Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/rJaMDq0EsCrOtNFIgPrN5nibKuc.roa
File: rJaMDq0EsCrOtNFIgPrN5nibKuc.roa (raw, json)
Hash identifier: 4aSTX/MaYwAUfDPw3sKPkzoSGqfzr/QrPZKFqwxY7zw=
Subject key identifier: AC:96:8C:0E:AD:04:B0:2A:CE:B4:D1:48:80:FA:CD:E6:78:9B:2A:E7
Certificate issuer: /CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Certificate serial: 018EA31A7A38822144BAF8E61F026CCAD3BD
Authority key identifier: 05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/rJaMDq0EsCrOtNFIgPrN5nibKuc.roa
Signing time: Wed 03 Apr 2024 08:36:45 +0000
ROA not before: Wed 03 Apr 2024 08:36:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6730
IP address blocks: 77.72.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a3:1a:7a:38:82:21:44:ba:f8:e6:1f:02:6c:ca:d3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Validity
Not Before: Apr 3 08:36:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac968c0ead04b02aceb4d14880facde6789b2ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:04:5b:32:f0:0e:b0:01:4f:e7:f5:8c:70:03:
11:01:43:dd:c5:13:d8:0e:da:39:d0:ad:6d:04:5a:
52:10:bb:ef:04:4d:98:98:0f:60:7a:71:83:1d:21:
6d:d5:0e:2c:14:91:30:01:b9:be:83:6b:45:42:59:
2d:a4:60:f2:a7:63:2a:47:98:17:96:44:c0:78:96:
0e:a7:5f:58:db:49:72:cc:6e:41:28:34:16:30:34:
2a:56:f5:76:21:86:21:9a:95:42:7a:6e:c2:9c:32:
78:04:ad:8c:b5:7d:04:08:72:20:40:1e:4f:c1:a9:
d2:36:b4:2c:0d:d1:90:1f:1b:04:90:49:d9:59:20:
b2:0c:3a:23:bb:c2:cb:b0:83:0a:81:d9:f7:2c:e8:
e0:b3:21:42:eb:6e:ec:16:51:bb:ba:28:5f:0a:ca:
df:91:9f:2f:8c:2d:ae:1e:bb:27:bb:3e:c6:4a:bd:
f2:02:fc:d8:28:d3:ab:71:a4:bb:01:d7:71:b8:e5:
e9:a3:64:46:17:7f:1d:d4:3b:e8:e8:39:89:7f:c6:
ed:1e:a4:85:f9:54:8a:47:37:69:d3:5f:b7:e1:e3:
7c:1b:0c:68:1e:a7:c3:b5:95:c4:4c:88:32:d6:5e:
88:3b:66:a3:0b:4c:bf:fa:ec:54:72:41:55:73:e8:
f8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:96:8C:0E:AD:04:B0:2A:CE:B4:D1:48:80:FA:CD:E6:78:9B:2A:E7
X509v3 Authority Key Identifier:
keyid:05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/rJaMDq0EsCrOtNFIgPrN5nibKuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.64.0/21
Signature Algorithm: sha256WithRSAEncryption
79:b6:6a:f6:73:7a:ca:ac:94:77:16:e5:26:14:5b:07:a6:1c:
d3:75:74:71:1d:93:f3:0c:af:d4:d9:ff:62:11:ae:2f:f2:a9:
61:8f:8d:18:50:20:e2:45:a9:c9:70:bd:dd:8d:6a:90:e1:75:
c9:36:38:b3:53:d7:ac:86:93:43:bf:c0:04:fe:38:11:65:49:
1b:f9:df:99:64:92:fc:c9:6e:ee:24:e7:1a:d3:ed:ab:4d:d7:
9a:75:9f:32:d8:90:ee:a4:45:fa:34:cc:b9:8a:e2:5d:c6:8b:
97:9a:d6:66:1d:2d:aa:95:b7:06:3b:01:a7:20:20:26:f0:77:
79:8d:5a:1c:70:ef:d3:7e:19:46:ff:4b:11:a7:7c:5f:b9:bc:
0d:92:0d:dd:a8:a2:9d:c0:32:57:2d:86:9e:9e:ea:d3:e3:b2:
d5:af:2f:34:20:bb:a4:02:6e:f6:37:dc:c2:9f:3f:c8:3b:23:
10:58:55:5d:9d:f1:90:95:c2:53:41:c0:e3:a0:3e:67:a9:8b:
09:b9:d0:be:a7:14:c0:3d:55:00:47:01:76:91:b4:36:c6:c0:
b7:b7:98:f3:47:b4:9b:4c:d4:8c:83:19:65:c2:02:ed:37:54:
a4:98:2a:1a:51:47:92:4a:99:36:25:2b:99:2f:fb:4c:1b:a4:
9c:68:e2:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY6jGno4giFEuvjmHwJsytO9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MmIxMGU1NDdlODlmZjZjN2IzOWI2Y2E5N2ZiMTZiM2Zk
ZmJlNGYwHhcNMjQwNDAzMDgzNjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzk2OGMwZWFkMDRiMDJhY2ViNGQxNDg4MGZhY2RlNjc4OWIyYWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwRbMvAOsAFP5/WMcAMRAUPdxRPY
Dto50K1tBFpSELvvBE2YmA9genGDHSFt1Q4sFJEwAbm+g2tFQlktpGDyp2MqR5gX
lkTAeJYOp19Y20lyzG5BKDQWMDQqVvV2IYYhmpVCem7CnDJ4BK2MtX0ECHIgQB5P
wanSNrQsDdGQHxsEkEnZWSCyDDoju8LLsIMKgdn3LOjgsyFC627sFlG7uihfCsrf
kZ8vjC2uHrsnuz7GSr3yAvzYKNOrcaS7AddxuOXpo2RGF38d1Dvo6DmJf8btHqSF
+VSKRzdp01+34eN8GwxoHqfDtZXETIgy1l6IO2ajC0y/+uxUckFVc+j4ywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKyWjA6tBLAqzrTRSID6zeZ4myrnMB8GA1UdIwQY
MBaAFAUrEOVH6J/2x7ObbKl/sWs/375PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlNzUTVVZm9uX2JIczV0c3FYLXhhel9mdms4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8yYWEyMTgtN2UxZS00OTk0LThjYjAt
MWY3NmU5ZGNmZjkyLzEvckphTURxMEVzQ3JPdE5GSWdQck41bmliS3VjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8yYWEyMTgtN2UxZS00OTk0LThjYjAtMWY3NmU5ZGNmZjky
LzEvQlNzUTVVZm9uX2JIczV0c3FYLXhhel9mdms4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTUhAMA0G
CSqGSIb3DQEBCwUAA4IBAQB5tmr2c3rKrJR3FuUmFFsHphzTdXRxHZPzDK/U2f9i
Ea4v8qlhj40YUCDiRanJcL3djWqQ4XXJNjizU9eshpNDv8AE/jgRZUkb+d+ZZJL8
yW7uJOca0+2rTdeadZ8y2JDupEX6NMy5iuJdxouXmtZmHS2qlbcGOwGnICAm8Hd5
jVoccO/TfhlG/0sRp3xfubwNkg3dqKKdwDJXLYaenurT47LVry80ILukAm72N9zC
nz/IOyMQWFVdnfGQlcJTQcDjoD5nqYsJudC+pxTAPVUARwF2kbQ2xsC3t5jzR7Sb
TNSMgxllwgLtN1SkmCoaUUeSSpk2JSuZL/tMG6ScaOJy
-----END CERTIFICATE-----
Generated at Sun May 19 06:21:52 2024 by rpki-client on console-ams.rpki-client.org