Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Jj6Y-S4P8JHhgRrNOudMepEAEMk.roa
File: Jj6Y-S4P8JHhgRrNOudMepEAEMk.roa (raw, json)
Hash identifier: tDmdJiMxUuHABQGMsfmyMuhE8MeGASN7sBRbVWEJvhI=
Subject key identifier: 26:3E:98:F9:2E:0F:F0:91:E1:81:1A:CD:3A:E7:4C:7A:91:00:10:C9
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018CC56E0C0A812D4B7728EF52AF56FAAEAE
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Jj6Y-S4P8JHhgRrNOudMepEAEMk.roa
Signing time: Mon 01 Jan 2024 14:29:32 +0000
ROA not before: Mon 01 Jan 2024 14:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59504
IP address blocks: 46.161.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 14:11:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:0c:0a:81:2d:4b:77:28:ef:52:af:56:fa:ae:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 14:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=263e98f92e0ff091e1811acd3ae74c7a910010c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9d:06:60:0f:e8:9e:90:06:99:43:4b:cd:b6:
52:68:57:81:26:1c:4d:ce:39:31:2d:95:91:a3:a8:
20:bd:37:ad:24:bb:0b:b9:89:62:b4:b0:05:c9:70:
79:b6:e0:c0:d5:3e:76:d8:78:bf:d1:ec:6a:b8:b2:
0e:0d:48:27:f6:6b:a8:30:d3:47:f5:34:c5:eb:06:
4f:35:73:4a:ed:27:2d:6e:fe:c3:3e:b9:c7:77:cc:
5c:5b:c6:06:fe:e9:38:c1:76:a3:03:d4:fa:8d:cc:
d7:c6:84:57:f5:30:53:4e:c9:ac:ee:c2:31:2c:fe:
1e:d1:8f:5e:95:e9:f1:54:17:99:18:7d:d3:bf:aa:
e5:2a:1e:cf:71:50:94:54:cb:3a:59:43:3e:2e:44:
d8:69:df:e0:8a:d6:ad:5c:0d:6c:37:37:fa:55:a5:
db:97:36:4b:08:c1:fa:9c:59:67:b8:55:10:4d:fd:
18:9a:c5:90:da:2a:5f:8a:84:97:08:45:f1:95:9c:
d2:8b:4f:ec:8c:b7:82:58:93:a0:32:8f:11:5b:07:
94:a1:28:ca:e7:ea:e9:0f:97:eb:74:62:61:9a:1e:
f6:23:bd:67:f2:9a:8e:da:ab:cf:32:34:8b:23:8d:
ea:e0:ac:ba:ef:a1:91:4e:30:58:b9:a7:16:4a:a9:
c0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3E:98:F9:2E:0F:F0:91:E1:81:1A:CD:3A:E7:4C:7A:91:00:10:C9
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Jj6Y-S4P8JHhgRrNOudMepEAEMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.0.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:65:95:f4:91:9e:53:54:e3:c7:02:21:ef:ab:a6:9f:17:ed:
ae:24:30:75:63:1e:8a:03:f7:e6:93:a3:ea:0a:8c:53:55:58:
67:aa:5a:45:5b:0a:cd:90:bb:4a:96:de:57:c8:ae:e7:b3:79:
71:e1:d7:48:0a:05:ea:d3:58:db:be:e1:94:90:54:15:db:cd:
53:8a:fb:33:95:50:6e:54:da:73:d5:7a:ae:d7:78:71:b9:3c:
39:82:48:4e:3f:b2:0b:78:9e:61:e0:e5:a8:e7:39:82:e6:6c:
7c:96:74:1f:74:3b:e3:87:b6:72:03:55:bd:7e:bc:f2:b7:6d:
17:e4:5f:2f:96:c4:ce:17:a9:df:e6:bf:bb:04:56:15:50:05:
85:8f:8f:ae:52:e1:96:5b:6d:05:ff:5e:e8:53:4e:f1:be:57:
6b:cb:ef:94:61:43:11:b5:14:0b:f7:a6:a9:c5:cd:53:01:9a:
51:ac:f8:a0:9b:f6:91:33:c2:ae:95:5b:31:b3:36:45:82:47:
02:37:9e:02:a9:ef:94:20:3c:4b:2a:99:92:de:4b:0a:bf:3b:
ea:bb:8d:a3:9b:d3:85:7e:45:1a:73:2c:1a:15:3b:ea:0f:60:
1b:f2:ea:76:4a:43:4f:2c:08:16:b3:fc:51:51:bf:57:cd:73:
03:64:19:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbgwKgS1LdyjvUq9W+q6uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjQwMTAxMTQyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjNlOThmOTJlMGZmMDkxZTE4MTFhY2QzYWU3NGM3YTkxMDAxMGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyp0GYA/onpAGmUNLzbZSaFeBJhxN
zjkxLZWRo6ggvTetJLsLuYlitLAFyXB5tuDA1T522Hi/0exquLIODUgn9muoMNNH
9TTF6wZPNXNK7Sctbv7DPrnHd8xcW8YG/uk4wXajA9T6jczXxoRX9TBTTsms7sIx
LP4e0Y9elenxVBeZGH3Tv6rlKh7PcVCUVMs6WUM+LkTYad/gitatXA1sNzf6VaXb
lzZLCMH6nFlnuFUQTf0YmsWQ2ipfioSXCEXxlZzSi0/sjLeCWJOgMo8RWweUoSjK
5+rpD5frdGJhmh72I71n8pqO2qvPMjSLI43q4Ky676GRTjBYuacWSqnADQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCY+mPkuD/CR4YEazTrnTHqRABDJMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvSmo2WS1TNFA4SkhoZ1JyTk91ZE1lcEVBRU1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALqEAMA0G
CSqGSIb3DQEBCwUAA4IBAQA9ZZX0kZ5TVOPHAiHvq6afF+2uJDB1Yx6KA/fmk6Pq
CoxTVVhnqlpFWwrNkLtKlt5XyK7ns3lx4ddICgXq01jbvuGUkFQV281TivszlVBu
VNpz1Xqu13hxuTw5gkhOP7ILeJ5h4OWo5zmC5mx8lnQfdDvjh7ZyA1W9frzyt20X
5F8vlsTOF6nf5r+7BFYVUAWFj4+uUuGWW20F/17oU07xvldry++UYUMRtRQL96ap
xc1TAZpRrPigm/aRM8KulVsxszZFgkcCN54Cqe+UIDxLKpmS3ksKvzvqu42jm9OF
fkUacywaFTvqD2Ab8up2SkNPLAgWs/xRUb9XzXMDZBnD
-----END CERTIFICATE-----
Generated at Mon May 13 17:19:43 2024 by rpki-client on console-ams.rpki-client.org