Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/In4p6m9YaY3dXO3bhATWwrfdP_k.roa
File: In4p6m9YaY3dXO3bhATWwrfdP_k.roa (raw, json)
Hash identifier: 9Pf+6KKcwMGMLTPZ/98WmYnvNks+0PiF5+khycATk8U=
Subject key identifier: 22:7E:29:EA:6F:58:69:8D:DD:5C:ED:DB:84:04:D6:C2:B7:DD:3F:F9
Certificate issuer: /CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Certificate serial: 018CC8DF783BFA66C12AEC395727B0AA87D1
Authority key identifier: 7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/In4p6m9YaY3dXO3bhATWwrfdP_k.roa
Signing time: Tue 02 Jan 2024 06:32:17 +0000
ROA not before: Tue 02 Jan 2024 06:32:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209288
IP address blocks: 185.88.64.0/22 maxlen: 22
185.88.67.0/24 maxlen: 24
185.88.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:78:3b:fa:66:c1:2a:ec:39:57:27:b0:aa:87:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Validity
Not Before: Jan 2 06:32:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=227e29ea6f58698ddd5ceddb8404d6c2b7dd3ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cb:41:20:8d:38:6b:a2:61:f8:ae:20:e8:20:
b3:53:db:6f:3f:d6:f2:67:4a:4a:85:b6:25:af:a2:
f1:a5:f3:74:0f:2a:2c:37:2b:75:49:e5:42:ae:a0:
4a:7d:33:42:ba:80:9d:9d:ba:8b:b4:11:79:6b:e2:
fc:65:a6:34:23:2d:77:25:97:85:08:f1:bc:59:bb:
d4:f2:e9:e1:c2:e3:77:28:23:b5:b8:c6:33:ac:44:
9d:46:b5:2a:00:51:94:b3:12:8a:4c:4e:bf:b7:e5:
dc:15:95:5b:7d:df:55:ad:69:b3:21:9b:16:93:11:
f9:be:40:b1:3e:f6:1d:2e:37:72:4e:c0:59:6a:7c:
b1:39:c3:24:c7:ae:30:66:af:8f:4f:00:d3:91:e8:
14:35:48:db:d6:45:b1:f0:dd:65:fa:e7:1a:ad:7b:
1f:24:38:9d:7d:7e:41:70:c0:e9:5e:fd:9b:9c:bd:
d0:df:a9:ff:7e:3f:92:94:34:ad:84:b2:fe:75:5f:
7e:4d:31:1e:ea:96:ba:2c:9b:69:11:e8:08:73:db:
77:a1:3d:a0:91:d0:2a:63:c4:90:67:47:39:46:cc:
85:bc:27:ab:d8:d5:0c:a6:d4:33:67:2c:1a:9b:56:
b6:47:6c:a5:83:7a:ec:b9:eb:a2:89:23:e7:d9:d0:
62:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7E:29:EA:6F:58:69:8D:DD:5C:ED:DB:84:04:D6:C2:B7:DD:3F:F9
X509v3 Authority Key Identifier:
keyid:7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/In4p6m9YaY3dXO3bhATWwrfdP_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.64.0/22
Signature Algorithm: sha256WithRSAEncryption
60:2a:fd:15:20:63:8f:aa:c2:0a:b9:51:9e:a9:27:d3:f5:54:
07:a6:23:c5:21:e8:cb:55:be:96:34:8b:75:b0:77:f4:74:8b:
91:bb:fd:d0:ce:a5:b1:0f:de:4c:cf:ea:2d:48:92:90:95:0e:
