Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/JrXXWG9PFs-nadKAH-aOqLx5c2E.roa
File: JrXXWG9PFs-nadKAH-aOqLx5c2E.roa (raw, json)
Hash identifier: oKMrWDJJ/DfztsleRudxGgrsEIujolwhIMb3qsvKKEU=
Subject key identifier: 26:B5:D7:58:6F:4F:16:CF:A7:69:D2:80:1F:E6:8E:A8:BC:79:73:61
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018CC7277893F237AB7BE3DD2F71AD7A1450
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/JrXXWG9PFs-nadKAH-aOqLx5c2E.roa
Signing time: Mon 01 Jan 2024 22:31:41 +0000
ROA not before: Mon 01 Jan 2024 22:31:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60643
IP address blocks: 86.110.104.0/24 maxlen: 24
80.250.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:78:93:f2:37:ab:7b:e3:dd:2f:71:ad:7a:14:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 22:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26b5d7586f4f16cfa769d2801fe68ea8bc797361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0f:5d:79:7c:6b:52:d5:59:24:8d:1d:6d:bc:
f1:b2:99:7a:6f:5d:82:c8:8b:c9:b7:b6:e8:76:f8:
ba:09:6b:cf:2a:42:3e:d8:3c:f3:75:f7:29:47:2d:
2e:fa:f2:7d:9d:8c:df:de:ba:27:5f:cc:ff:c9:93:
c8:ea:a2:a9:76:e0:8f:95:30:38:07:22:59:c5:9a:
8a:e2:1a:2d:67:f6:b2:1e:3e:4f:10:ff:1f:4d:3b:
ab:2d:a4:17:22:4f:29:c6:ac:54:e7:6f:c7:ed:19:
bd:b1:ca:72:f7:ba:8d:ac:ff:9d:65:e6:1b:23:1a:
92:59:fe:dc:2a:69:43:d3:17:5f:46:6b:17:f8:c6:
5f:dc:e6:73:0d:b9:90:e2:92:a4:02:7e:a4:0b:20:
26:b7:80:2d:97:bd:c6:f8:69:24:fe:38:9a:73:b6:
6c:23:0c:e2:c1:c8:a2:be:14:bb:74:d6:4f:5b:6b:
40:d9:fa:12:07:46:82:ae:4b:29:40:a1:cb:57:1a:
03:b9:7f:b1:7d:db:5f:9e:6d:fe:27:b4:ce:30:75:
cd:98:80:ed:06:85:ed:9c:5c:71:e9:29:fa:2e:6b:
f1:90:35:d3:b6:9c:43:0b:9b:66:4c:b6:7a:fd:57:
be:54:42:fc:8b:24:fa:f4:eb:aa:d2:86:f1:1f:30:
e5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B5:D7:58:6F:4F:16:CF:A7:69:D2:80:1F:E6:8E:A8:BC:79:73:61
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/JrXXWG9PFs-nadKAH-aOqLx5c2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.167.0/24
86.110.104.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:d2:77:ae:68:63:54:5b:42:e4:9a:ff:f4:6b:e1:ac:a3:a7:
e0:bf:85:b3:79:5b:ce:05:22:31:00:ac:f7:72:9d:41:a7:60:
d6:61:8b:f9:74:54:a3:22:53:f7:68:0c:bd:8f:f5:1d:af:72:
52:7e:f4:10:01:1b:d9:5f:12:79:6d:ed:30:9f:b4:e3:d3:8b:
58:be:d6:f8:58:c7:fc:bd:4d:70:61:b4:54:ed:f8:7c:00:2c:
04:4e:a8:57:2f:9b:20:6a:3e:e4:02:79:9c:4e:3b:0e:1f:ff:
1e:25:f7:45:6c:5d:5b:57:90:d3:45:dd:7b:19:ed:ad:05:60:
ad:ba:a9:e8:69:e5:a5:bc:43:d3:62:2b:5e:fc:56:81:62:e5:
f3:14:d8:db:2e:fa:7e:78:41:d3:3c:5f:23:e7:95:9e:10:d2:
a0:85:dc:a0:e7:36:4e:62:66:69:47:a7:23:9d:a3:52:c1:fb:
fb:25:92:11:16:76:d7:73:6a:19:c0:a8:29:c2:58:36:28:86:
34:31:9a:01:37:da:dc:ad:ef:80:78:e4:9f:ab:32:29:e1:58:
c8:5e:6b:b6:af:72:d6:b3:b9:f1:f7:a4:54:92:1d:a3:8d:eb:
7b:ab:4c:53:eb:23:88:e8:69:ec:b2:91:b2:1b:a1:73:03:9a:
6e:f6:36:f8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzHJ3iT8jere+PdL3GtehRQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl
MmM2ODUwHhcNMjQwMTAxMjIzMTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmI1ZDc1ODZmNGYxNmNmYTc2OWQyODAxZmU2OGVhOGJjNzk3MzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA9deXxrUtVZJI0dbbzxspl6b12C
yIvJt7bodvi6CWvPKkI+2DzzdfcpRy0u+vJ9nYzf3ronX8z/yZPI6qKpduCPlTA4
ByJZxZqK4hotZ/ayHj5PEP8fTTurLaQXIk8pxqxU52/H7Rm9scpy97qNrP+dZeYb
IxqSWf7cKmlD0xdfRmsX+MZf3OZzDbmQ4pKkAn6kCyAmt4Atl73G+Gkk/jiac7Zs
IwziwciivhS7dNZPW2tA2foSB0aCrkspQKHLVxoDuX+xfdtfnm3+J7TOMHXNmIDt
BoXtnFxx6Sn6LmvxkDXTtpxDC5tmTLZ6/Ve+VEL8iyT69Ouq0obxHzDlXQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCa111hvTxbPp2nSgB/mjqi8eXNhMB8GA1UdIwQY
MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt
NDBkOTViZDMzZmNiLzEvSnJYWFdHOVBGcy1uYWRLQUgtYU9xTHg1YzJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi
LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUPqnAwQA
Vm5oMA0GCSqGSIb3DQEBCwUAA4IBAQAL0neuaGNUW0Lkmv/0a+Gso6fgv4WzeVvO
BSIxAKz3cp1Bp2DWYYv5dFSjIlP3aAy9j/Udr3JSfvQQARvZXxJ5be0wn7Tj04tY
vtb4WMf8vU1wYbRU7fh8ACwETqhXL5sgaj7kAnmcTjsOH/8eJfdFbF1bV5DTRd17
Ge2tBWCtuqnoaeWlvEPTYite/FaBYuXzFNjbLvp+eEHTPF8j55WeENKghdyg5zZO
YmZpR6cjnaNSwfv7JZIRFnbXc2oZwKgpwlg2KIY0MZoBN9rcre+AeOSfqzIp4VjI
Xmu2r3LWs7nx96RUkh2jjet7q0xT6yOI6GnsspGyG6FzA5pu9jb4
-----END CERTIFICATE-----
Generated at Sun Sep 29 00:27:48 2024 by rpki-client on console-fra.rpki-client.org