Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/JreeddVFR3a7T_Gw2Q1lzULTlNU.roa
File: JreeddVFR3a7T_Gw2Q1lzULTlNU.roa (raw, json)
Hash identifier: Jk5mXWpZlnr85d8Bfc1Y7HCmCh6FwWGEZfVTh8SApeM=
Subject key identifier: 26:B7:9E:75:D5:45:47:76:BB:4F:F1:B0:D9:0D:65:CD:42:D3:94:D5
Certificate issuer: /CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Certificate serial: 018CC64B41FBE3659E3E8ECB697886164CFD
Authority key identifier: 11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/JreeddVFR3a7T_Gw2Q1lzULTlNU.roa
Signing time: Mon 01 Jan 2024 18:31:10 +0000
ROA not before: Mon 01 Jan 2024 18:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36351
IP address blocks: 91.206.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:41:fb:e3:65:9e:3e:8e:cb:69:78:86:16:4c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Validity
Not Before: Jan 1 18:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26b79e75d5454776bb4ff1b0d90d65cd42d394d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:cc:c9:c0:e4:72:39:09:8b:a9:37:cb:49:9e:
c5:f1:cc:68:32:77:2b:a4:e6:8e:58:a9:79:91:15:
72:f4:f6:69:5b:72:58:51:f4:ad:34:5c:29:db:64:
a0:3f:e9:43:9d:90:ee:1a:5e:2d:93:9b:4d:48:78:
87:4a:46:a4:90:b5:73:e2:89:2e:c8:b9:4d:46:24:
ed:b6:e8:be:fa:90:d3:c8:cf:03:d6:cb:5f:43:1c:
bf:7c:74:fb:57:ed:6e:17:89:11:e0:70:f4:24:b7:
98:19:47:6e:ca:d4:c9:15:9f:b2:3f:f4:57:f7:56:
48:95:cf:af:de:53:ab:be:28:de:5e:20:d8:54:d0:
7d:e1:ad:0b:ee:a9:0b:4a:05:7d:eb:c9:6f:48:ab:
2f:d4:29:bc:ef:6a:a3:59:f2:8a:c1:e1:fc:59:cb:
25:8e:5b:ed:11:46:da:bf:85:c3:e3:28:d5:d4:f2:
6c:56:3b:d1:e8:7a:72:68:47:fe:a9:14:10:59:ea:
eb:4a:bd:09:90:73:45:9a:b3:a4:bc:87:1a:03:64:
7b:d5:d7:7a:4f:a6:32:8e:5e:62:f3:f1:42:53:c5:
2f:22:2c:7a:35:b9:2a:18:0c:6a:b9:5d:37:59:d2:
5e:ca:9f:9b:22:fa:4e:6e:f9:3e:fc:04:60:75:7b:
c1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B7:9E:75:D5:45:47:76:BB:4F:F1:B0:D9:0D:65:CD:42:D3:94:D5
X509v3 Authority Key Identifier:
keyid:11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/JreeddVFR3a7T_Gw2Q1lzULTlNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.64.0/24
Signature Algorithm: sha256WithRSAEncryption
11:7f:ed:ac:fe:91:8d:41:25:a4:71:f3:1f:3d:ec:34:36:83:
93:8d:6f:fb:fa:75:7d:2d:ec:39:47:b0:d9:f7:36:b8:de:e5:
43:b1:00:0d:0d:d7:92:81:5b:fa:9b:86:5d:9e:27:95:ce:81:
3d:1c:99:a7:23:6d:3b:c0:3c:e2:df:7c:fb:b0:80:c8:4b:44:
f9:67:aa:eb:00:cd:44:6b:93:fd:1b:0f:11:21:5b:d8:8c:52:
87:07:e7:63:4d:e9:db:a4:fa:46:1e:4b:43:78:c2:37:85:81:
9f:12:6d:ec:ac:90:24:b1:cc:47:0a:46:89:69:ba:08:99:ef:
c2:3a:01:8c:db:56:6e:76:40:a1:ba:7c:04:eb:59:a1:a2:c3:
c3:5c:75:d7:10:8f:c2:6b:32:d0:43:5d:28:74:a0:71:61:6c:
bc:da:71:d5:1e:ba:b6:50:ce:17:a3:0b:84:4e:52:7c:be:82:
f6:8b:1a:10:0a:af:af:5d:75:6d:5a:e9:d0:2c:2d:4b:cc:9b:
de:be:e5:af:93:17:9b:06:2c:7e:e6:f0:9a:eb:7a:3e:f2:54:
5f:c0:e6:62:41:1a:56:58:a4:aa:f3:bc:e4:2f:8e:36:c6:da:
04:68:f9:0e:61:6d:bf:e4:de:6e:28:8b:0d:2c:92:16:d0:fa:
d6:69:ec:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGS0H742WePo7LaXiGFkz9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMGU1NjE3NzMwOGMyMGM0MmZiZjQyZjMxMGY0YzBlZjZi
Mjc4OTAwHhcNMjQwMTAxMTgzMTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmI3OWU3NWQ1NDU0Nzc2YmI0ZmYxYjBkOTBkNjVjZDQyZDM5NGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgszJwORyOQmLqTfLSZ7F8cxoMncr
pOaOWKl5kRVy9PZpW3JYUfStNFwp22SgP+lDnZDuGl4tk5tNSHiHSkakkLVz4oku
yLlNRiTttui++pDTyM8D1stfQxy/fHT7V+1uF4kR4HD0JLeYGUduytTJFZ+yP/RX
91ZIlc+v3lOrvijeXiDYVNB94a0L7qkLSgV968lvSKsv1Cm872qjWfKKweH8Wcsl
jlvtEUbav4XD4yjV1PJsVjvR6HpyaEf+qRQQWerrSr0JkHNFmrOkvIcaA2R71dd6
T6Yyjl5i8/FCU8UvIix6NbkqGAxquV03WdJeyp+bIvpObvk+/ARgdXvBYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCa3nnXVRUd2u0/xsNkNZc1C05TVMB8GA1UdIwQY
MBaAFBEOVhdzCMIMQvv0LzEPTA72sniQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVE1V0YzTUl3Z3hDLV9Rdk1ROU1EdmF5ZUpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wZTU3MTEtMmZkNC00MGNhLTkxMzYt
NmY0ZTY1ODViNTRiLzEvSnJlZWRkVkZSM2E3VF9HdzJRMWx6VUxUbE5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wZTU3MTEtMmZkNC00MGNhLTkxMzYtNmY0ZTY1ODViNTRi
LzEvRVE1V0YzTUl3Z3hDLV9Rdk1ROU1EdmF5ZUpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW85AMA0G
CSqGSIb3DQEBCwUAA4IBAQARf+2s/pGNQSWkcfMfPew0NoOTjW/7+nV9Lew5R7DZ
9za43uVDsQANDdeSgVv6m4ZdnieVzoE9HJmnI207wDzi33z7sIDIS0T5Z6rrAM1E
a5P9Gw8RIVvYjFKHB+djTenbpPpGHktDeMI3hYGfEm3srJAkscxHCkaJaboIme/C
OgGM21ZudkChunwE61mhosPDXHXXEI/CazLQQ10odKBxYWy82nHVHrq2UM4XowuE
TlJ8voL2ixoQCq+vXXVtWunQLC1LzJvevuWvkxebBix+5vCa63o+8lRfwOZiQRpW
WKSq87zkL442xtoEaPkOYW2/5N5uKIsNLJIW0PrWaexN
-----END CERTIFICATE-----
Generated at Sun Apr 28 15:40:15 2024 by rpki-client on console-ams.rpki-client.org