9c:a8:a3:40:02:7a:e9:b1:d5:a9:73:db:72:e7:19:6a:2e:be:
57:59:80:42:b8:4f:ac:bc:f9:68:e6:52:23:df:ba:3b:58:5b:
05:8b:34:43:3a:c8:b6:69:a2:5b:f4:80:cc:71:05:f9:16:21:
5c:07:46:af:5b:7d:bd:6c:5b:8d:4e:45:b2:dd:05:01:d5:35:
d9:6c:c4:05:99:f9:2f:eb:a7:2d:f1:63:59:e4:c4:59:8c:4d:
c3:9b:0d:ae:3e:42:44:c1:36:10:f0:be:4b:43:63:18:f1:d7:
58:58:1b:e5:d7:bb:ab:53:20:85:a5:3a:ac:28:b6:9c:26:65:
16:fe:9c:8e:e0:35:6c:cd:aa:7d:13:ee:a8:71:e8:20:ff:55:
ac:d3:e5:15:3e:53:56:3e:d3:22:38:d2:55:7d:7b:48:fb:29:
ee:96:4f:e3:d5:c7:44:ce:19:ff:f9:9d:8e:53:fa:d8:fe:ad:
69:01:24:ee:45:80:93:b9:cb:2c:84:0d:be:cc:ae:43:ad:a0:
9d:f2:9b:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI33g7+mbBKuw5VyewqofRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYmFjYjFmYzJjMjA2MzA0Mjc4MTYzMWI1MTdjZTQ3NTIz
M2EyYmQwHhcNMjQwMTAyMDYzMjE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjdlMjllYTZmNTg2OThkZGQ1Y2VkZGI4NDA0ZDZjMmI3ZGQzZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMtBII04a6Jh+K4g6CCzU9tvP9by
Z0pKhbYlr6LxpfN0DyosNyt1SeVCrqBKfTNCuoCdnbqLtBF5a+L8ZaY0Iy13JZeF
CPG8WbvU8unhwuN3KCO1uMYzrESdRrUqAFGUsxKKTE6/t+XcFZVbfd9VrWmzIZsW
kxH5vkCxPvYdLjdyTsBZanyxOcMkx64wZq+PTwDTkegUNUjb1kWx8N1l+ucarXsf
JDidfX5BcMDpXv2bnL3Q36n/fj+SlDSthLL+dV9+TTEe6pa6LJtpEegIc9t3oT2g
kdAqY8SQZ0c5RsyFvCer2NUMptQzZywam1a2R2ylg3rsueuiiSPn2dBi9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCJ+KepvWGmN3Vzt24QE1sK33T/5MB8GA1UdIwQY
MBaAFH26yx/CwgYwQngWMbUXzkdSM6K9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmJyTEg4TENCakJDZUJZeHRSZk9SMUl6b3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zZDJkN2ItMmM1Yy00OThmLTg1YmYt
Mjg1ZWM4ZmU4ZWM2LzEvSW40cDZtOVlhWTNkWE8zYmhBVFd3cmZkUF9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zZDJkN2ItMmM1Yy00OThmLTg1YmYtMjg1ZWM4ZmU4ZWM2
LzEvZmJyTEg4TENCakJDZUJZeHRSZk9SMUl6b3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVhAMA0G
CSqGSIb3DQEBCwUAA4IBAQBgKv0VIGOPqsIKuVGeqSfT9VQHpiPFIejLVb6WNIt1
sHf0dIuRu/3QzqWxD95Mz+otSJKQlQ6cqKNAAnrpsdWpc9ty5xlqLr5XWYBCuE+s
vPlo5lIj37o7WFsFizRDOsi2aaJb9IDMcQX5FiFcB0avW329bFuNTkWy3QUB1TXZ
bMQFmfkv66ct8WNZ5MRZjE3Dmw2uPkJEwTYQ8L5LQ2MY8ddYWBvl17urUyCFpTqs
KLacJmUW/pyO4DVszap9E+6ocegg/1Ws0+UVPlNWPtMiONJVfXtI+ynulk/j1cdE
zhn/+Z2OU/rY/q1pASTuRYCTucsshA2+zK5DraCd8puf
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:16:54 2024 by rpki-client on console-fra.rpki-client.org