Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/JP8lrnjw36qdYkQeexEyFhSAbis.roa
File: JP8lrnjw36qdYkQeexEyFhSAbis.roa (raw, json)
Hash identifier: Q42M39Vx/rRD5rrNBpgecPM8lP3XkDWymSIuM8zgdCk=
Subject key identifier: 24:FF:25:AE:78:F0:DF:AA:9D:62:44:1E:7B:11:32:16:14:80:6E:2B
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649DC33E6075E90AAE62FF2E1043665
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/JP8lrnjw36qdYkQeexEyFhSAbis.roa
Signing time: Mon 01 Jan 2024 18:29:38 +0000
ROA not before: Mon 01 Jan 2024 18:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43718
IP address blocks: 82.147.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:dc:33:e6:07:5e:90:aa:e6:2f:f2:e1:04:36:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24ff25ae78f0dfaa9d62441e7b11321614806e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f3:cd:a6:48:b3:90:25:92:c8:5d:9a:fd:50:
12:40:9e:7d:82:fd:a3:61:59:7c:46:6f:39:00:83:
c0:b1:e9:4d:af:a9:9a:76:fc:d2:55:90:d8:1d:06:
a9:78:9e:70:c2:dc:70:e4:77:82:3b:1c:b7:e5:ae:
09:03:d2:19:46:5c:82:19:5d:ee:f0:2d:46:b0:da:
82:e5:ac:af:11:14:86:67:ea:e3:0d:09:e8:65:ac:
77:1d:ca:7a:04:13:f8:1f:4e:37:21:01:a9:00:4f:
22:32:1e:3d:83:9e:18:ac:64:cb:9a:e4:e6:f6:87:
ae:71:2f:3c:28:96:c4:6b:2e:82:1b:5f:e8:57:1b:
0b:1e:7c:e9:f0:01:11:09:1a:d0:94:36:47:97:94:
e9:17:77:e2:e7:b3:b1:d5:a2:0a:df:c2:6d:36:62:
9e:c3:d7:c6:3e:96:03:f5:75:9a:36:eb:5e:f2:90:
28:1e:d2:e9:01:15:eb:b4:07:ea:f1:e3:08:9e:f9:
5c:7f:ae:ad:55:76:cb:18:2d:84:fe:10:36:93:ec:
53:37:e8:06:a2:b2:e2:d4:54:db:7d:1d:07:be:fa:
b9:e3:f8:89:7e:eb:8f:93:10:75:b3:02:a3:c6:5a:
04:0a:97:bd:38:91:f6:40:b4:3a:2f:9c:72:9d:93:
0f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FF:25:AE:78:F0:DF:AA:9D:62:44:1E:7B:11:32:16:14:80:6E:2B
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/JP8lrnjw36qdYkQeexEyFhSAbis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.147.135.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:c6:e7:48:c3:40:24:56:8a:2b:4d:05:7c:c5:18:a3:17:e2:
fd:1f:95:0d:fd:1b:a9:8b:f9:48:c0:d4:de:2d:ba:51:a3:78:
71:64:78:62:82:03:b2:fc:09:11:0b:e3:15:2b:fa:77:05:d6:
be:10:c8:07:03:bc:c0:ad:8d:9b:88:97:42:14:4c:f3:77:63:
bc:02:ed:e7:ba:b3:7e:39:0f:71:b4:2c:a7:44:78:d8:9f:70:
66:b5:54:d1:40:b9:15:5a:0e:ed:9a:b1:10:94:9b:98:8c:0c:
d4:45:86:15:15:3f:3c:48:11:7f:97:16:85:db:d7:ff:de:29:
36:ca:4a:ad:25:02:21:20:73:50:23:2f:6a:fa:11:62:32:24:
a4:58:11:01:7d:27:4a:88:dc:c4:34:74:52:47:97:9d:d8:b6:
9d:91:93:93:58:8e:ec:1a:83:8c:89:01:af:56:f3:da:3c:77:
f9:0e:8c:31:7b:a5:be:80:00:3a:52:2d:66:30:69:e7:3d:87:
cf:db:b7:69:e9:c8:0d:9e:75:c5:76:8b:95:a5:74:66:cb:1e:
41:cf:39:fe:55:2f:02:08:51:21:0e:ab:55:9a:d8:ce:c0:65:
4b:30:1a:72:83:d7:c4:0e:75:5e:00:4a:f3:4a:44:48:02:2b:
0a:5f:19:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSdwz5gdekKrmL/LhBDZlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjQwMTAxMTgyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGZmMjVhZTc4ZjBkZmFhOWQ2MjQ0MWU3YjExMzIxNjE0ODA2ZTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/PNpkizkCWSyF2a/VASQJ59gv2j
YVl8Rm85AIPAselNr6madvzSVZDYHQapeJ5wwtxw5HeCOxy35a4JA9IZRlyCGV3u
8C1GsNqC5ayvERSGZ+rjDQnoZax3Hcp6BBP4H043IQGpAE8iMh49g54YrGTLmuTm
9oeucS88KJbEay6CG1/oVxsLHnzp8AERCRrQlDZHl5TpF3fi57Ox1aIK38JtNmKe
w9fGPpYD9XWaNute8pAoHtLpARXrtAfq8eMInvlcf66tVXbLGC2E/hA2k+xTN+gG
orLi1FTbfR0Hvvq54/iJfuuPkxB1swKjxloECpe9OJH2QLQ6L5xynZMPfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCT/Ja548N+qnWJEHnsRMhYUgG4rMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvSlA4bHJuanczNnFkWWtRZWV4RXlGaFNBYmlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpOHMA0G
CSqGSIb3DQEBCwUAA4IBAQCaxudIw0AkVoorTQV8xRijF+L9H5UN/Rupi/lIwNTe
LbpRo3hxZHhiggOy/AkRC+MVK/p3Bda+EMgHA7zArY2biJdCFEzzd2O8Au3nurN+
OQ9xtCynRHjYn3BmtVTRQLkVWg7tmrEQlJuYjAzURYYVFT88SBF/lxaF29f/3ik2
ykqtJQIhIHNQIy9q+hFiMiSkWBEBfSdKiNzENHRSR5ed2LadkZOTWI7sGoOMiQGv
VvPaPHf5Dowxe6W+gAA6Ui1mMGnnPYfP27dp6cgNnnXFdouVpXRmyx5Bzzn+VS8C
CFEhDqtVmtjOwGVLMBpyg9fEDnVeAErzSkRIAisKXxmz
-----END CERTIFICATE-----
Generated at Mon May 6 17:49:05 2024 by rpki-client on console-ams.rpki-client.org