Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/5a1279-ba32-4840-ab9f-1805b3083886/1/JGsJOXsM1MeaLAh590gBW7PNApU.roa
File: JGsJOXsM1MeaLAh590gBW7PNApU.roa (raw, json)
Hash identifier: ZludnWROEhMg+ODqZnJ0blQNcE9dZiGcbIRgJlKOi00=
Subject key identifier: 24:6B:09:39:7B:0C:D4:C7:9A:2C:08:79:F7:48:01:5B:B3:CD:02:95
Certificate issuer: /CN=7436d6e8002334c7434eacdef8bf2ce7216c953f
Certificate serial: 018CC9BC83E1B743136A12461F0A248B427E
Authority key identifier: 74:36:D6:E8:00:23:34:C7:43:4E:AC:DE:F8:BF:2C:E7:21:6C:95:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dDbW6AAjNMdDTqze-L8s5yFslT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/5a1279-ba32-4840-ab9f-1805b3083886/1/JGsJOXsM1MeaLAh590gBW7PNApU.roa
Signing time: Tue 02 Jan 2024 10:33:44 +0000
ROA not before: Tue 02 Jan 2024 10:33:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210814
IP address blocks: 2001:678:778::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/5a1279-ba32-4840-ab9f-1805b3083886/1/dDbW6AAjNMdDTqze-L8s5yFslT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/5a1279-ba32-4840-ab9f-1805b3083886/1/dDbW6AAjNMdDTqze-L8s5yFslT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dDbW6AAjNMdDTqze-L8s5yFslT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:83:e1:b7:43:13:6a:12:46:1f:0a:24:8b:42:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7436d6e8002334c7434eacdef8bf2ce7216c953f
Validity
Not Before: Jan 2 10:33:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=246b09397b0cd4c79a2c0879f748015bb3cd0295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6a:5c:fd:88:37:3d:42:c1:0d:1f:28:ef:b5:
83:1f:54:0d:b3:cb:59:ea:92:fa:a2:46:21:b2:f7:
e8:fc:2c:16:28:83:a0:bb:61:ff:9b:bd:ba:f1:d6:
d6:0f:32:ed:90:8d:eb:7e:25:19:51:d5:a2:01:79:
0c:24:64:b1:a8:79:e4:81:05:72:2a:4f:3e:e7:f0:
02:32:b2:89:8d:00:cf:3f:e9:55:53:0e:72:ab:61:
c9:d3:1b:bd:cd:6f:f4:da:fa:0e:31:9f:92:b2:e8:
7c:74:36:f7:ce:d9:1c:03:e9:8a:60:a9:70:b9:0b:
ef:45:6d:ee:83:56:4b:96:fd:d9:42:5b:f5:2c:39:
ea:ed:03:22:e2:bc:a9:73:a6:89:03:5e:60:ec:8b:
02:8e:4c:07:e1:89:39:58:77:fc:29:41:28:a3:eb:
80:01:32:f4:bb:1a:ae:55:3b:5c:5c:e0:57:b6:85:
76:d1:00:3f:e5:9d:d2:73:d8:65:3f:25:b1:44:e8:
ee:e1:d6:97:3a:b9:c0:3e:ba:ef:55:b4:59:00:07:
dc:ca:e1:cf:cd:ce:7d:03:8b:02:6f:f5:0d:3a:8d:
37:de:a4:99:2e:b5:9a:74:02:61:41:cf:ca:20:b1:
c3:59:9e:f2:da:41:42:95:c3:da:a1:9c:3a:72:25:
02:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6B:09:39:7B:0C:D4:C7:9A:2C:08:79:F7:48:01:5B:B3:CD:02:95
X509v3 Authority Key Identifier:
keyid:74:36:D6:E8:00:23:34:C7:43:4E:AC:DE:F8:BF:2C:E7:21:6C:95:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dDbW6AAjNMdDTqze-L8s5yFslT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5a1279-ba32-4840-ab9f-1805b3083886/1/JGsJOXsM1MeaLAh590gBW7PNApU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5a1279-ba32-4840-ab9f-1805b3083886/1/dDbW6AAjNMdDTqze-L8s5yFslT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:778::/48
