Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/iPjcJRmfJT9hrUwbAA04bJulIDg.roa
File: iPjcJRmfJT9hrUwbAA04bJulIDg.roa (raw, json)
Hash identifier: u3S4FOIRkXIfNuMu18oqCl3/yRivft8cO421E7Ofl48=
Subject key identifier: 88:F8:DC:25:19:9F:25:3F:61:AD:4C:1B:00:0D:38:6C:9B:A5:20:38
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018CC7952B49BA359B6C35E367082CFA4AB0
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/iPjcJRmfJT9hrUwbAA04bJulIDg.roa
Signing time: Tue 02 Jan 2024 00:31:31 +0000
ROA not before: Tue 02 Jan 2024 00:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210135
IP address blocks: 193.32.189.0/24 maxlen: 24
92.63.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:2b:49:ba:35:9b:6c:35:e3:67:08:2c:fa:4a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 00:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88f8dc25199f253f61ad4c1b000d386c9ba52038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d1:bf:81:5a:a7:4d:2d:b9:de:a3:7f:1f:99:
d3:fc:0a:01:a1:b1:f1:41:95:43:1e:b2:69:84:fe:
28:3b:49:b6:7a:9d:b4:4c:31:96:b1:81:c4:34:e4:
2d:8c:61:9e:58:6b:c8:df:27:46:77:43:7b:a4:8b:
f1:79:52:0c:d5:18:b9:07:29:7a:54:c8:cb:b2:24:
98:75:4a:ee:35:77:50:a7:6d:d1:ca:9f:4d:7d:54:
4c:c3:f9:72:9e:61:93:44:f9:de:3a:c5:99:45:02:
19:33:4f:af:a3:2f:4b:f3:59:c4:8b:c3:26:c6:eb:
4c:97:38:f0:73:bf:1a:2a:85:89:e2:40:b0:05:c7:
ee:a2:3f:57:56:fe:25:4e:52:87:c4:62:2d:c1:9f:
ef:2a:99:09:83:a0:83:1a:f2:7a:1e:e4:b8:77:0b:
e7:5c:33:76:14:fe:19:aa:e7:96:ac:58:85:1c:93:
db:52:e3:8d:d8:cd:75:df:cc:b7:39:9e:e4:4b:df:
c8:f5:ce:be:63:4c:03:2b:a8:9a:a0:b1:40:28:46:
00:57:11:7a:e4:9a:c1:04:89:d0:87:31:d8:90:bb:
86:1d:5e:46:f3:ff:b0:7c:54:dd:cf:3b:d0:19:b0:
3a:b6:6e:83:d2:d3:05:bd:4f:3f:6f:5e:50:4f:fb:
d9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F8:DC:25:19:9F:25:3F:61:AD:4C:1B:00:0D:38:6C:9B:A5:20:38
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/iPjcJRmfJT9hrUwbAA04bJulIDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.188.0/24
193.32.189.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:b4:47:94:aa:2e:b4:b9:f1:39:d1:5b:0d:de:09:d3:d5:90:
d8:6d:b9:3d:0b:c4:d2:23:e1:06:9a:35:1d:1b:72:0a:ec:eb:
9a:44:67:cf:91:98:82:52:49:81:ae:52:85:fd:5e:2a:36:da:
14:a3:fb:93:c6:0b:5d:e6:23:b8:0d:2b:f6:22:61:07:a3:62:
ed:d1:94:41:30:4a:03:04:cc:6c:91:ec:bc:4a:64:3b:7b:2b:
80:22:78:da:53:9d:c3:f6:3e:7e:73:a4:e2:03:9b:34:fc:89:
8b:2e:0f:12:ed:a7:45:7d:49:01:22:fb:32:34:a1:46:60:93:
00:11:24:22:74:e9:e0:84:2f:6c:f6:aa:f6:da:d1:8e:b6:9d:
0e:d3:fd:b3:3c:5a:9e:6c:86:da:28:a8:c1:36:fc:90:8e:a3:
65:5f:01:ba:f3:09:5c:5f:6d:70:e7:eb:0d:7a:2d:dc:4c:52:
28:26:93:e3:73:9c:6f:8b:9f:90:cf:5e:51:58:12:ba:76:f7:
f3:16:c7:94:4e:1e:b2:4e:4c:9d:1c:32:ca:fa:5e:b2:47:a1:
ab:10:3e:21:b4:2b:e7:28:a3:a2:b9:ad:ac:73:eb:3c:e3:95:
9e:01:f8:2e:71:0c:da:85:ed:ca:68:77:34:f3:23:bf:ab:e0:
ac:22:24:4d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzHlStJujWbbDXjZwgs+kqwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjQwMTAyMDAzMTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGY4ZGMyNTE5OWYyNTNmNjFhZDRjMWIwMDBkMzg2YzliYTUyMDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdG/gVqnTS253qN/H5nT/AoBobHx
QZVDHrJphP4oO0m2ep20TDGWsYHENOQtjGGeWGvI3ydGd0N7pIvxeVIM1Ri5Byl6
VMjLsiSYdUruNXdQp23Ryp9NfVRMw/lynmGTRPneOsWZRQIZM0+voy9L81nEi8Mm
xutMlzjwc78aKoWJ4kCwBcfuoj9XVv4lTlKHxGItwZ/vKpkJg6CDGvJ6HuS4dwvn
XDN2FP4ZqueWrFiFHJPbUuON2M1138y3OZ7kS9/I9c6+Y0wDK6iaoLFAKEYAVxF6
5JrBBInQhzHYkLuGHV5G8/+wfFTdzzvQGbA6tm6D0tMFvU8/b15QT/vZcwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIj43CUZnyU/Ya1MGwANOGybpSA4MB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvaVBqY0pSbWZKVDloclV3YkFBMDRiSnVsSURnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXD+8AwQA
wSC9MA0GCSqGSIb3DQEBCwUAA4IBAQBatEeUqi60ufE50VsN3gnT1ZDYbbk9C8TS
I+EGmjUdG3IK7OuaRGfPkZiCUkmBrlKF/V4qNtoUo/uTxgtd5iO4DSv2ImEHo2Lt
0ZRBMEoDBMxskey8SmQ7eyuAInjaU53D9j5+c6TiA5s0/ImLLg8S7adFfUkBIvsy
NKFGYJMAESQidOnghC9s9qr22tGOtp0O0/2zPFqebIbaKKjBNvyQjqNlXwG68wlc
X21w5+sNei3cTFIoJpPjc5xvi5+Qz15RWBK6dvfzFseUTh6yTkydHDLK+l6yR6Gr
ED4htCvnKKOiua2sc+s845WeAfgucQzahe3KaHc08yO/q+CsIiRN
-----END CERTIFICATE-----
Generated at Sat Jun 1 17:01:17 2024 by rpki-client on console-ams.rpki-client.org