Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/j2h5d7DXx5HYJhYvVJyIfIdF_MM.roa
File: j2h5d7DXx5HYJhYvVJyIfIdF_MM.roa (raw, json)
Hash identifier: ngMvXG2sQB9tjurysZe5KtvASweHxj0U4mllmF8TYCU=
Subject key identifier: 8F:68:79:77:B0:D7:C7:91:D8:26:16:2F:54:9C:88:7C:87:45:FC:C3
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019001D06B70E000F5423670D5632D34B7BA
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/j2h5d7DXx5HYJhYvVJyIfIdF_MM.roa
Signing time: Mon 10 Jun 2024 11:02:34 +0000
ROA not before: Mon 10 Jun 2024 11:02:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28049
IP address blocks: 217.76.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:01:d0:6b:70:e0:00:f5:42:36:70:d5:63:2d:34:b7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jun 10 11:02:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f687977b0d7c791d826162f549c887c8745fcc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fa:eb:89:14:70:4c:3b:cd:43:be:c0:59:ef:
a9:00:57:28:c0:1f:46:da:e5:65:19:d0:fc:27:ce:
fb:51:eb:6e:98:27:77:78:26:c0:6e:b3:99:cb:a0:
98:ee:8e:07:eb:ec:14:d7:4b:aa:f8:05:48:5d:ab:
23:ff:79:41:8b:55:76:2c:9f:22:cb:4d:8c:ad:c3:
f8:ce:85:93:34:77:4b:b6:d8:36:62:a6:10:e8:7b:
c8:5f:2b:4e:bf:3a:db:89:fd:22:c0:4d:56:a3:12:
c4:a8:0c:fd:8e:89:d2:60:28:27:a0:6c:cb:e7:4d:
a9:32:5d:47:9b:eb:e8:89:2a:9b:37:3b:f5:8b:33:
e3:82:51:02:36:50:f1:4a:51:71:7b:c2:b7:e3:7c:
0a:12:e9:bd:f9:3a:d9:24:c1:c7:8b:1f:9d:47:7b:
48:9d:d4:6b:fb:3a:69:b0:8f:c2:86:7d:9c:10:92:
f4:77:d4:58:a8:2c:4a:59:0d:3a:24:1a:33:41:dd:
da:02:59:73:b5:21:d6:5b:6e:d1:5f:22:1d:cf:90:
bf:07:bf:04:d9:ce:9a:0c:f2:48:5f:72:29:9c:cf:
97:9e:74:fc:23:56:48:38:0b:ca:c7:63:fd:9d:bd:
cc:58:51:f6:cb:8c:d7:e9:eb:5f:a0:c6:ea:79:94:
cd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:68:79:77:B0:D7:C7:91:D8:26:16:2F:54:9C:88:7C:87:45:FC:C3
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/j2h5d7DXx5HYJhYvVJyIfIdF_MM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.76.240.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:5d:1b:03:b6:0b:c0:1e:a2:2f:9b:2f:c3:e1:e0:49:6c:87:
e9:77:cd:b6:d1:1b:af:57:6a:ae:c6:98:f4:85:9d:72:5b:fe:
0a:53:a1:40:9e:cc:dd:dd:e9:2a:22:10:ae:3b:17:a1:f3:49:
7a:22:70:da:c1:da:16:b8:40:6c:92:8c:67:f9:3a:91:8f:e1:
b7:b8:06:c5:af:c7:41:af:91:66:2a:b7:3e:3b:f2:fa:d1:77:
51:dd:0a:38:39:38:12:e6:56:03:9a:8f:f4:48:22:39:12:cf:
f3:66:cd:ba:1a:56:0b:c5:f5:75:60:b8:95:f4:41:c3:57:9c:
ff:cc:33:c2:0a:77:0a:e6:68:7d:05:f8:01:4e:ee:80:25:82:
4e:0b:20:82:44:a4:f7:14:d1:69:7a:2e:c9:d3:4a:71:b0:0a:
3a:31:a2:88:e5:e4:39:a7:e8:26:e3:e2:27:41:b7:d0:ad:80:
59:c6:b9:d6:fd:ba:6e:0b:81:7a:6b:39:f4:b1:fd:08:f2:bf:
94:ed:9e:f3:d0:54:1d:d3:c8:8c:b7:81:5f:95:ba:29:d9:03:
5e:20:dd:65:03:80:cb:50:1f:eb:84:b5:f9:92:a9:69:4c:33:
9c:7a:99:89:d5:b8:7c:36:b0:c0:f2:ac:12:56:70:ec:8d:c9:
a3:f3:f6:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZAB0Gtw4AD1QjZw1WMtNLe6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjQwNjEwMTEwMjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjY4Nzk3N2IwZDdjNzkxZDgyNjE2MmY1NDljODg3Yzg3NDVmY2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPrriRRwTDvNQ77AWe+pAFcowB9G
2uVlGdD8J877UetumCd3eCbAbrOZy6CY7o4H6+wU10uq+AVIXasj/3lBi1V2LJ8i
y02MrcP4zoWTNHdLttg2YqYQ6HvIXytOvzrbif0iwE1WoxLEqAz9jonSYCgnoGzL
502pMl1Hm+voiSqbNzv1izPjglECNlDxSlFxe8K343wKEum9+TrZJMHHix+dR3tI
ndRr+zppsI/Chn2cEJL0d9RYqCxKWQ06JBozQd3aAllztSHWW27RXyIdz5C/B78E
2c6aDPJIX3IpnM+XnnT8I1ZIOAvKx2P9nb3MWFH2y4zX6etfoMbqeZTN8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI9oeXew18eR2CYWL1SciHyHRfzDMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvajJoNWQ3RFh4NUhZSmhZdlZKeUlmSWRGX01NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2UzwMA0G
CSqGSIb3DQEBCwUAA4IBAQA9XRsDtgvAHqIvmy/D4eBJbIfpd8220RuvV2quxpj0
hZ1yW/4KU6FAnszd3ekqIhCuOxeh80l6InDawdoWuEBskoxn+TqRj+G3uAbFr8dB
r5FmKrc+O/L60XdR3Qo4OTgS5lYDmo/0SCI5Es/zZs26GlYLxfV1YLiV9EHDV5z/
zDPCCncK5mh9BfgBTu6AJYJOCyCCRKT3FNFpei7J00pxsAo6MaKI5eQ5p+gm4+In
QbfQrYBZxrnW/bpuC4F6azn0sf0I8r+U7Z7z0FQd08iMt4Fflbop2QNeIN1lA4DL
UB/rhLX5kqlpTDOcepmJ1bh8NrDA8qwSVnDsjcmj8/bV
-----END CERTIFICATE-----
Generated at Tue Jun 18 11:24:28 2024 by rpki-client on console-ams.rpki-client.org