Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/jwkDFOJVuR7ecckcfMiZn6IV5fg.roa
File: jwkDFOJVuR7ecckcfMiZn6IV5fg.roa (raw, json)
Hash identifier: rspKhbYYaLtz2s79+bHx97sfakD77wub7iovLBopXSc=
Subject key identifier: 8F:09:03:14:E2:55:B9:1E:DE:71:C9:1C:7C:C8:99:9F:A2:15:E5:F8
Certificate issuer: /CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
Certificate serial: 018CC9BC4E4DC5ED442FF1F1ADC261B1973C
Authority key identifier: D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/jwkDFOJVuR7ecckcfMiZn6IV5fg.roa
Signing time: Tue 02 Jan 2024 10:33:30 +0000
ROA not before: Tue 02 Jan 2024 10:33:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47904
IP address blocks: 91.216.54.0/24 maxlen: 24
91.223.115.0/24 maxlen: 24
2001:67c:2324::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:4e:4d:c5:ed:44:2f:f1:f1:ad:c2:61:b1:97:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
Validity
Not Before: Jan 2 10:33:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f090314e255b91ede71c91c7cc8999fa215e5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:20:ff:26:23:27:d7:17:f9:58:0a:51:c4:15:
57:3f:10:f9:2e:b4:ba:1b:eb:3c:f5:0c:ce:94:9a:
52:a7:74:37:c3:1c:dd:6d:e3:5c:27:eb:90:26:2b:
3d:24:11:c1:24:57:6e:a0:6f:2d:10:09:89:34:d1:
b9:d2:d3:62:e4:a1:4e:15:fa:db:8c:dc:cc:53:16:
59:85:5b:93:52:58:25:d5:39:70:63:da:80:40:00:
2e:e1:ed:ec:08:9c:0e:bd:ad:74:c9:f6:63:e5:ad:
4f:7c:ab:20:5c:9e:49:f6:02:4f:a0:16:83:b1:02:
42:fd:02:fc:80:9f:1c:a6:96:44:24:e6:1c:24:b6:
b1:aa:e8:9b:e2:6f:d5:df:eb:df:03:77:3d:ab:95:
e3:f7:b8:0e:54:1b:ac:e0:d9:e4:a8:cc:99:4c:62:
f1:f4:6d:41:e2:e1:7e:5f:d2:fa:5f:c6:a3:79:6e:
50:e6:23:ad:1c:51:e4:28:76:54:74:3c:ad:0e:2d:
80:75:54:b2:47:69:86:85:bf:47:d1:44:f6:cc:65:
88:87:2c:3e:5d:72:08:0f:76:91:e4:40:1b:d2:39:
1f:7a:85:c7:c9:8e:ae:33:02:27:f3:67:09:f1:f4:
f3:ee:df:e2:3d:ed:42:5c:83:24:c0:2c:90:c6:cf:
5f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:09:03:14:E2:55:B9:1E:DE:71:C9:1C:7C:C8:99:9F:A2:15:E5:F8
X509v3 Authority Key Identifier:
keyid:D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/jwkDFOJVuR7ecckcfMiZn6IV5fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.54.0/24
91.223.115.0/24
IPv6:
2001:67c:2324::/48
Signature Algorithm: sha256WithRSAEncryption
35:22:c0:e5:40:fe:dd:16:d5:85:d8:a7:7f:b3:06:5d:91:cd:
f7:33:e6:ef:41:29:2d:ea:fc:57:4d:9c:10:b6:41:9d:e2:26:
18:99:83:12:dd:ec:ba:ee:8d:c4:88:38:3b:cd:00:56:2e:8a:
