Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/ej-omJsLJd3gqtwryw1xV3WrGvM.roa
File: ej-omJsLJd3gqtwryw1xV3WrGvM.roa (raw, json)
Hash identifier: cuCCQsCmOqZrq78k6JkNCIz5EI0cTH+OoRlEdCxwVMI=
Subject key identifier: 7A:3F:A8:98:9B:0B:25:DD:E0:AA:DC:2B:CB:0D:71:57:75:AB:1A:F3
Certificate issuer: /CN=4927124d9803a7de54883164a376ea72e3c63eaf
Certificate serial: 018CC3B672E7C310E022A2617550B3F105EE
Authority key identifier: 49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/ej-omJsLJd3gqtwryw1xV3WrGvM.roa
Signing time: Mon 01 Jan 2024 06:29:23 +0000
ROA not before: Mon 01 Jan 2024 06:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8522
IP address blocks: 139.91.0.0/16 maxlen: 16
139.91.252.0/24 maxlen: 24
192.67.249.0/24 maxlen: 24
139.91.253.0/24 maxlen: 24
139.91.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:72:e7:c3:10:e0:22:a2:61:75:50:b3:f1:05:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4927124d9803a7de54883164a376ea72e3c63eaf
Validity
Not Before: Jan 1 06:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a3fa8989b0b25dde0aadc2bcb0d715775ab1af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:14:f7:17:1d:22:0f:4d:17:74:c1:52:77:31:
82:b3:d5:21:53:76:9c:8c:57:c4:1d:d9:8f:76:88:
ee:af:6c:0b:04:16:35:a1:bb:a4:31:4c:79:d1:68:
12:03:97:bd:7a:c1:57:f6:a0:28:06:50:3c:e5:40:
98:9e:38:89:6d:90:54:b1:dc:a5:c4:15:25:89:16:
42:73:0d:69:4f:94:6d:06:23:1e:af:b2:a0:0b:7c:
64:43:b3:b1:98:78:67:67:1a:4f:06:e1:50:f3:59:
1e:73:9d:c9:30:cb:31:e9:1b:f4:5c:13:5b:ef:e2:
f4:04:a8:06:71:b1:9d:a3:c3:fa:51:bd:fa:48:73:
af:67:9a:4f:6e:e2:4b:40:5c:8e:c5:bf:4c:36:68:
0a:56:12:7a:04:5d:b3:9f:ad:16:4e:26:ab:56:24:
82:76:42:75:62:26:5e:55:2d:1f:4d:3d:60:aa:34:
c1:26:88:17:68:23:03:96:1a:55:89:3a:ed:c5:0d:
84:84:59:79:d9:16:15:eb:79:e7:6d:d0:c7:2a:64:
d2:69:87:6b:b4:b7:09:51:63:b6:0a:b9:a7:3c:1d:
6e:4b:a9:90:0a:cf:59:0a:b9:4f:1c:78:99:bc:6c:
43:d2:0c:a3:3a:0a:68:70:5b:b3:d1:e0:8b:b6:6d:
14:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3F:A8:98:9B:0B:25:DD:E0:AA:DC:2B:CB:0D:71:57:75:AB:1A:F3
X509v3 Authority Key Identifier:
keyid:49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/ej-omJsLJd3gqtwryw1xV3WrGvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.91.0.0/16
192.67.249.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:88:f7:35:91:9d:38:30:b9:d8:62:e5:e3:b1:cd:76:33:47:
0d:1b:48:77:52:b6:83:97:6d:5e:14:df:30:d9:6b:9b:85:e6:
c3:a6:0d:8d:07:7e:ef:27:18:a7:4c:3f:a7:a7:6f:ca:84:07:
26:cc:a5:2a:33:c9:e2:b4:8f:c8:e5:e0:db:0e:a6:74:19:16:
de:6f:eb:c4:ea:8c:2d:2f:fd:b9:d6:f9:83:a1:a8:08:59:65:
36:55:10:4d:c7:06:cb:14:f1:14:d9:b3:89:8e:18:1a:a4:68:
98:27:9a:f0:90:22:66:fe:63:ca:12:f6:c2:e5:f0:b3:37:20:
c4:da:8c:2a:a4:15:2c:93:f4:6f:a8:0e:43:29:78:f6:ed:50:
7d:1f:e5:a6:73:9f:a0:4b:88:d6:fa:03:f7:30:4c:ca:21:96:
1d:96:42:62:0b:05:84:f1:fe:7d:75:7f:50:59:3c:ea:aa:b4:
9b:ce:61:b4:78:3a:c4:dd:a0:70:f3:1d:a6:50:0c:81:d2:d3:
a4:a5:17:2d:b5:2e:a4:c6:50:95:53:8c:ec:52:cc:df:5a:f2:
eb:e9:b7:f6:aa:28:87:7c:e6:83:8a:01:a2:73:b6:bd:2e:98:
c5:de:cd:ce:99:cb:93:ea:ce:1f:f4:7f:61:bd:a5:57:b3:f5:
e0:bd:56:aa
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgISAYzDtnLnwxDgIqJhdVCz8QXuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MjcxMjRkOTgwM2E3ZGU1NDg4MzE2NGEzNzZlYTcyZTNj
NjNlYWYwHhcNMjQwMTAxMDYyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTNmYTg5ODliMGIyNWRkZTBhYWRjMmJjYjBkNzE1Nzc1YWIxYWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRT3Fx0iD00XdMFSdzGCs9UhU3ac
jFfEHdmPdojur2wLBBY1obukMUx50WgSA5e9esFX9qAoBlA85UCYnjiJbZBUsdyl
xBUliRZCcw1pT5RtBiMer7KgC3xkQ7OxmHhnZxpPBuFQ81kec53JMMsx6Rv0XBNb
7+L0BKgGcbGdo8P6Ub36SHOvZ5pPbuJLQFyOxb9MNmgKVhJ6BF2zn60WTiarViSC
dkJ1YiZeVS0fTT1gqjTBJogXaCMDlhpViTrtxQ2EhFl52RYV63nnbdDHKmTSaYdr
tLcJUWO2CrmnPB1uS6mQCs9ZCrlPHHiZvGxD0gyjOgpocFuz0eCLtm0UEwIDAQAB
o4ICDjCCAgowHQYDVR0OBBYEFHo/qJibCyXd4KrcK8sNcVd1qxrzMB8GA1UdIwQY
MBaAFEknEk2YA6feVIgxZKN26nLjxj6vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1NjU1RaZ0RwOTVVaURGa28zYnFjdVBHUHE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zZTJjMzgtZjk2Zi00MGRmLWFlYWMt
ZjAxNTBjODFhY2Y1LzEvZWotb21Kc0xKZDNncXR3cnl3MXhWM1dyR3ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8zZTJjMzgtZjk2Zi00MGRmLWFlYWMtZjAxNTBjODFhY2Y1
LzEvU1NjU1RaZ0RwOTVVaURGa28zYnFjdVBHUHE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAi1sDBADA
Q/kwDQYJKoZIhvcNAQELBQADggEBAG+I9zWRnTgwudhi5eOxzXYzRw0bSHdStoOX
bV4U3zDZa5uF5sOmDY0Hfu8nGKdMP6enb8qEBybMpSozyeK0j8jl4NsOpnQZFt5v
68TqjC0v/bnW+YOhqAhZZTZVEE3HBssU8RTZs4mOGBqkaJgnmvCQImb+Y8oS9sLl
8LM3IMTajCqkFSyT9G+oDkMpePbtUH0f5aZzn6BLiNb6A/cwTMohlh2WQmILBYTx
/n11f1BZPOqqtJvOYbR4OsTdoHDzHaZQDIHS06SlFy21LqTGUJVTjOxSzN9a8uvp
t/aqKId85oOKAaJztr0umMXezc6Zy5Pqzh/0f2G9pVez9eC9Vqo=
-----END CERTIFICATE-----
Generated at Sat Jun 8 03:04:07 2024 by rpki-client on console-ams.rpki-client.org