNR4/hJpN2LSTLu4qB5Xdr+OaSr4G+
bDMv7bsyo36TvqvoFNq3qWTOqXCURBMssmX5W873WGRZAUuyTIto8D5kfFpQ2dXf
KLiY+2CK0eHPLO/htb5B2Wyag1/vZE3w46WU8Btt28euwUK38E/ugUz3UMrZyGON
BUwdh91uBpuMvHajo3Lx8mOQdV0ADqtfhu7NukmeA2kPMQKNGmwIuTrnyJHVlvMl
55JRVOAYiX54XaAgQrdy0sQv5eflo5vBuhrfNzGdpVgx
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:07 2024 by rpki-client on console-fra.rpki-client.org