Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/DjpiK-idFi9Jj0jLfFes12qpNkw.roa
File: DjpiK-idFi9Jj0jLfFes12qpNkw.roa (raw, json)
Hash identifier: p0j5AZyoRZ2m5AglnY2IwDKOgCTmoKmDLzax7CQJo9I=
Subject key identifier: 0E:3A:62:2B:E8:9D:16:2F:49:8F:48:CB:7C:57:AC:D7:6A:A9:36:4C
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 018CC3B744844F8B7C1B843ED4437EBA5849
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/DjpiK-idFi9Jj0jLfFes12qpNkw.roa
Signing time: Mon 01 Jan 2024 06:30:16 +0000
ROA not before: Mon 01 Jan 2024 06:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 194.32.147.0/24 maxlen: 24
185.113.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:44:84:4f:8b:7c:1b:84:3e:d4:43:7e:ba:58:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Jan 1 06:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e3a622be89d162f498f48cb7c57acd76aa9364c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:91:84:52:f3:2c:41:a6:4d:56:46:eb:7e:ec:
c8:11:50:a5:9b:3e:64:21:a4:67:18:03:ca:b7:e3:
ec:f3:1c:a1:41:ca:e9:2f:c5:e6:d5:68:d4:14:d7:
69:d7:8d:0c:30:ee:71:17:c1:7b:21:7e:d8:20:9a:
a1:5c:bb:24:81:c6:c3:76:9e:71:e1:14:ae:f6:a5:
53:0a:88:4a:3b:91:52:58:8d:56:8a:0b:44:a2:61:
6c:8f:86:5a:12:f8:72:2a:50:47:f4:92:e8:e5:b6:
04:9f:cf:a1:3b:61:9a:f8:fc:8c:10:08:19:71:db:
a2:74:66:6b:72:30:91:67:9d:0e:e5:71:8a:56:2a:
be:cf:6d:be:5d:8d:38:7a:44:4e:17:10:51:ba:a2:
7f:d8:44:b8:aa:1c:05:bb:3d:2a:97:5a:e1:ad:59:
34:d5:24:d2:6f:eb:84:0f:1a:af:17:a7:b4:cd:73:
5f:80:3b:cc:52:b2:e5:71:5e:6d:f2:62:c3:d9:8b:
83:e1:fa:48:7d:d8:4f:85:d0:69:57:62:ea:1e:3f:
06:d3:15:c0:e6:20:f4:73:24:80:06:84:99:77:09:
9d:91:00:66:55:6a:df:15:b5:ec:1e:56:81:be:4f:
cc:af:1c:4d:fc:b2:80:33:10:6b:0e:04:cb:ad:58:
76:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3A:62:2B:E8:9D:16:2F:49:8F:48:CB:7C:57:AC:D7:6A:A9:36:4C
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/DjpiK-idFi9Jj0jLfFes12qpNkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.11.0/24
194.32.147.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:3c:f8:cd:68:0b:aa:95:18:c8:9f:25:8d:29:0e:53:7c:08:
27:ef:bf:0b:ba:4c:fa:7e:65:25:d7:45:a5:05:c8:c4:d2:89:
f4:8a:d2:8f:51:d7:77:f4:09:3d:e5:df:19:f2:f9:02:9f:cc:
20:07:5a:72:f5:e1:2c:5b:20:96:2d:d1:2e:01:76:e8:7a:7a:
57:b2:e2:18:68:ab:23:7e:5c:a0:a0:07:bc:03:0b:67:70:0c:
65:33:81:e8:0f:9c:49:83:8a:11:d3:64:0d:37:71:50:1d:30:
e5:22:b8:9b:57:8e:fd:8d:e4:7f:53:df:e0:f9:b7:79:67:5d:
86:16:60:8a:37:b6:26:11:09:2d:14:61:a1:ee:f6:c6:2d:d9:
3c:3c:fb:65:8c:05:d2:8f:c6:9c:70:03:4b:7e:2a:67:c1:35:
6a:d8:33:5e:65:13:a1:3b:fb:f4:e0:26:5c:59:3e:53:4f:96:
b1:24:36:03:c3:51:e5:07:d8:5c:8a:0c:e4:82:04:7b:b8:04:
f2:36:49:4e:28:57:b3:fe:1d:bf:70:60:2e:cd:e4:8e:48:a6:
57:8c:b9:f0:01:00:d9:50:c5:eb:18:e0:91:ab:7d:97:61:95:
8d:e9:93:e9:56:87:a2:5c:e5:49:de:b8:44:49:2f:83:af:c8:
d1:a6:a1:ae
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzDt0SET4t8G4Q+1EN+ulhJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZmQzZjg5MzM1ZGNmODI4NjY2YjI4ZmFkOGFlOTkzYmQ0
NDg4NzgwHhcNMjQwMTAxMDYzMDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTNhNjIyYmU4OWQxNjJmNDk4ZjQ4Y2I3YzU3YWNkNzZhYTkzNjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5GEUvMsQaZNVkbrfuzIEVClmz5k
IaRnGAPKt+Ps8xyhQcrpL8Xm1WjUFNdp140MMO5xF8F7IX7YIJqhXLskgcbDdp5x
4RSu9qVTCohKO5FSWI1WigtEomFsj4ZaEvhyKlBH9JLo5bYEn8+hO2Ga+PyMEAgZ
cduidGZrcjCRZ50O5XGKViq+z22+XY04ekROFxBRuqJ/2ES4qhwFuz0ql1rhrVk0
1STSb+uEDxqvF6e0zXNfgDvMUrLlcV5t8mLD2YuD4fpIfdhPhdBpV2LqHj8G0xXA
5iD0cySABoSZdwmdkQBmVWrfFbXsHlaBvk/MrxxN/LKAMxBrDgTLrVh2awIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA46YivonRYvSY9Iy3xXrNdqqTZMMB8GA1UdIwQY
MBaAFKf9P4kzXc+Chmayj62K6ZO9RIh4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcF8wX2lUTmR6NEtHWnJLUHJZcnBrNzFFaUhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8zODhmZDgtYzgxZi00ZTcxLWFmNTIt
YzBiMWFkNDM1Yjk1LzEvRGpwaUstaWRGaTlKajBqTGZGZXMxMnFwTmt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8zODhmZDgtYzgxZi00ZTcxLWFmNTItYzBiMWFkNDM1Yjk1
LzEvcF8wX2lUTmR6NEtHWnJLUHJZcnBrNzFFaUhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuXELAwQA
wiCTMA0GCSqGSIb3DQEBCwUAA4IBAQAsPPjNaAuqlRjInyWNKQ5TfAgn778Lukz6
fmUl10WlBcjE0on0itKPUdd39Ak95d8Z8vkCn8wgB1py9eEsWyCWLdEuAXboenpX
suIYaKsjflygoAe8AwtncAxlM4HoD5xJg4oR02QNN3FQHTDlIribV479jeR/U9/g
+bd5Z12GFmCKN7YmEQktFGGh7vbGLdk8PPtljAXSj8accANLfipnwTVq2DNeZROh
O/v04CZcWT5TT5axJDYDw1HlB9hcigzkggR7uATyNklOKFez/h2/cGAuzeSOSKZX
jLnwAQDZUMXrGOCRq32XYZWN6ZPpVoeiXOVJ3rhESS+Dr8jRpqGu
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:03:47 2024 by rpki-client on console-ams.rpki-client.org