85:26:5a:74:55:12:ce:d1:39:a1:24:87:80:f5:ff:07:16:7c:
5d:f5:d4:03:9e:e2:7c:a5:0c:ce:a8:83:4c:65:2b:e5:33:e8:
fd:a4:9b:9a:ff:dd:92:87:e5:2b:33:b5:e0:f9:92:b6:57:14:
d4:17:b6:ef:e7:21:de:ed:1c:2b:2e:4c:53:53:ca:2c:0c:09:
02:8c:84:94:bd:5b:cc:f3:d8:99:c6:11:c6:61:2e:c8:69:b7:
61:ee:44:16:ac:9a:fd:a7:c1:da:e3:b4:52:08:63:fb:6d:66:
b9:89:0f:46:14:e2:4f:2e:28:f3:f7:e3:4e:3a:dc:8b:6c:dc:
e6:99:41:b7:08:35:74:87:f1:b0:85:9e:28:09:a3:7b:08:c0:
84:3b:35:85:4f:1d:44:c9:ea:8f:48:1d:1f:54:92:a3:24:31:
ec:13:4a:bc:4c:f4:c1:3f:ab:98:2f:32:72:fe:4f:d6:d3:0b:
bc:87:fd:f1:e9:79:87:f9:64:69:94:62:1c:70:38:4b:c1:fd:
42:21:cd:ca
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYzJvE5Nxe1EL/HxrcJhsZc8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YzczM2U5ZjYxMzRmNzQ0OWM0MWE1ZWViZjU4M2NlMzVi
NTQyNjAwHhcNMjQwMTAyMTAzMzMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjA5MDMxNGUyNTViOTFlZGU3MWM5MWM3Y2M4OTk5ZmEyMTVlNWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiD/JiMn1xf5WApRxBVXPxD5LrS6
G+s89QzOlJpSp3Q3wxzdbeNcJ+uQJis9JBHBJFduoG8tEAmJNNG50tNi5KFOFfrb
jNzMUxZZhVuTUlgl1TlwY9qAQAAu4e3sCJwOva10yfZj5a1PfKsgXJ5J9gJPoBaD
sQJC/QL8gJ8cppZEJOYcJLaxquib4m/V3+vfA3c9q5Xj97gOVBus4NnkqMyZTGLx
9G1B4uF+X9L6X8ajeW5Q5iOtHFHkKHZUdDytDi2AdVSyR2mGhb9H0UT2zGWIhyw+
XXIID3aR5EAb0jkfeoXHyY6uMwIn82cJ8fTz7t/iPe1CXIMkwCyQxs9fAQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFI8JAxTiVbke3nHJHHzImZ+iFeX4MB8GA1UdIwQY
MBaAFNfHM+n2E090ScQaXuv1g841tUJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMThjejZmWVRUM1JKeEJwZTZfV0R6alcxUW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lYmJkYzYtOWYyMi00ZTJmLWJlOGMt
OWM5MDJjNjZlZTk5LzEvandrREZPSlZ1UjdlY2NrY2ZNaVpuNklWNWZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9lYmJkYzYtOWYyMi00ZTJmLWJlOGMtOWM5MDJjNjZlZTk5
LzEvMThjejZmWVRUM1JKeEJwZTZfV0R6alcxUW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW9g2AwQA
W99zMA8EAgACMAkDBwAgAQZ8IyQwDQYJKoZIhvcNAQELBQADggEBADUiwOVA/t0W
1YXYp3+zBl2Rzfcz5u9BKS3q/FdNnBC2QZ3iJhiZgxLd7LrujcSIODvNAFYuioUm
WnRVEs7ROaEkh4D1/wcWfF311AOe4nylDM6og0xlK+Uz6P2km5r/3ZKH5SszteD5
krZXFNQXtu/nId7tHCsuTFNTyiwMCQKMhJS9W8zz2JnGEcZhLshpt2HuRBasmv2n
wdrjtFIIY/ttZrmJD0YU4k8uKPP340463Its3OaZQbcINXSH8bCFnigJo3sIwIQ7
NYVPHUTJ6o9IHR9UkqMkMewTSrxM9ME/q5gvMnL+T9bTC7yH/fHpeYf5ZGmUYhxw
OEvB/UIhzco=
-----END CERTIFICATE-----
Generated at Fri Jun 21 17:52:20 2024 by rpki-client on console-ams.rpki-client.org