Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/JxMEixhZ7zTpbJsjpdjOPVllS2s.roa
File: JxMEixhZ7zTpbJsjpdjOPVllS2s.roa (raw, json)
Hash identifier: 82Mnho8FZDB8vLdNNRTL5LCy5RhhN0YwxenCcWk/xH8=
Subject key identifier: 27:13:04:8B:18:59:EF:34:E9:6C:9B:23:A5:D8:CE:3D:59:65:4B:6B
Certificate issuer: /CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Certificate serial: 018FEC95467B8993B2AAA01D7ADEE7085518
Authority key identifier: 52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/JxMEixhZ7zTpbJsjpdjOPVllS2s.roa
Signing time: Thu 06 Jun 2024 08:05:56 +0000
ROA not before: Thu 06 Jun 2024 08:05:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59729
IP address blocks: 78.136.248.0/24 maxlen: 24
78.136.249.0/24 maxlen: 24
78.136.250.0/24 maxlen: 24
78.136.251.0/24 maxlen: 24
78.136.252.0/24 maxlen: 24
78.136.253.0/24 maxlen: 24
78.136.254.0/24 maxlen: 24
88.204.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ec:95:46:7b:89:93:b2:aa:a0:1d:7a:de:e7:08:55:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Validity
Not Before: Jun 6 08:05:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2713048b1859ef34e96c9b23a5d8ce3d59654b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:48:72:9a:00:6b:5e:46:46:e7:76:81:83:fe:
e2:c4:c9:96:c4:f6:ef:32:82:f4:ee:87:6f:41:4e:
17:c5:47:73:93:19:ef:4c:29:f3:a8:93:ae:97:fd:
db:9d:46:ec:9b:97:25:d5:b4:63:27:0b:b2:d5:81:
af:f1:33:9a:f4:ce:2e:f7:ca:9d:63:c9:e5:6d:17:
a3:17:e3:6e:e1:80:6a:de:12:4d:0c:44:c8:4c:7a:
8c:80:74:41:4e:e3:ed:a3:85:26:00:9f:d0:58:6a:
00:6f:d5:6d:a7:33:02:75:2b:66:5c:b2:45:c7:57:
71:b9:b2:0e:f2:ee:da:01:1a:d2:30:2b:33:90:e2:
3f:4e:37:1c:b4:c7:7d:59:2e:9e:57:af:16:10:dc:
b7:f0:ec:d9:05:56:ea:00:86:a7:95:d5:2e:ac:00:
7a:90:65:7b:72:b2:2d:51:18:b5:b5:4f:b4:cc:80:
51:57:f7:dd:2f:40:3f:5d:88:21:4f:c9:39:94:6e:
d1:d6:25:4c:49:b4:4d:13:dd:9a:aa:65:e0:62:78:
e4:20:42:d8:77:fb:52:09:6e:a3:04:ca:fa:10:8c:
61:2d:80:c7:2d:d3:4b:8d:49:bc:c9:ff:96:ff:e7:
6c:ef:ee:e4:0f:b2:cb:a9:86:18:49:da:9c:29:48:
c1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:13:04:8B:18:59:EF:34:E9:6C:9B:23:A5:D8:CE:3D:59:65:4B:6B
X509v3 Authority Key Identifier:
keyid:52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/JxMEixhZ7zTpbJsjpdjOPVllS2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.136.248.0-78.136.254.255
88.204.47.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:9c:5f:0c:4b:b8:14:67:24:74:3a:c6:ca:07:e4:09:50:1f:
94:ec:f6:cc:86:83:78:a3:36:5e:58:5c:18:6e:c0:02:49:f0:
f1:0a:4b:e4:d3:99:18:b5:88:75:96:7e:e4:bc:ce:44:1a:a9:
25:a4:9d:11:25:ca:39:0d:1d:f3:5c:54:5c:de:34:0b:04:50:
a8:59:1b:b1:25:86:d4:4d:ef:7e:87:3d:df:e2:43:6f:53:e5:
73:4b:5c:d9:fb:64:18:32:db:28:71:d9:79:65:ba:01:6b:80:
1f:3a:f7:3e:87:94:bf:44:3e:aa:d8:f0:b3:6e:72:6c:a4:18:
fb:67:b9:7a:19:93:be:83:cc:3b:ee:18:ff:5f:8f:7e:99:e7:
3a:b9:70:53:5e:38:59:72:31:8d:99:bd:a5:e5:75:d7:1c:85:
c1:7a:d6:52:59:84:9c:36:20:9c:9d:c7:7e:a6:ce:19:1a:48:
e2:ca:ce:92:c1:45:bb:87:83:9b:f4:5c:b3:62:73:a6:d1:b6:
96:bd:88:30:a4:ec:47:73:31:70:39:67:4e:9d:f2:a7:de:3a:
39:53:c6:74:7c:ad:8f:8d:ea:38:de:49:5f:a2:86:d6:87:48:
03:1f:c5:ca:61:6b:5e:4f:fb:2f:02:25:5e:0e:dd:e5:01:e9:
20:85:1b:d0
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAY/slUZ7iZOyqqAdet7nCFUYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyOWMyNzMwOThiNTI3NjhjYTBlNDRhM2EyYzE2ZWZlZDRh
NjVjYTAwHhcNMjQwNjA2MDgwNTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzEzMDQ4YjE4NTllZjM0ZTk2YzliMjNhNWQ4Y2UzZDU5NjU0YjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0hymgBrXkZG53aBg/7ixMmWxPbv
MoL07odvQU4XxUdzkxnvTCnzqJOul/3bnUbsm5cl1bRjJwuy1YGv8TOa9M4u98qd
Y8nlbRejF+Nu4YBq3hJNDETITHqMgHRBTuPto4UmAJ/QWGoAb9VtpzMCdStmXLJF
x1dxubIO8u7aARrSMCszkOI/TjcctMd9WS6eV68WENy38OzZBVbqAIanldUurAB6
kGV7crItURi1tU+0zIBRV/fdL0A/XYghT8k5lG7R1iVMSbRNE92aqmXgYnjkIELY
d/tSCW6jBMr6EIxhLYDHLdNLjUm8yf+W/+ds7+7kD7LLqYYYSdqcKUjBCQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFCcTBIsYWe806WybI6XYzj1ZZUtrMB8GA1UdIwQY
MBaAFFKcJzCYtSdoyg5Eo6LBbv7UplygMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXB3bk1KaTFKMmpLRGtTam9zRnVfdFNtWEtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82ZDkzNTktYWZlZi00NTM1LTljOTMt
ZjMzZDNiYjM2NDg0LzEvSnhNRWl4aFo3elRwYkpzanBkak9QVmxsUzJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS82ZDkzNTktYWZlZi00NTM1LTljOTMtZjMzZDNiYjM2NDg0
LzEvVXB3bk1KaTFKMmpLRGtTam9zRnVfdFNtWEtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBANOiPgD
BABOiP4DBABYzC8wDQYJKoZIhvcNAQELBQADggEBAA6cXwxLuBRnJHQ6xsoH5AlQ
H5Ts9syGg3ijNl5YXBhuwAJJ8PEKS+TTmRi1iHWWfuS8zkQaqSWknRElyjkNHfNc
VFzeNAsEUKhZG7ElhtRN736HPd/iQ29T5XNLXNn7ZBgy2yhx2XllugFrgB869z6H
lL9EPqrY8LNucmykGPtnuXoZk76DzDvuGP9fj36Z5zq5cFNeOFlyMY2ZvaXlddcc
hcF61lJZhJw2IJydx36mzhkaSOLKzpLBRbuHg5v0XLNic6bRtpa9iDCk7EdzMXA5
Z06d8qfeOjlTxnR8rY+N6jjeSV+ihtaHSAMfxcpha15P+y8CJV4O3eUB6SCFG9A=
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:47:21 2024 by rpki-client on console-ams.rpki-client.org