Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/J7zvY1fpkATYZz93rFlbOdPrFZY.roa
File: J7zvY1fpkATYZz93rFlbOdPrFZY.roa (raw, json)
Hash identifier: F6cCuJp9Je+RhC5yqsuAoEJeI6VSxmcvRQi28+Qzrkk=
Subject key identifier: 27:BC:EF:63:57:E9:90:04:D8:67:3F:77:AC:59:5B:39:D3:EB:15:96
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018CCA2BBF08EDF52DFC88C1ADC3782E4BD4
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/J7zvY1fpkATYZz93rFlbOdPrFZY.roa
Signing time: Tue 02 Jan 2024 12:35:13 +0000
ROA not before: Tue 02 Jan 2024 12:35:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201592
IP address blocks: 213.189.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:bf:08:ed:f5:2d:fc:88:c1:ad:c3:78:2e:4b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 12:35:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27bcef6357e99004d8673f77ac595b39d3eb1596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b6:a3:37:5f:c8:cf:b5:44:b6:c8:86:39:ca:
d9:b5:73:3a:0f:6b:7e:9b:d5:c6:fc:4f:71:25:22:
26:c4:31:b6:85:62:c5:7b:2e:ec:eb:b4:d8:79:eb:
3a:e4:1c:39:cb:10:72:34:34:cc:0d:f8:c0:0b:c7:
9b:53:06:71:93:f4:37:d8:d3:65:90:20:75:d2:1a:
b7:f5:9c:4e:39:6d:10:59:63:bd:04:00:0c:9d:ad:
96:8a:fe:33:77:7c:be:99:40:39:94:be:b1:0b:99:
ea:45:f1:14:b0:c8:95:5a:61:43:80:66:b9:06:a0:
f0:5f:15:36:b5:f7:93:0d:b8:6b:49:0d:90:00:e1:
09:b4:17:9d:96:45:61:d4:36:09:b5:3f:8a:6f:3f:
31:75:9e:41:e8:5d:1b:18:75:e3:77:78:11:d6:84:
7a:f7:ec:e7:f5:2d:28:1a:21:de:fb:f8:e3:71:74:
5c:1e:68:b3:40:2f:72:83:51:74:42:f2:76:71:da:
7a:f6:cc:1f:63:d0:35:06:d4:90:9c:53:78:3a:54:
6e:54:6e:8b:94:4e:b0:4f:a3:09:24:00:f1:cb:0d:
1b:e6:f8:69:be:e4:72:f8:a4:3f:8b:c1:11:63:ed:
db:44:02:6c:da:13:df:c5:4e:63:e7:69:35:bd:1d:
59:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BC:EF:63:57:E9:90:04:D8:67:3F:77:AC:59:5B:39:D3:EB:15:96
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/J7zvY1fpkATYZz93rFlbOdPrFZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.189.40.0/24
Signature Algorithm: sha256WithRSAEncryption
95:06:9e:56:99:fb:9b:6b:2e:a3:72:a6:86:8d:de:5e:c0:2f:
9a:09:b7:e4:3e:02:93:ae:5b:1b:0b:7e:7f:64:27:bc:3c:9c:
b6:ac:84:fd:02:27:1e:b0:47:fd:04:eb:90:f9:6a:8f:fd:d7:
77:a6:a3:ea:a7:32:77:91:45:5e:c9:3f:77:7d:c0:09:d3:5d:
ba:85:f3:39:75:48:47:90:a9:7d:c5:67:0a:dd:4d:0c:d3:32:
d4:1e:3f:8e:a2:db:9d:6b:e0:00:b5:0a:5c:64:bb:cf:c4:d1:
01:bc:46:48:e3:46:61:25:6c:d8:a9:70:7a:3a:a8:db:10:77:
52:8d:b1:ea:68:2f:70:ce:7d:bc:b4:ff:54:ae:eb:0d:55:d9:
48:71:aa:ff:87:61:35:ec:2f:1e:e6:6f:65:cc:da:a4:98:d9:
85:0a:a3:04:59:fe:f2:bc:f6:45:cb:1e:c0:67:df:47:c8:c0:
45:cf:16:7a:8d:a8:7c:9a:ba:95:e6:1b:5e:e2:bd:ad:d2:26:
15:55:68:4b:00:6c:c6:2f:bb:7d:9a:97:9b:d5:8e:18:90:ef:
f8:9c:80:ec:4b:5d:32:0b:be:13:7f:f0:11:18:ce:e8:d8:02:
d8:35:95:27:5f:42:8c:3d:92:ce:9a:ea:71:22:e4:9c:93:6c:
0b:9e:e5:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKK78I7fUt/IjBrcN4LkvUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz
MzBjNWIwHhcNMjQwMTAyMTIzNTEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2JjZWY2MzU3ZTk5MDA0ZDg2NzNmNzdhYzU5NWIzOWQzZWIxNTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7ajN1/Iz7VEtsiGOcrZtXM6D2t+
m9XG/E9xJSImxDG2hWLFey7s67TYees65Bw5yxByNDTMDfjAC8ebUwZxk/Q32NNl
kCB10hq39ZxOOW0QWWO9BAAMna2Wiv4zd3y+mUA5lL6xC5nqRfEUsMiVWmFDgGa5
BqDwXxU2tfeTDbhrSQ2QAOEJtBedlkVh1DYJtT+Kbz8xdZ5B6F0bGHXjd3gR1oR6
9+zn9S0oGiHe+/jjcXRcHmizQC9yg1F0QvJ2cdp69swfY9A1BtSQnFN4OlRuVG6L
lE6wT6MJJADxyw0b5vhpvuRy+KQ/i8ERY+3bRAJs2hPfxU5j52k1vR1ZcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCe872NX6ZAE2Gc/d6xZWznT6xWWMB8GA1UdIwQY
MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt
NWQ2NjVlOTk4ZjZhLzEvSjd6dlkxZnBrQVRZWno5M3JGbGJPZFByRlpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh
LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1b0oMA0G
CSqGSIb3DQEBCwUAA4IBAQCVBp5Wmfubay6jcqaGjd5ewC+aCbfkPgKTrlsbC35/
ZCe8PJy2rIT9AicesEf9BOuQ+WqP/dd3pqPqpzJ3kUVeyT93fcAJ0126hfM5dUhH
kKl9xWcK3U0M0zLUHj+Ootuda+AAtQpcZLvPxNEBvEZI40ZhJWzYqXB6OqjbEHdS
jbHqaC9wzn28tP9UrusNVdlIcar/h2E17C8e5m9lzNqkmNmFCqMEWf7yvPZFyx7A
Z99HyMBFzxZ6jah8mrqV5hte4r2t0iYVVWhLAGzGL7t9mpeb1Y4YkO/4nIDsS10y
C74Tf/ARGM7o2ALYNZUnX0KMPZLOmupxIuSck2wLnuVA
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:32 2024 by rpki-client on console-ams.rpki-client.org