Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/JhCi6IDfpGpb7eCxmvP_ew7I3Hw.roa
File: JhCi6IDfpGpb7eCxmvP_ew7I3Hw.roa (raw, json)
Hash identifier: YBgYL6l5PPcdhNDztmvNpbaOgb7/CX8GzC/xDmYkBNA=
Subject key identifier: 26:10:A2:E8:80:DF:A4:6A:5B:ED:E0:B1:9A:F3:FF:7B:0E:C8:DC:7C
Certificate issuer: /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial: 01918DB1991F433D36CC53FD9139619E89FE
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/JhCi6IDfpGpb7eCxmvP_ew7I3Hw.roa
Signing time: Mon 26 Aug 2024 07:58:32 +0000
ROA not before: Mon 26 Aug 2024 07:58:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61061
IP address blocks: 134.255.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8d:b1:99:1f:43:3d:36:cc:53:fd:91:39:61:9e:89:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
Validity
Not Before: Aug 26 07:58:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2610a2e880dfa46a5bede0b19af3ff7b0ec8dc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b2:b4:1c:f7:2a:4c:08:5f:14:b2:92:bb:52:
35:58:9d:0b:bd:1c:6b:97:9b:ab:62:7e:cd:7d:97:
d0:ed:d5:e0:7d:78:11:68:bc:af:d8:bc:e1:14:35:
e3:ae:8e:f0:10:78:1b:5a:06:0e:97:ba:e1:fe:b1:
01:fb:c3:5c:5c:6b:9d:84:28:2b:75:73:61:0a:1c:
69:8e:d6:f3:19:1e:4c:84:c1:fc:d6:34:a3:b2:b9:
56:bc:15:4b:14:77:f6:ed:bf:02:26:ac:ff:37:2a:
1f:c8:0c:f6:c5:ce:c3:05:75:ac:03:d3:08:b6:c3:
ac:e1:9e:1f:b3:d1:7b:a0:4b:03:ae:dc:88:7a:72:
a3:16:8a:ca:a9:44:54:d1:42:fc:52:a8:52:b4:fb:
a5:c4:8f:29:87:35:e1:1f:9f:a7:df:60:60:ac:16:
4f:00:b2:dd:89:1c:04:09:3a:51:dc:f7:25:2f:21:
fb:7d:c3:94:7e:e6:ed:60:ed:18:40:6c:eb:8a:69:
63:9f:fa:fb:57:97:0b:46:78:81:0d:3a:b2:d2:78:
17:1b:b7:4d:db:69:8f:7f:f8:61:83:2e:00:23:e4:
91:1e:75:94:09:a5:23:18:33:cd:d7:80:54:9d:79:
52:39:54:42:11:c3:54:8b:30:42:b3:ce:c0:3d:10:
95:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:10:A2:E8:80:DF:A4:6A:5B:ED:E0:B1:9A:F3:FF:7B:0E:C8:DC:7C
X509v3 Authority Key Identifier:
keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/JhCi6IDfpGpb7eCxmvP_ew7I3Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.255.249.0/24
Signature Algorithm: sha256WithRSAEncryption
35:d6:93:d9:6c:f0:09:dd:49:86:57:ae:a6:14:0a:61:45:a1:
48:87:32:a9:e3:53:4d:e8:f8:5e:25:5d:fd:12:77:a1:ff:60:
67:6b:d5:4d:eb:c7:c6:de:83:64:55:7c:82:69:af:27:78:44:
b7:26:9a:31:f7:cd:86:ff:16:e7:0e:dd:d3:6a:37:08:58:a7:
40:0f:75:46:92:ad:32:84:b8:88:83:59:95:e4:6e:22:28:f4:
30:4a:a3:cd:82:f9:92:b4:5c:17:12:bb:ef:e1:e4:9b:a6:1a:
5d:d3:49:67:d5:b6:c2:7e:1d:f7:ca:8e:16:57:04:c8:c8:d7:
f7:7e:3d:11:aa:fd:67:0c:61:0d:f8:c8:50:b1:26:ad:5f:04:
df:39:60:7c:88:d9:60:ca:54:07:3b:9c:0c:b6:38:f7:82:59:
ff:5d:1f:26:c4:a5:91:67:8d:b2:05:90:84:ad:1d:f9:58:7d:
ff:00:0d:33:f7:ec:ca:99:fc:59:b7:dd:be:2d:9d:19:71:69:
a0:df:75:96:4c:6e:fa:32:9a:17:46:dc:c7:76:b5:31:c1:08:
3e:0e:35:33:d8:0c:b2:15:80:4d:29:dc:70:29:25:fb:0b:20:
db:27:f9:24:63:da:21:dd:68:2c:80:85:63:f6:f2:a6:e3:7c:
e4:ed:a3:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGNsZkfQz02zFP9kTlhnon+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmODE0YWRjMWQ1MjA5ZTA5OGYwNzhhZGJjODU2YmFkODNi
NzQ5YzIwHhcNMjQwODI2MDc1ODMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjEwYTJlODgwZGZhNDZhNWJlZGUwYjE5YWYzZmY3YjBlYzhkYzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorK0HPcqTAhfFLKSu1I1WJ0LvRxr
l5urYn7NfZfQ7dXgfXgRaLyv2LzhFDXjro7wEHgbWgYOl7rh/rEB+8NcXGudhCgr
dXNhChxpjtbzGR5MhMH81jSjsrlWvBVLFHf27b8CJqz/NyofyAz2xc7DBXWsA9MI
tsOs4Z4fs9F7oEsDrtyIenKjForKqURU0UL8UqhStPulxI8phzXhH5+n32BgrBZP
ALLdiRwECTpR3PclLyH7fcOUfubtYO0YQGzrimljn/r7V5cLRniBDTqy0ngXG7dN
22mPf/hhgy4AI+SRHnWUCaUjGDPN14BUnXlSOVRCEcNUizBCs87APRCVywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCYQouiA36RqW+3gsZrz/3sOyNx8MB8GA1UdIwQY
MBaAFC+BStwdUgngmPB4rbyFa62Dt0nCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8xM2UxMmEtMmJhYy00NzUyLTk5N2Qt
ZGY4NmI2ZGQ5OTdjLzEvSmhDaTZJRGZwR3BiN2VDeG12UF9ldzdJM0h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8xM2UxMmEtMmJhYy00NzUyLTk5N2QtZGY4NmI2ZGQ5OTdj
LzEvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhv/5MA0G
CSqGSIb3DQEBCwUAA4IBAQA11pPZbPAJ3UmGV66mFAphRaFIhzKp41NN6PheJV39
Eneh/2Bna9VN68fG3oNkVXyCaa8neES3Jpox982G/xbnDt3TajcIWKdAD3VGkq0y
hLiIg1mV5G4iKPQwSqPNgvmStFwXErvv4eSbphpd00ln1bbCfh33yo4WVwTIyNf3
fj0Rqv1nDGEN+MhQsSatXwTfOWB8iNlgylQHO5wMtjj3gln/XR8mxKWRZ42yBZCE
rR35WH3/AA0z9+zKmfxZt92+LZ0ZcWmg33WWTG76MpoXRtzHdrUxwQg+DjUz2Ayy
FYBNKdxwKSX7CyDbJ/kkY9oh3WgsgIVj9vKm43zk7aNl
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:33:31 2024 by rpki-client on console-ams.rpki-client.org