Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/F428An-We95b2A90Edzv5AvNMlM.roa
File: F428An-We95b2A90Edzv5AvNMlM.roa (raw, json)
Hash identifier: 4r6x+PUyEZGsdRfV03IMjsnMQmmonNerv7jkWr7g6n0=
Subject key identifier: 17:8D:BC:02:7F:96:7B:DE:5B:D8:0F:74:11:DC:EF:E4:0B:CD:32:53
Certificate issuer: /CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Certificate serial: 01907DB2F5F9F771FAD873EAE465A2A41D7A
Authority key identifier: D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/F428An-We95b2A90Edzv5AvNMlM.roa
Signing time: Thu 04 Jul 2024 12:23:18 +0000
ROA not before: Thu 04 Jul 2024 12:23:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59956
IP address blocks: 176.117.88.0/22 maxlen: 22
176.117.92.0/24 maxlen: 24
176.117.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Jul 2024 20:47:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7d:b2:f5:f9:f7:71:fa:d8:73:ea:e4:65:a2:a4:1d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Validity
Not Before: Jul 4 12:23:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=178dbc027f967bde5bd80f7411dcefe40bcd3253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:53:5b:a0:b9:26:df:d3:86:4e:a8:a3:9f:
aa:9a:04:fd:17:a1:dc:83:06:3d:79:15:ce:c1:18:
19:91:1f:36:a6:65:a3:c3:76:27:68:08:48:f2:5d:
e2:e4:75:8c:2a:19:b5:39:79:3f:70:98:63:a6:13:
da:d7:84:45:0d:6c:14:d5:03:b3:3a:dc:c9:14:41:
22:a9:90:4a:b4:3b:40:10:02:f5:ce:5e:45:5c:c7:
e8:ac:37:f7:34:81:02:79:5a:11:2a:d2:2d:04:09:
0b:f4:42:9b:c2:d1:0a:3d:39:95:77:ad:7d:ae:04:
40:dd:1f:38:dd:86:b3:a3:42:7f:dc:67:05:32:d5:
a4:11:ca:e5:98:bf:82:3c:6c:e5:12:05:72:8d:a7:
a1:ab:ec:9d:d7:f9:80:82:7c:be:40:bf:db:75:58:
e2:09:f3:63:70:98:95:44:4e:c3:49:a0:d4:ff:33:
2d:c6:cd:68:58:70:83:f1:97:dc:bb:84:cc:30:6d:
ec:fa:8b:60:16:0b:6b:34:60:8b:20:7e:39:92:11:
c2:6f:b2:c9:0c:0e:49:dd:98:4e:a1:0b:86:e2:71:
43:2b:bc:3f:74:ec:0b:83:ad:1b:54:e1:9c:f7:1d:
ce:f5:a8:9c:58:1a:f6:8c:66:75:1d:fa:67:98:44:
02:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8D:BC:02:7F:96:7B:DE:5B:D8:0F:74:11:DC:EF:E4:0B:CD:32:53
X509v3 Authority Key Identifier:
keyid:D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/F428An-We95b2A90Edzv5AvNMlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.88.0-176.117.92.255
176.117.94.0/24
Signature Algorithm: sha256WithRSAEncryption
72:66:92:9f:9e:4e:db:51:e9:66:e2:d7:a2:5a:35:91:a6:7c:
9d:7b:5d:e3:78:c4:d0:5c:19:1f:8a:34:fc:8e:2a:5a:c8:8b:
14:70:8a:62:0e:a0:d5:90:7c:66:14:cd:40:d9:71:f8:84:cd:
17:47:83:8a:0f:9c:a5:63:5d:d1:f3:98:44:07:0a:59:e1:bf:
ff:90:88:eb:62:4d:5f:04:8b:b0:41:11:30:9a:a0:3b:70:0e:
e1:8a:ca:b0:e5:8f:35:d2:29:db:8d:de:70:85:01:4f:32:66:
d7:d2:23:49:30:31:7a:8f:13:e0:1f:de:cc:88:9b:ed:1a:b5:
63:c1:13:70:1d:23:87:6a:a8:e9:1c:4d:06:0f:3e:3c:e5:be:
f9:b9:2d:23:4c:d5:8b:f4:31:4c:32:8f:ff:55:9b:bd:50:e1:
07:19:1a:b1:40:8c:62:bd:43:03:a0:50:d3:a8:b9:5c:15:c8:
7d:7a:47:53:43:52:2e:80:33:9b:e0:8e:b2:fa:8b:07:cf:4e:
70:b5:c7:bf:10:9c:d7:de:fc:5d:a4:f4:ac:5b:a2:64:13:cd:
72:ae:59:0c:6c:b4:6c:88:c9:27:37:07:45:4b:2c:ce:c6:d5:
54:f5:24:75:ea:ae:43:87:a7:56:76:f9:e4:15:ce:10:a2:ab:
7c:2a:3b:15
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZB9svX593H62HPq5GWipB16MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMjk5Y2YxMmIzOGZmMTJkOTVmZmMwZDEzYWMxMmM2OWZl
MmMxY2EwHhcNMjQwNzA0MTIyMzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzhkYmMwMjdmOTY3YmRlNWJkODBmNzQxMWRjZWZlNDBiY2QzMjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+RTW6C5Jt/Thk6oo5+qmgT9F6Hc
gwY9eRXOwRgZkR82pmWjw3YnaAhI8l3i5HWMKhm1OXk/cJhjphPa14RFDWwU1QOz
OtzJFEEiqZBKtDtAEAL1zl5FXMforDf3NIECeVoRKtItBAkL9EKbwtEKPTmVd619
rgRA3R843Yazo0J/3GcFMtWkEcrlmL+CPGzlEgVyjaehq+yd1/mAgny+QL/bdVji
CfNjcJiVRE7DSaDU/zMtxs1oWHCD8Zfcu4TMMG3s+otgFgtrNGCLIH45khHCb7LJ
DA5J3ZhOoQuG4nFDK7w/dOwLg60bVOGc9x3O9aicWBr2jGZ1HfpnmEQCnQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFBeNvAJ/lnveW9gPdBHc7+QLzTJTMB8GA1UdIwQY
MBaAFNApnPErOP8S2V/8DROsEsaf4sHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMENtYzhTczRfeExaWF93TkU2d1N4cF9pd2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kNTgyYzQtMzZlMy00YTU3LTg3NTIt
ZTY0MWU3MTNkMWZhLzEvRjQyOEFuLVdlOTViMkE5MEVkenY1QXZOTWxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9kNTgyYzQtMzZlMy00YTU3LTg3NTItZTY0MWU3MTNkMWZh
LzEvMENtYzhTczRfeExaWF93TkU2d1N4cF9pd2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAOwdVgD
BACwdVwDBACwdV4wDQYJKoZIhvcNAQELBQADggEBAHJmkp+eTttR6Wbi16JaNZGm
fJ17XeN4xNBcGR+KNPyOKlrIixRwimIOoNWQfGYUzUDZcfiEzRdHg4oPnKVjXdHz
mEQHClnhv/+QiOtiTV8Ei7BBETCaoDtwDuGKyrDljzXSKduN3nCFAU8yZtfSI0kw
MXqPE+Af3syIm+0atWPBE3AdI4dqqOkcTQYPPjzlvvm5LSNM1Yv0MUwyj/9Vm71Q
4QcZGrFAjGK9QwOgUNOouVwVyH16R1NDUi6AM5vgjrL6iwfPTnC1x78QnNfe/F2k
9KxbomQTzXKuWQxstGyIySc3B0VLLM7G1VT1JHXqrkOHp1Z2+eQVzhCiq3wqOxU=
-----END CERTIFICATE-----
Generated at Thu Jul 11 06:03:03 2024 by rpki-client on console.sobornost.net