Signature Algorithm: sha256WithRSAEncryption
9f:9f:bb:ed:f3:86:7e:0f:62:f1:3b:d8:02:b7:61:e9:7a:61:
21:ad:3c:09:cd:08:8d:7f:86:dd:6c:14:93:fc:d4:fd:08:29:
4e:f3:f8:cc:fd:db:40:7b:29:e5:25:77:51:d9:d2:f0:55:7a:
df:d9:57:ad:bf:64:f9:06:ca:a8:65:f1:99:a1:f1:47:73:4c:
21:ab:df:9c:24:f8:1f:12:20:f5:9c:3b:d2:2f:7f:02:36:8e:
85:5a:a4:4b:ec:a7:b8:69:db:5e:a4:2e:c1:6f:b4:d1:8a:a3:
0b:32:49:90:46:9b:85:d3:c8:08:3e:98:7f:14:3a:2e:99:5b:
e4:9f:44:be:90:7d:bb:4f:73:e7:5b:87:69:23:36:22:6d:36:
12:9a:3c:23:01:d8:bf:73:e7:3d:f6:c9:ad:ba:0e:46:27:62:
c2:d7:e5:c3:1e:51:32:67:89:14:4e:82:84:ad:5d:96:e6:03:
d1:84:41:f4:5c:2c:b2:13:ce:76:98:1d:54:90:f8:bd:59:f6:
46:7e:84:25:52:07:65:7f:0d:fe:a1:06:15:f9:33:b9:d5:57:
03:27:2e:a3:b5:ee:8a:5c:03:1c:f4:94:fa:0a:1e:95:ac:aa:
f8:d8:32:73:6a:5f:28:e0:cb:9d:85:be:b0:1c:d5:8d:41:f8:
b8:53:ff:04
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzJvIPht0MTahJGHwoki0J+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MzZkNmU4MDAyMzM0Yzc0MzRlYWNkZWY4YmYyY2U3MjE2
Yzk1M2YwHhcNMjQwMTAyMTAzMzQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDZiMDkzOTdiMGNkNGM3OWEyYzA4NzlmNzQ4MDE1YmIzY2QwMjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Gpc/Yg3PULBDR8o77WDH1QNs8tZ
6pL6okYhsvfo/CwWKIOgu2H/m7268dbWDzLtkI3rfiUZUdWiAXkMJGSxqHnkgQVy
Kk8+5/ACMrKJjQDPP+lVUw5yq2HJ0xu9zW/02voOMZ+Ssuh8dDb3ztkcA+mKYKlw
uQvvRW3ug1ZLlv3ZQlv1LDnq7QMi4rypc6aJA15g7IsCjkwH4Yk5WHf8KUEoo+uA
ATL0uxquVTtcXOBXtoV20QA/5Z3Sc9hlPyWxROju4daXOrnAPrrvVbRZAAfcyuHP
zc59A4sCb/UNOo033qSZLrWadAJhQc/KILHDWZ7y2kFClcPaoZw6ciUCewIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCRrCTl7DNTHmiwIefdIAVuzzQKVMB8GA1UdIwQY
MBaAFHQ21ugAIzTHQ06s3vi/LOchbJU/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZERiVzZBQWpOTWREVHF6ZS1MOHM1eUZzbFQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81YTEyNzktYmEzMi00ODQwLWFiOWYt
MTgwNWIzMDgzODg2LzEvSkdzSk9Yc00xTWVhTEFoNTkwZ0JXN1BOQXBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS81YTEyNzktYmEzMi00ODQwLWFiOWYtMTgwNWIzMDgzODg2
LzEvZERiVzZBQWpOTWREVHF6ZS1MOHM1eUZzbFQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAd4
MA0GCSqGSIb3DQEBCwUAA4IBAQCfn7vt84Z+D2LxO9gCt2HpemEhrTwJzQiNf4bd
bBST/NT9CClO8/jM/dtAeynlJXdR2dLwVXrf2Vetv2T5BsqoZfGZofFHc0whq9+c
JPgfEiD1nDvSL38CNo6FWqRL7Ke4adtepC7Bb7TRiqMLMkmQRpuF08gIPph/FDou
mVvkn0S+kH27T3PnW4dpIzYibTYSmjwjAdi/c+c99smtug5GJ2LC1+XDHlEyZ4kU
ToKErV2W5gPRhEH0XCyyE852mB1UkPi9WfZGfoQlUgdlfw3+oQYV+TO51VcDJy6j
te6KXAMc9JT6Ch6VrKr42DJzal8o4Mudhb6wHNWNQfi4U/8E
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:34:37 2024 by rpki-client on console-ams.rpki-client.org