Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/j_5C7ksupdJRMrStgxlJBMPqJyM.roa
File: j_5C7ksupdJRMrStgxlJBMPqJyM.roa (raw, json)
Hash identifier: rN3KvBwjYKHimojOAk7FBrF6YB7DxMXczVswMoiQ/F4=
Subject key identifier: 8F:FE:42:EE:4B:2E:A5:D2:51:32:B4:AD:83:19:49:04:C3:EA:27:23
Certificate issuer: /CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7
Certificate serial: 018CC424F72D1333B6EB3A57364CDAA2D9BC
Authority key identifier: 5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/j_5C7ksupdJRMrStgxlJBMPqJyM.roa
Signing time: Mon 01 Jan 2024 08:30:06 +0000
ROA not before: Mon 01 Jan 2024 08:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34942
IP address blocks: 185.100.36.0/22 maxlen: 24
193.189.139.0/24 maxlen: 24
2a06:340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:f7:2d:13:33:b6:eb:3a:57:36:4c:da:a2:d9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7
Validity
Not Before: Jan 1 08:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ffe42ee4b2ea5d25132b4ad83194904c3ea2723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dc:5e:e0:3d:5e:ff:19:06:3b:b1:1f:7e:2b:
57:3d:d8:29:0b:c8:93:23:14:bc:1e:04:2d:f0:3c:
38:32:b0:57:78:5c:7c:5d:bf:46:44:73:cd:4a:0b:
9c:bb:03:a0:91:e9:c6:39:d2:ac:6b:1e:6c:27:56:
4c:97:b2:32:fd:47:85:74:cb:69:59:df:55:46:e1:
15:a5:44:c0:50:b2:6b:dc:17:49:8d:bf:f3:37:50:
db:8c:56:17:d4:a2:ca:e7:32:77:30:bf:3f:4e:6a:
af:49:f5:dc:a3:20:c7:29:e4:ca:3e:cd:2d:a7:87:
d0:ae:78:bf:b7:ae:aa:dd:3f:41:ce:18:44:24:48:
3b:64:f0:20:b7:38:99:ec:23:44:34:12:88:ab:91:
1e:d5:1a:32:9f:0a:2a:b5:a5:f1:59:53:cd:86:04:
67:f2:9e:60:71:89:28:2f:10:2f:79:cd:55:a8:54:
0c:ad:00:96:4b:95:e4:08:3d:4e:36:51:3e:77:e9:
32:b6:6d:13:e2:c2:61:48:4b:83:ae:f7:e6:27:e4:
56:cd:c6:1b:84:0c:af:f1:70:d0:61:fe:46:3b:e0:
04:36:10:74:8f:79:b9:db:e1:85:ed:87:9e:b1:48:
7a:1b:cc:08:40:ea:e0:61:4f:e5:9e:b2:55:17:aa:
4a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FE:42:EE:4B:2E:A5:D2:51:32:B4:AD:83:19:49:04:C3:EA:27:23
X509v3 Authority Key Identifier:
keyid:5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/j_5C7ksupdJRMrStgxlJBMPqJyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.36.0/22
193.189.139.0/24
IPv6:
2a06:340::/29
Signature Algorithm: sha256WithRSAEncryption
17:22:1d:f0:86:8e:ac:b3:3f:7d:b9:19:e9:21:6f:8e:75:79:
73:49:b6:17:31:5f:f2:be:13:7d:0a:39:2e:8b:ab:69:e0:83:
b3:30:2a:b9:68:38:a1:96:c6:1b:26:6e:7d:bf:5c:90:18:6e:
e1:a5:c2:be:f4:97:7d:e1:ba:8c:e5:10:ff:20:4f:d6:b8:e2:
e9:28:58:08:dc:a3:cf:c0:fb:61:d4:e7:e6:cd:48:5b:2d:00:
48:2d:8e:96:4b:02:b1:0a:4d:8e:f4:80:6e:95:e7:ad:78:07:
e3:40:3e:e3:35:26:6f:60:79:4c:12:20:55:09:58:98:52:e8:
10:30:5c:f6:2f:ce:8a:10:b5:25:d0:7f:d9:fb:c6:c9:9d:13:
9d:24:fd:15:28:e3:9f:f2:05:19:b5:91:37:71:9e:40:ef:05:
1a:31:43:d9:83:25:b5:22:be:dd:8d:01:db:79:11:8d:5d:3b:
b8:1d:3e:ff:f7:6d:a0:80:e9:a5:27:8b:af:c6:0a:8a:12:44:
fc:f2:1e:a1:76:4c:cc:81:37:2d:55:34:c3:2f:53:0e:8a:0a:
2a:31:26:da:c1:89:8f:02:55:b0:76:54:7f:da:bf:b2:ca:4b:
b2:93:20:6e:34:0b:d0:1d:50:06:82:ac:9e:86:89:b9:34:62:
1a:07:7d:5c
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzEJPctEzO26zpXNkzaotm8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMzVlZDA0M2M4ZGUxNTFiZWJkYzA5ZGZjYmZmY2M3ZGM3
NzU5YzcwHhcNMjQwMTAxMDgzMDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmZlNDJlZTRiMmVhNWQyNTEzMmI0YWQ4MzE5NDkwNGMzZWEyNzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntxe4D1e/xkGO7EffitXPdgpC8iT
IxS8HgQt8Dw4MrBXeFx8Xb9GRHPNSgucuwOgkenGOdKsax5sJ1ZMl7Iy/UeFdMtp
Wd9VRuEVpUTAULJr3BdJjb/zN1DbjFYX1KLK5zJ3ML8/TmqvSfXcoyDHKeTKPs0t
p4fQrni/t66q3T9BzhhEJEg7ZPAgtziZ7CNENBKIq5Ee1RoynwoqtaXxWVPNhgRn
8p5gcYkoLxAvec1VqFQMrQCWS5XkCD1ONlE+d+kytm0T4sJhSEuDrvfmJ+RWzcYb
hAyv8XDQYf5GO+AENhB0j3m52+GF7YeesUh6G8wIQOrgYU/lnrJVF6pKVQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFI/+Qu5LLqXSUTK0rYMZSQTD6icjMB8GA1UdIwQY
MBaAFF417QQ8jeFRvr3Anfy//Mfcd1nHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGpYdEJEeU40VkctdmNDZF9MXzh4OXgzV2NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9lMTdmYTItNzg2Ni00ZmExLTk3MmIt
MTc3NjgxM2U3MjI0LzEval81Qzdrc3VwZEpSTXJTdGd4bEpCTVBxSnlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9lMTdmYTItNzg2Ni00ZmExLTk3MmItMTc3NjgxM2U3MjI0
LzEvWGpYdEJEeU40VkctdmNDZF9MXzh4OXgzV2NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuWQkAwQA
wb2LMA0EAgACMAcDBQMqBgNAMA0GCSqGSIb3DQEBCwUAA4IBAQAXIh3who6ssz99
uRnpIW+OdXlzSbYXMV/yvhN9Cjkui6tp4IOzMCq5aDihlsYbJm59v1yQGG7hpcK+
9Jd94bqM5RD/IE/WuOLpKFgI3KPPwPth1OfmzUhbLQBILY6WSwKxCk2O9IBuleet
eAfjQD7jNSZvYHlMEiBVCViYUugQMFz2L86KELUl0H/Z+8bJnROdJP0VKOOf8gUZ
tZE3cZ5A7wUaMUPZgyW1Ir7djQHbeRGNXTu4HT7/922ggOmlJ4uvxgqKEkT88h6h
dkzMgTctVTTDL1MOigoqMSbawYmPAlWwdlR/2r+yykuykyBuNAvQHVAGgqyehom5
NGIaB31c
-----END CERTIFICATE-----
Generated at Sat Jun 1 17:06:31 2024 by rpki-client on console-fra.rpki-client.org