Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/yjzj9SAdtv1HOrEQ3v3rlcU0_c0.roa
File: yjzj9SAdtv1HOrEQ3v3rlcU0_c0.roa (raw, json)
Hash identifier: o0ovxiB6m1OaP0HVRH0hk0ciVEvzco5GU46XKhCCKNE=
Subject key identifier: CA:3C:E3:F5:20:1D:B6:FD:47:3A:B1:10:DE:FD:EB:95:C5:34:FD:CD
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018CC348E28BA376B9AF92DFCA8B9013A17A
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/yjzj9SAdtv1HOrEQ3v3rlcU0_c0.roa
Signing time: Mon 01 Jan 2024 04:29:42 +0000
ROA not before: Mon 01 Jan 2024 04:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204970
IP address blocks: 194.209.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e2:8b:a3:76:b9:af:92:df:ca:8b:90:13:a1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 04:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca3ce3f5201db6fd473ab110defdeb95c534fdcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:30:00:a3:a0:a1:4d:64:46:86:12:b2:c7:
53:5d:6f:0d:a4:a5:e8:f0:10:8e:79:5a:1c:82:53:
8a:55:b5:77:0d:87:0d:2f:53:52:95:f2:af:1f:5b:
93:c7:6f:35:2c:fc:97:02:2d:0b:be:b2:1c:4e:e7:
ca:81:dc:5c:44:68:9c:43:5f:a5:9a:06:f0:fa:cb:
c4:28:8a:ca:42:b9:1b:8b:44:6a:93:c1:d2:51:04:
a4:9a:55:4e:e3:59:31:c0:24:f2:58:11:e5:1e:f0:
25:d4:48:73:25:5e:20:85:d4:a6:e2:e7:6d:aa:2b:
76:7b:3b:ae:81:dd:2a:cb:98:79:f0:08:72:5d:a1:
8c:c4:84:54:23:2b:eb:45:78:f3:6d:0d:9b:6b:c0:
57:d4:03:04:b2:05:c1:38:ea:06:85:23:b7:ec:0c:
f4:e3:5c:40:01:ff:2d:99:56:6b:74:9d:4c:60:6f:
63:2b:d1:44:17:1f:6a:f1:62:d6:62:eb:18:ff:5f:
5d:51:8a:76:60:89:b4:65:09:7a:53:6e:6e:42:db:
41:63:42:64:9f:98:f0:70:3f:7c:ba:28:fd:b2:71:
69:b5:e3:ee:aa:54:43:c0:d1:62:2a:0f:0a:f2:d8:
ef:12:59:f4:f5:bf:a8:ff:cf:19:f7:5a:a9:64:a6:
23:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3C:E3:F5:20:1D:B6:FD:47:3A:B1:10:DE:FD:EB:95:C5:34:FD:CD
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/yjzj9SAdtv1HOrEQ3v3rlcU0_c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.54.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:25:fb:a7:5f:e4:be:a4:a8:50:b9:e1:69:41:11:12:25:91:
14:3d:65:3b:c9:22:d0:ac:ed:be:a1:de:a5:b8:a3:ce:a5:14:
1e:7f:06:28:c3:22:41:51:68:f9:85:6d:dc:64:08:f6:94:3d:
3f:98:45:63:3e:b1:e7:f3:20:a2:aa:d0:cb:c7:b4:91:cc:8b:
cf:c8:5e:1d:fd:c9:73:de:28:ca:d3:61:d1:48:2d:52:e8:25:
70:13:34:e5:2d:fa:ae:47:b6:e5:2a:5d:f0:c4:1c:55:79:7c:
2c:6e:e4:97:ec:14:fb:7a:b8:17:86:f7:b8:e5:a4:13:fb:ee:
b9:81:ad:00:9e:dd:fd:fa:cc:63:7b:e5:9e:06:46:d7:f6:e5:
29:ff:14:c2:9c:80:27:02:48:70:1e:0a:07:40:ad:54:ad:e2:
c5:7c:1c:5a:45:6f:4d:47:86:d7:55:e5:d4:ab:da:64:62:0b:
01:7d:8b:31:da:e8:29:e6:4c:5d:73:67:36:86:dd:61:3c:b9:
8a:75:c8:bc:0b:d3:75:4d:17:d9:5d:06:eb:6c:b4:f0:f3:a7:
a8:e3:99:99:bf:16:9d:4c:e9:23:98:88:d2:78:4c:72:29:8d:
05:5b:f6:9d:9d:69:fb:60:8c:f7:df:02:7a:d7:ae:46:ca:f5:
c6:94:05:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSOKLo3a5r5LfyouQE6F6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjQwMTAxMDQyOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTNjZTNmNTIwMWRiNmZkNDczYWIxMTBkZWZkZWI5NWM1MzRmZGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuMwAKOgoU1kRoYSssdTXW8NpKXo
8BCOeVocglOKVbV3DYcNL1NSlfKvH1uTx281LPyXAi0LvrIcTufKgdxcRGicQ1+l
mgbw+svEKIrKQrkbi0Rqk8HSUQSkmlVO41kxwCTyWBHlHvAl1EhzJV4ghdSm4udt
qit2ezuugd0qy5h58AhyXaGMxIRUIyvrRXjzbQ2ba8BX1AMEsgXBOOoGhSO37Az0
41xAAf8tmVZrdJ1MYG9jK9FEFx9q8WLWYusY/19dUYp2YIm0ZQl6U25uQttBY0Jk
n5jwcD98uij9snFptePuqlRDwNFiKg8K8tjvEln09b+o/88Z91qpZKYj/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMo84/UgHbb9RzqxEN7965XFNP3NMB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEveWp6ajlTQWR0djFIT3JFUTN2M3JsY1UwX2MwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtE2MA0G
CSqGSIb3DQEBCwUAA4IBAQC9JfunX+S+pKhQueFpQRESJZEUPWU7ySLQrO2+od6l
uKPOpRQefwYowyJBUWj5hW3cZAj2lD0/mEVjPrHn8yCiqtDLx7SRzIvPyF4d/clz
3ijK02HRSC1S6CVwEzTlLfquR7blKl3wxBxVeXwsbuSX7BT7ergXhve45aQT++65
ga0Ant39+sxje+WeBkbX9uUp/xTCnIAnAkhwHgoHQK1UreLFfBxaRW9NR4bXVeXU
q9pkYgsBfYsx2ugp5kxdc2c2ht1hPLmKdci8C9N1TRfZXQbrbLTw86eo45mZvxad
TOkjmIjSeExyKY0FW/adnWn7YIz33wJ6165GyvXGlAX5
-----END CERTIFICATE-----
Generated at Sat Jun 1 09:21:49 2024 by rpki-client on console-fra.rpki-client.org