Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/AjMhZ1IOEWzTMXzl8qMwRFNqLy4.roa
File: AjMhZ1IOEWzTMXzl8qMwRFNqLy4.roa (raw, json)
Hash identifier: udphLrplCGN19WYihOsssOOt+zaDjRwIq+toXD7iHBQ=
Subject key identifier: 02:33:21:67:52:0E:11:6C:D3:31:7C:E5:F2:A3:30:44:53:6A:2F:2E
Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06
Certificate serial: 018CC727487D12D4B87867D85A1B1071C813
Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/AjMhZ1IOEWzTMXzl8qMwRFNqLy4.roa
Signing time: Mon 01 Jan 2024 22:31:29 +0000
ROA not before: Mon 01 Jan 2024 22:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35280
IP address blocks: 128.139.0.0/17 maxlen: 17
128.139.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:48:7d:12:d4:b8:78:67:d8:5a:1b:10:71:c8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06
Validity
Not Before: Jan 1 22:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02332167520e116cd3317ce5f2a33044536a2f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7a:de:9a:11:0d:eb:aa:7f:ed:2c:4b:49:4a:
92:6f:eb:32:8f:0a:1e:52:32:59:a3:3a:d1:8f:f3:
9e:5c:8e:93:04:8d:ae:15:7f:38:aa:68:89:54:66:
a2:8d:09:97:14:ef:4d:4f:81:4f:77:32:d2:40:80:
98:73:3c:29:2c:a5:e9:86:7b:68:3d:83:63:f5:44:
78:88:31:9d:bc:72:c8:72:d8:86:d2:01:69:33:73:
fa:10:6f:34:01:aa:84:bb:6e:f6:52:46:12:fc:a5:
14:6d:3a:45:df:61:17:bb:8f:6f:34:f4:6c:97:84:
08:6c:7d:f4:4c:9f:14:48:8e:ee:63:89:57:2a:64:
78:ce:87:4f:91:dc:16:6f:b2:be:6c:f1:20:e7:f0:
aa:6b:49:a1:fb:2e:73:c2:8d:3d:43:dd:1b:bf:31:
98:20:9f:99:1c:a2:39:f9:1d:0a:fe:0d:8e:1b:28:
1b:e6:1d:9b:cb:5b:59:a9:e3:5b:97:c1:3c:42:29:
fc:de:d3:dd:e3:82:d0:61:ec:ed:94:99:73:36:42:
87:cd:bb:4c:b5:7d:60:c6:14:86:98:73:e8:50:20:
56:73:d4:33:29:d2:72:43:1c:04:31:e7:ef:11:58:
b6:8d:88:ab:61:e2:ee:42:18:b0:fd:b9:41:59:a4:
e0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:33:21:67:52:0E:11:6C:D3:31:7C:E5:F2:A3:30:44:53:6A:2F:2E
X509v3 Authority Key Identifier:
keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/AjMhZ1IOEWzTMXzl8qMwRFNqLy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.139.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8d:2b:95:6e:86:f6:93:cc:0a:5c:18:c1:66:87:ac:9e:98:a1:
e9:5b:6c:82:4a:aa:0d:ba:99:70:a5:bf:a9:2b:1d:fc:64:3b:
93:25:4b:1e:1f:a3:6a:61:12:bb:c4:47:d4:96:b4:19:1f:f0:
c8:9e:c2:c1:60:b9:9c:df:66:3e:5d:00:e8:cb:98:e3:64:6e:
b1:6a:1e:57:af:b9:e7:21:77:85:2b:e0:23:e7:87:6e:a5:e4:
d2:e3:a4:e4:16:01:7a:8f:5c:76:70:9d:58:ad:64:7b:b0:51:
e0:07:5a:f6:22:86:62:5e:dd:61:fb:2d:9b:d5:e9:21:f1:22:
c8:c2:57:9c:3b:10:52:cb:4b:92:4f:80:bf:98:af:10:63:2d:
c0:d3:f6:2f:a9:4c:af:62:42:49:7b:4f:8c:e5:6e:76:ce:5e:
a5:9b:b9:d5:69:9c:a7:57:4f:a0:48:cd:81:a4:25:75:3d:4e:
b3:5b:a6:9e:0a:f1:b0:db:3a:94:a8:41:08:82:9c:bd:c7:ea:
d9:91:b9:c1:34:4e:36:9e:d9:52:2e:5a:5b:db:53:52:e4:29:
f6:6e:c5:f3:c5:42:e7:58:a0:bf:1d:5c:03:9a:63:db:23:20:
15:3d:0c:24:c9:9e:2c:c9:ea:fa:00:05:65:44:92:2d:8f:12:
ab:91:20:3a
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYzHJ0h9EtS4eGfYWhsQccgTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZmE1OTZhMzEyNmFjZTAyOWM2ZDcwZDUyOTI1N2UwN2Iz
OGJhMDYwHhcNMjQwMTAxMjIzMTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjMzMjE2NzUyMGUxMTZjZDMzMTdjZTVmMmEzMzA0NDUzNmEyZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHremhEN66p/7SxLSUqSb+syjwoe
UjJZozrRj/OeXI6TBI2uFX84qmiJVGaijQmXFO9NT4FPdzLSQICYczwpLKXphnto
PYNj9UR4iDGdvHLIctiG0gFpM3P6EG80AaqEu272UkYS/KUUbTpF32EXu49vNPRs
l4QIbH30TJ8USI7uY4lXKmR4zodPkdwWb7K+bPEg5/Cqa0mh+y5zwo09Q90bvzGY
IJ+ZHKI5+R0K/g2OGygb5h2by1tZqeNbl8E8Qin83tPd44LQYeztlJlzNkKHzbtM
tX1gxhSGmHPoUCBWc9QzKdJyQxwEMefvEVi2jYirYeLuQhiw/blBWaTg4wIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFAIzIWdSDhFs0zF85fKjMERTai8uMB8GA1UdIwQY
MBaAFB76WWoxJqzgKcbXDVKSV+B7OLoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODIt
OWQwYzYyMDczNWYxLzEvQWpNaFoxSU9FV3pUTVh6bDhxTXdSRk5xTHk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODItOWQwYzYyMDczNWYx
LzEvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgIswDQYJ
KoZIhvcNAQELBQADggEBAI0rlW6G9pPMClwYwWaHrJ6YoelbbIJKqg26mXClv6kr
HfxkO5MlSx4fo2phErvER9SWtBkf8MiewsFguZzfZj5dAOjLmONkbrFqHlevuech
d4Ur4CPnh26l5NLjpOQWAXqPXHZwnVitZHuwUeAHWvYihmJe3WH7LZvV6SHxIsjC
V5w7EFLLS5JPgL+YrxBjLcDT9i+pTK9iQkl7T4zlbnbOXqWbudVpnKdXT6BIzYGk
JXU9TrNbpp4K8bDbOpSoQQiCnL3H6tmRucE0Tjae2VIuWlvbU1LkKfZuxfPFQudY
oL8dXAOaY9sjIBU9DCTJnizJ6voABWVEki2PEquRIDo=
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:35:58 2024 by rpki-client on console-ams.rpki-client.org