Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/IXMlx0S8JiiILOX9Df9JwcR9-7A.roa
File: IXMlx0S8JiiILOX9Df9JwcR9-7A.roa (raw, json)
Hash identifier: EBWqhcIVG6iM5EothtWLeTsBZiviPSYitsxMWEI41Tk=
Subject key identifier: 21:73:25:C7:44:BC:26:28:88:2C:E5:FD:0D:FF:49:C1:C4:7D:FB:B0
Certificate issuer: /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial: 018CC5DCA184AB6D35EBFB0B385E4DBC0526
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/IXMlx0S8JiiILOX9Df9JwcR9-7A.roa
Signing time: Mon 01 Jan 2024 16:30:19 +0000
ROA not before: Mon 01 Jan 2024 16:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198623
IP address blocks: 37.77.192.0/21 maxlen: 24
193.104.81.0/24 maxlen: 24
37.123.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:a1:84:ab:6d:35:eb:fb:0b:38:5e:4d:bc:05:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
Validity
Not Before: Jan 1 16:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=217325c744bc2628882ce5fd0dff49c1c47dfbb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:78:7c:78:a3:89:e9:e0:c2:2f:dc:8f:9d:8c:
88:ae:c4:a2:78:20:f7:85:34:0a:c5:a2:7d:eb:5a:
51:36:17:da:4c:f9:09:b4:3c:f2:00:a1:bb:a2:14:
6f:8d:9c:e3:f2:c8:d3:e4:47:cd:d0:d8:f4:b0:da:
39:db:9f:57:b7:36:3e:7f:b5:f9:3c:3d:72:50:72:
af:5a:9f:09:71:ce:fe:37:55:0e:94:81:3d:bb:3b:
e6:bd:07:a0:1f:42:d7:c6:a4:a2:7d:e0:c3:52:3d:
e4:5e:52:f5:f6:06:c2:7e:45:31:ee:27:99:db:ff:
bf:9d:32:69:40:4c:cd:3f:67:4d:c5:84:dd:eb:d4:
5e:ea:69:ff:38:d5:f0:7a:b5:5e:d8:34:30:47:cc:
cf:e4:b0:c9:93:66:1d:7a:8e:89:50:a7:be:7f:b2:
12:30:6a:54:65:e9:1c:1d:89:2e:61:ac:51:32:89:
32:e0:a6:75:5e:a6:38:06:65:b8:94:bc:f0:a1:04:
54:64:fd:dd:03:1b:8d:94:1e:c4:83:11:bc:1b:f4:
7f:84:82:3d:84:ea:87:71:4e:00:8b:7c:8f:51:23:
3f:9c:4c:06:ef:f4:8a:5a:fe:6a:0b:86:4e:59:43:
f7:14:d7:1d:42:48:f1:68:22:f4:cb:04:89:27:07:
59:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:73:25:C7:44:BC:26:28:88:2C:E5:FD:0D:FF:49:C1:C4:7D:FB:B0
X509v3 Authority Key Identifier:
keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/IXMlx0S8JiiILOX9Df9JwcR9-7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.192.0/21
37.123.248.0/21
193.104.81.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:c6:54:19:cc:5b:3f:8c:82:81:8e:0f:49:d1:d8:82:82:e8:
68:56:f2:80:95:12:56:8f:41:e1:fb:c9:1d:1c:b2:ca:44:a5:
2a:08:39:c7:46:1b:e9:72:8b:43:a4:4d:a9:b2:03:b2:75:8c:
6c:d5:cf:aa:12:a0:42:f3:7f:13:15:a0:84:45:e4:5e:ae:b1:
40:f2:7e:a0:f2:e8:16:e2:f5:50:d7:f7:f1:38:9f:79:f0:e6:
8a:7d:fd:0d:3b:96:6b:43:ca:a0:26:8e:d0:7f:7a:cf:a9:2f:
53:2d:26:d7:f8:df:02:a7:f4:38:64:1c:9c:9a:2e:08:81:a2:
97:e2:a4:bc:e9:8c:19:7f:d3:1f:91:3d:99:a6:63:17:85:8b:
96:6b:df:7f:45:56:3d:19:5a:f9:39:29:a0:6d:93:f8:47:0e:
d6:1f:5a:57:13:de:cd:bd:c0:ca:e9:44:be:70:8e:70:86:f5:
60:a5:66:51:bb:49:7f:ee:fd:18:14:ad:e8:e4:ee:f2:13:9f:
73:17:10:3e:83:0b:d2:bf:62:1f:c3:cf:9c:ba:64:27:4e:98:
6c:39:eb:58:62:93:67:ae:50:df:18:49:84:49:d2:21:c7:a7:
b1:db:f5:16:5f:ec:5c:16:b5:e3:e7:24:b3:a9:c7:ce:70:53:
cf:d3:ad:7c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzF3KGEq2016/sLOF5NvAUmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZGI3Y2E0ZWVlMWU0NTNkMjZmYWI5OWM4MjAxYWRmODk0
NjEyYmUwHhcNMjQwMTAxMTYzMDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTczMjVjNzQ0YmMyNjI4ODgyY2U1ZmQwZGZmNDljMWM0N2RmYmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinh8eKOJ6eDCL9yPnYyIrsSieCD3
hTQKxaJ961pRNhfaTPkJtDzyAKG7ohRvjZzj8sjT5EfN0Nj0sNo5259XtzY+f7X5
PD1yUHKvWp8Jcc7+N1UOlIE9uzvmvQegH0LXxqSifeDDUj3kXlL19gbCfkUx7ieZ
2/+/nTJpQEzNP2dNxYTd69Re6mn/ONXwerVe2DQwR8zP5LDJk2Ydeo6JUKe+f7IS
MGpUZekcHYkuYaxRMoky4KZ1XqY4BmW4lLzwoQRUZP3dAxuNlB7EgxG8G/R/hII9
hOqHcU4Ai3yPUSM/nEwG7/SKWv5qC4ZOWUP3FNcdQkjxaCL0ywSJJwdZLQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCFzJcdEvCYoiCzl/Q3/ScHEffuwMB8GA1UdIwQY
MBaAFCnbfKTu4eRT0m+rmcggGt+JRhK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83ZjI5MGItODFjNy00MmI3LTk0N2Yt
ZDMzZmExNjA1YWUxLzEvSVhNbHgwUzhKaWlJTE9YOURmOUp3Y1I5LTdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy83ZjI5MGItODFjNy00MmI3LTk0N2YtZDMzZmExNjA1YWUx
LzEvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDJU3AAwQD
JXv4AwQAwWhRMA0GCSqGSIb3DQEBCwUAA4IBAQClxlQZzFs/jIKBjg9J0diCguho
VvKAlRJWj0Hh+8kdHLLKRKUqCDnHRhvpcotDpE2psgOydYxs1c+qEqBC838TFaCE
ReRerrFA8n6g8ugW4vVQ1/fxOJ958OaKff0NO5ZrQ8qgJo7Qf3rPqS9TLSbX+N8C
p/Q4ZBycmi4IgaKX4qS86YwZf9MfkT2ZpmMXhYuWa99/RVY9GVr5OSmgbZP4Rw7W
H1pXE97NvcDK6US+cI5whvVgpWZRu0l/7v0YFK3o5O7yE59zFxA+gwvSv2Ifw8+c
umQnTphsOetYYpNnrlDfGEmESdIhx6ex2/UWX+xcFrXj5ySzqcfOcFPP0618
-----END CERTIFICATE-----
Generated at Sat Jun 1 09:52:53 2024 by rpki-client on console-ams.rpki-client.org