Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/iI4Q8IkXeA5Zkx2_FLASCJAbwaM.roa
File: iI4Q8IkXeA5Zkx2_FLASCJAbwaM.roa (raw, json)
Hash identifier: fDR4Ntaq1wzJiByKOb/In7Iv9HdpjqoN7S68BKThbfM=
Subject key identifier: 88:8E:10:F0:89:17:78:0E:59:93:1D:BF:14:B0:12:08:90:1B:C1:A3
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802F364655785B79C18121CF27926DA
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/iI4Q8IkXeA5Zkx2_FLASCJAbwaM.roa
Signing time: Tue 02 Jan 2024 02:31:25 +0000
ROA not before: Tue 02 Jan 2024 02:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51826
IP address blocks: 193.180.199.0/24 maxlen: 24
193.180.196.0/23 maxlen: 23
193.180.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:f3:64:65:57:85:b7:9c:18:12:1c:f2:79:26:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=888e10f08917780e59931dbf14b01208901bc1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3b:66:c6:0f:06:bd:2b:de:14:ad:48:1a:81:
cd:50:f0:64:ad:7a:a2:0f:b8:06:08:bb:92:a9:3a:
9c:ec:f7:01:09:d3:bd:64:58:7e:3c:78:64:2e:20:
ac:42:35:cd:d0:84:3a:45:42:7d:68:d5:70:4c:f3:
c2:a4:b6:ec:82:c6:7c:fd:d3:69:5b:c1:70:5d:ab:
0d:3b:99:57:a5:47:cf:cc:01:45:65:c0:a5:26:8e:
71:73:27:d7:5f:22:c3:3c:f7:52:7a:34:13:a2:4d:
e1:ea:39:e0:d6:e6:d8:99:5d:0f:09:b8:67:ae:aa:
c8:1e:2d:6d:2d:5a:0c:cb:c7:90:73:a4:88:87:c1:
d8:12:3f:c6:b3:b1:4a:4d:44:65:8d:8e:54:f6:05:
21:da:55:76:da:47:21:77:ec:8c:09:93:51:a2:89:
3b:64:ff:3b:c7:f5:b4:7c:40:97:ce:0d:e6:ca:3f:
5e:f8:7f:ae:4f:8b:aa:1c:c8:ce:36:48:ec:b8:93:
e7:fe:a6:5d:7a:71:93:d4:55:90:2b:5d:5a:50:15:
05:e2:b9:dd:62:a5:b8:22:13:9f:57:65:6e:00:e7:
fb:ee:d1:fc:2e:9a:14:6b:93:e5:d2:6a:4e:47:7f:
fd:5e:10:33:4d:07:f2:6c:d7:4e:b1:c5:a0:c9:91:
0e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8E:10:F0:89:17:78:0E:59:93:1D:BF:14:B0:12:08:90:1B:C1:A3
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/iI4Q8IkXeA5Zkx2_FLASCJAbwaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.196.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:f1:8e:24:cc:06:61:5f:ab:a2:52:46:42:1e:95:37:eb:00:
b9:d3:9c:78:20:47:2e:27:78:14:67:b3:57:90:c7:d6:61:42:
de:67:df:93:48:9d:86:8a:ed:78:ee:eb:4f:c6:37:90:4a:fe:
c3:51:f1:ae:72:8f:0c:d3:ba:24:43:6b:4e:af:f7:ae:a6:68:
22:48:4a:14:95:c3:85:8d:b4:83:10:96:20:1c:34:41:fe:85:
a4:4c:a6:f4:af:b9:61:74:58:1a:ec:fe:00:2a:8c:60:c8:a6:
77:2d:9e:f7:28:f2:1b:b6:e7:0d:03:2a:c0:2b:68:48:fb:1e:
9c:90:87:94:71:74:1e:68:a7:5f:6d:d1:06:0c:e6:5b:da:8d:
82:f9:41:44:8e:4a:33:78:5c:6d:ef:1b:2a:c9:88:46:c5:eb:
6e:92:76:d3:a5:a7:5d:ab:52:4d:58:01:1e:8f:6f:fd:f1:4e:
96:6e:f3:7a:3e:e1:7f:c7:25:08:1d:0a:3b:03:f9:16:1d:36:
2a:f7:14:00:7b:2e:32:dc:6d:e7:44:65:bf:4f:fb:7a:58:65:
b9:b9:b7:f6:c5:2f:d0:b5:cd:da:ed:b9:5a:a9:2a:94:b2:85:
5e:12:b7:cf:90:88:21:78:05:7b:de:75:4e:46:7f:69:d5:f8:
77:d1:7b:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAvNkZVeFt5wYEhzyeSbaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjQwMTAyMDIzMTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODhlMTBmMDg5MTc3ODBlNTk5MzFkYmYxNGIwMTIwODkwMWJjMWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnztmxg8GvSveFK1IGoHNUPBkrXqi
D7gGCLuSqTqc7PcBCdO9ZFh+PHhkLiCsQjXN0IQ6RUJ9aNVwTPPCpLbsgsZ8/dNp
W8FwXasNO5lXpUfPzAFFZcClJo5xcyfXXyLDPPdSejQTok3h6jng1ubYmV0PCbhn
rqrIHi1tLVoMy8eQc6SIh8HYEj/Gs7FKTURljY5U9gUh2lV22kchd+yMCZNRook7
ZP87x/W0fECXzg3myj9e+H+uT4uqHMjONkjsuJPn/qZdenGT1FWQK11aUBUF4rnd
YqW4IhOfV2VuAOf77tH8LpoUa5Pl0mpOR3/9XhAzTQfybNdOscWgyZEOpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIiOEPCJF3gOWZMdvxSwEgiQG8GjMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvaUk0UThJa1hlQTVaa3gyX0ZMQVNDSkFid2FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwbTEMA0G
CSqGSIb3DQEBCwUAA4IBAQBM8Y4kzAZhX6uiUkZCHpU36wC505x4IEcuJ3gUZ7NX
kMfWYULeZ9+TSJ2Giu147utPxjeQSv7DUfGuco8M07okQ2tOr/eupmgiSEoUlcOF
jbSDEJYgHDRB/oWkTKb0r7lhdFga7P4AKoxgyKZ3LZ73KPIbtucNAyrAK2hI+x6c
kIeUcXQeaKdfbdEGDOZb2o2C+UFEjkozeFxt7xsqyYhGxetuknbTpaddq1JNWAEe
j2/98U6WbvN6PuF/xyUIHQo7A/kWHTYq9xQAey4y3G3nRGW/T/t6WGW5ubf2xS/Q
tc3a7blaqSqUsoVeErfPkIgheAV73nVORn9p1fh30XuE
-----END CERTIFICATE-----
Generated at Sat May 18 17:02:14 2024 by rpki-client on console-fra.rpki-client.org