Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/SF60oK9CXA_e8zMLwgdbZo_xp7s.roa
File: SF60oK9CXA_e8zMLwgdbZo_xp7s.roa (raw, json)
Hash identifier: mma3ewnBzeT5/bPIVlFAFTBSHUKQzzoPJGOL/+g8zQk=
Subject key identifier: 48:5E:B4:A0:AF:42:5C:0F:DE:F3:33:0B:C2:07:5B:66:8F:F1:A7:BB
Certificate issuer: /CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Certificate serial: 018CC64A8D532DE2490A937E8A4BAA668732
Authority key identifier: A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/SF60oK9CXA_e8zMLwgdbZo_xp7s.roa
Signing time: Mon 01 Jan 2024 18:30:23 +0000
ROA not before: Mon 01 Jan 2024 18:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13004
IP address blocks: 88.218.139.0/24 maxlen: 24
188.120.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:8d:53:2d:e2:49:0a:93:7e:8a:4b:aa:66:87:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Validity
Not Before: Jan 1 18:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=485eb4a0af425c0fdef3330bc2075b668ff1a7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:85:ef:95:4a:53:cc:27:c9:8b:f0:63:a5:bf:
73:5f:da:16:8c:8e:c4:df:43:10:06:69:8b:cd:01:
35:c6:54:b0:36:d9:ac:23:b3:c0:30:5c:1b:03:07:
d0:5c:a3:24:94:fd:8f:a3:0b:44:5e:c9:90:c8:a6:
23:d5:93:49:19:da:e1:1e:0f:da:5a:1e:87:b5:46:
7f:d0:66:d5:4d:19:1c:fb:e3:59:d4:28:ee:d6:d6:
fd:d7:9b:37:d5:d5:7f:0c:90:10:e6:54:9d:50:0a:
3b:52:55:20:5e:89:85:f5:39:44:1f:78:6a:5e:41:
6c:e8:85:c2:2c:4d:94:7c:9a:d7:bf:02:1d:3f:2e:
43:5f:9d:2b:ef:48:7c:2b:26:38:ac:15:a1:91:87:
66:a8:f4:7d:bb:70:70:6c:2d:39:47:88:a2:e0:da:
31:58:5b:25:1c:85:15:f4:f7:a3:34:15:51:e1:c9:
74:e7:4e:50:ce:c5:e0:74:eb:e2:6f:ca:4a:d7:08:
a2:5f:0b:be:fd:f4:4e:1c:f8:a1:ae:4a:1c:85:a1:
bf:53:8d:36:b6:08:87:d5:f9:c8:a2:33:92:61:c1:
12:40:80:e9:6f:6e:4d:1b:1e:39:82:1f:70:18:80:
5b:0f:bf:2c:8a:b4:60:30:22:57:ac:7e:cc:03:61:
ff:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5E:B4:A0:AF:42:5C:0F:DE:F3:33:0B:C2:07:5B:66:8F:F1:A7:BB
X509v3 Authority Key Identifier:
keyid:A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/SF60oK9CXA_e8zMLwgdbZo_xp7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.139.0/24
188.120.127.0/24
Signature Algorithm: sha256WithRSAEncryption
84:a6:67:04:9c:c5:d3:18:41:62:e1:49:41:9a:e2:f5:9c:e2:
79:bb:51:78:15:ee:e3:09:33:e1:5e:82:c4:43:4e:f4:f1:c7:
1d:19:c9:55:7e:44:9b:19:47:a1:08:de:80:61:99:ae:ff:21:
03:b0:13:a0:a1:66:30:f9:da:41:e6:a7:2a:fa:e7:95:39:f5:
d6:d5:ce:1e:b9:ac:98:81:3a:70:e6:ab:76:bc:c9:26:93:23:
cf:f4:d6:75:7f:68:16:b9:d2:74:22:34:1a:e3:86:b7:21:5d:
b9:77:0d:fe:07:c4:81:6f:3e:f4:dd:87:6b:bc:17:e0:15:c0:
0e:25:5d:3a:a3:81:0d:94:65:8c:92:fb:5b:ba:9e:11:3e:76:
57:d8:85:a9:21:0d:4b:76:41:43:6b:bd:36:38:dc:03:e2:33:
1b:af:fa:10:50:8d:bc:ed:e9:82:91:44:e7:5d:19:2d:1b:f2:
af:34:db:05:fe:99:8a:ba:b2:e9:32:be:1d:33:b7:58:2e:09:
43:9e:e6:8f:2c:67:a5:12:7e:0a:5d:e2:9f:49:57:48:e5:59:
27:e4:17:f7:73:1f:dc:34:5f:9f:77:89:2a:64:28:1a:f4:d0:
8e:ef:69:0c:34:9e:8a:60:1f:2a:ce:fb:63:f5:45:fe:4d:fb:
ea:96:f6:31
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzGSo1TLeJJCpN+ikuqZocyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZTYwNmM3ZTkzZmVkMzZlZjkwZDQyY2U0YTk3MjYwYmI4
YWE5YzEwHhcNMjQwMTAxMTgzMDIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODVlYjRhMGFmNDI1YzBmZGVmMzMzMGJjMjA3NWI2NjhmZjFhN2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYXvlUpTzCfJi/Bjpb9zX9oWjI7E
30MQBmmLzQE1xlSwNtmsI7PAMFwbAwfQXKMklP2PowtEXsmQyKYj1ZNJGdrhHg/a
Wh6HtUZ/0GbVTRkc++NZ1Cju1tb915s31dV/DJAQ5lSdUAo7UlUgXomF9TlEH3hq
XkFs6IXCLE2UfJrXvwIdPy5DX50r70h8KyY4rBWhkYdmqPR9u3BwbC05R4ii4Nox
WFslHIUV9PejNBVR4cl0505QzsXgdOvib8pK1wiiXwu+/fROHPihrkochaG/U402
tgiH1fnIojOSYcESQIDpb25NGx45gh9wGIBbD78sirRgMCJXrH7MA2H/UwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEhetKCvQlwP3vMzC8IHW2aP8ae7MB8GA1UdIwQY
MBaAFKLmBsfpP+0275DULOSpcmC7iqnBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3VZR3gta183VGJ2a05RczVLbHlZTHVLcWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9kM2UyM2YtMGU1YS00OTIzLWFiMmYt
YTllYTIwNTcwNDJiLzEvU0Y2MG9LOUNYQV9lOHpNTHdnZGJab194cDdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9kM2UyM2YtMGU1YS00OTIzLWFiMmYtYTllYTIwNTcwNDJi
LzEvb3VZR3gta183VGJ2a05RczVLbHlZTHVLcWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWNqLAwQA
vHh/MA0GCSqGSIb3DQEBCwUAA4IBAQCEpmcEnMXTGEFi4UlBmuL1nOJ5u1F4Fe7j
CTPhXoLEQ0708ccdGclVfkSbGUehCN6AYZmu/yEDsBOgoWYw+dpB5qcq+ueVOfXW
1c4euayYgTpw5qt2vMkmkyPP9NZ1f2gWudJ0IjQa44a3IV25dw3+B8SBbz703Ydr
vBfgFcAOJV06o4ENlGWMkvtbup4RPnZX2IWpIQ1LdkFDa702ONwD4jMbr/oQUI28
7emCkUTnXRktG/KvNNsF/pmKurLpMr4dM7dYLglDnuaPLGelEn4KXeKfSVdI5Vkn
5Bf3cx/cNF+fd4kqZCga9NCO72kMNJ6KYB8qzvtj9UX+TfvqlvYx
-----END CERTIFICATE-----
Generated at Fri Jun 7 23:50:02 2024 by rpki-client on console-fra.rpki-client.org