Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/JqjJKREbvHF9hd1dE20YXIhI2PE.roa
File: JqjJKREbvHF9hd1dE20YXIhI2PE.roa (raw, json)
Hash identifier: 8NS7qdAMJuplv7KjmxvtrdalPyjZMVQJPymF/YewkEo=
Subject key identifier: 26:A8:C9:29:11:1B:BC:71:7D:85:DD:5D:13:6D:18:5C:88:48:D8:F1
Certificate issuer: /CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Certificate serial: 019077E42498FF68CAC7F01F637B32924F08
Authority key identifier: CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/JqjJKREbvHF9hd1dE20YXIhI2PE.roa
Signing time: Wed 03 Jul 2024 09:19:18 +0000
ROA not before: Wed 03 Jul 2024 09:19:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200200
IP address blocks: 193.58.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:77:e4:24:98:ff:68:ca:c7:f0:1f:63:7b:32:92:4f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Validity
Not Before: Jul 3 09:19:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26a8c929111bbc717d85dd5d136d185c8848d8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e4:c6:82:54:be:73:b0:7d:ed:27:5c:06:ae:
0b:e2:9c:dc:f4:a9:20:b0:8f:e6:71:6c:93:2d:4d:
9e:f1:a9:6b:f6:88:49:44:a1:8c:48:54:18:25:3e:
9e:28:27:a7:10:90:5e:dd:f4:bf:d4:31:b5:c4:02:
0f:8d:5e:a4:3c:15:87:7e:b0:f6:d8:26:3a:5c:11:
63:b7:83:ca:31:f9:9a:b5:1a:71:61:a2:a4:ed:15:
84:a4:f2:40:70:d5:80:76:2b:f0:f5:df:aa:ec:d8:
52:35:89:69:a0:01:df:c0:2d:31:6b:6e:18:33:e7:
94:39:24:a5:09:a8:19:6f:72:b0:34:80:58:4b:97:
19:21:2a:0d:bc:5a:62:49:c6:63:9e:de:a2:81:50:
1f:2e:a2:8c:8b:8b:a8:6f:cd:51:01:f9:01:0e:32:
15:45:2e:b3:03:2e:d3:0a:15:6b:9c:a1:79:82:95:
ca:f8:df:5d:ba:94:77:03:f8:da:f1:f8:e9:63:0b:
76:d9:7c:9a:72:a7:89:78:33:98:7a:5a:23:b4:0b:
1e:fb:0f:48:9b:c3:3c:e7:51:17:4b:da:82:eb:b6:
de:e0:a3:eb:a2:61:c9:ef:ba:d7:72:e1:b8:01:f3:
d6:5b:49:ce:f9:a7:4a:ec:68:12:32:c2:69:99:18:
d2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A8:C9:29:11:1B:BC:71:7D:85:DD:5D:13:6D:18:5C:88:48:D8:F1
X509v3 Authority Key Identifier:
keyid:CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/JqjJKREbvHF9hd1dE20YXIhI2PE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.117.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:db:fa:5b:cb:a8:b0:a1:78:60:a5:05:b9:fa:1b:11:55:a7:
3f:51:05:f9:7b:fa:1d:c1:7a:93:3e:03:83:82:7a:ae:79:c6:
66:d1:e8:3d:e2:42:e7:b5:96:bf:02:42:0e:c5:8d:60:b8:f6:
f9:a1:c9:da:d7:79:01:27:91:9c:85:5d:96:91:08:21:26:42:
6c:87:b4:0b:53:ac:4f:4f:db:71:43:e8:23:ea:97:55:d9:48:
9c:57:d0:e7:d3:44:28:33:a4:88:e2:ef:0a:71:72:ce:68:93:
46:51:8f:bb:f6:24:c7:bd:6b:5b:14:04:b0:44:76:34:e2:45:
b4:63:13:be:51:07:1d:56:5d:70:25:ca:9c:63:e4:68:ac:6b:
78:f8:91:d5:9c:a9:52:1a:9b:95:2b:a7:89:da:7f:80:5c:fa:
22:9b:a4:be:ca:21:e4:d1:75:ba:41:08:89:d5:3d:70:f7:af:
6b:49:a5:3a:90:06:b9:9f:19:cd:d4:25:ee:30:93:57:8f:7b:
76:7c:33:ae:f0:af:fb:18:7b:e4:92:98:27:d4:5d:fb:13:7a:
6f:49:b8:b5:d9:d1:94:88:09:ad:f8:3d:a3:ec:b8:16:4d:6b:
be:0b:63:40:51:6b:4c:4b:05:b8:0f:cd:c6:ec:04:39:ae:82:
9d:f7:d9:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZB35CSY/2jKx/AfY3sykk8IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlN2NhY2ZhNzM1Y2VlYWZkZDJhMjE0YzA5ZWU3MjQ2OTQy
NTI1MGUwHhcNMjQwNzAzMDkxOTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmE4YzkyOTExMWJiYzcxN2Q4NWRkNWQxMzZkMTg1Yzg4NDhkOGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOTGglS+c7B97SdcBq4L4pzc9Kkg
sI/mcWyTLU2e8alr9ohJRKGMSFQYJT6eKCenEJBe3fS/1DG1xAIPjV6kPBWHfrD2
2CY6XBFjt4PKMfmatRpxYaKk7RWEpPJAcNWAdivw9d+q7NhSNYlpoAHfwC0xa24Y
M+eUOSSlCagZb3KwNIBYS5cZISoNvFpiScZjnt6igVAfLqKMi4uob81RAfkBDjIV
RS6zAy7TChVrnKF5gpXK+N9dupR3A/ja8fjpYwt22XyacqeJeDOYelojtAse+w9I
m8M851EXS9qC67be4KPromHJ77rXcuG4AfPWW0nO+adK7GgSMsJpmRjShwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCaoySkRG7xxfYXdXRNtGFyISNjxMB8GA1UdIwQY
MBaAFM58rPpzXO6v3SohTAnuckaUJSUOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem55cy1uTmM3cV9kS2lGTUNlNXlScFFsSlE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hNjM2ZWQtZDIwZi00ODAyLTkyODYt
Yjg0ZWRhMmU4NDZhLzEvSnFqSktSRWJ2SEY5aGQxZEUyMFlYSWhJMlBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9hNjM2ZWQtZDIwZi00ODAyLTkyODYtYjg0ZWRhMmU4NDZh
LzEvem55cy1uTmM3cV9kS2lGTUNlNXlScFFsSlE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTp1MA0G
CSqGSIb3DQEBCwUAA4IBAQB62/pby6iwoXhgpQW5+hsRVac/UQX5e/odwXqTPgOD
gnquecZm0eg94kLntZa/AkIOxY1guPb5ocna13kBJ5GchV2WkQghJkJsh7QLU6xP
T9txQ+gj6pdV2UicV9Dn00QoM6SI4u8KcXLOaJNGUY+79iTHvWtbFASwRHY04kW0
YxO+UQcdVl1wJcqcY+RorGt4+JHVnKlSGpuVK6eJ2n+AXPoim6S+yiHk0XW6QQiJ
1T1w969rSaU6kAa5nxnN1CXuMJNXj3t2fDOu8K/7GHvkkpgn1F37E3pvSbi12dGU
iAmt+D2j7LgWTWu+C2NAUWtMSwW4D83G7AQ5roKd99nt
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:29:32 2024 by rpki-client on console-ams.rpki-client.org