Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/jiC7IXLMmHxlaMPfCPaZZ28-o6U.roa
File: jiC7IXLMmHxlaMPfCPaZZ28-o6U.roa (raw, json)
Hash identifier: kRvN086OhMKvZSOWqRQUhMcYwbeXFZI5H+8YMFWyqAE=
Subject key identifier: 8E:20:BB:21:72:CC:98:7C:65:68:C3:DF:08:F6:99:67:6F:3E:A3:A5
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 018E77F93799C6EAF2B1A631DC775B8B7CA3
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/jiC7IXLMmHxlaMPfCPaZZ28-o6U.roa
Signing time: Mon 25 Mar 2024 23:36:45 +0000
ROA not before: Mon 25 Mar 2024 23:36:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59682
IP address blocks: 94.131.5.0/24 maxlen: 24
95.164.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:77:f9:37:99:c6:ea:f2:b1:a6:31:dc:77:5b:8b:7c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Mar 25 23:36:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e20bb2172cc987c6568c3df08f699676f3ea3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:03:f4:61:15:9b:8f:c7:7a:04:d3:7a:8a:
31:0a:05:c2:ed:ed:a2:50:d8:31:70:b1:fc:1c:9b:
0f:44:db:34:60:7a:1c:67:d7:e8:84:b8:26:d7:f8:
3f:8f:35:78:bd:06:bf:e2:70:10:49:09:48:47:87:
99:ec:0f:7c:6c:ea:83:d0:22:f8:ca:3e:2c:5e:a0:
28:93:0a:cc:f8:a5:f5:de:35:40:22:79:99:f8:75:
ad:3f:2a:5d:87:fc:93:88:c4:80:37:6e:68:d9:be:
de:3f:8e:1e:46:4c:99:e5:c6:0d:83:01:c7:17:a4:
59:ef:56:64:ec:83:ea:70:95:9c:f4:4d:a7:c8:c0:
1c:ae:6b:da:1b:55:14:3b:8f:d7:3d:85:3c:34:36:
5b:75:c8:31:dd:49:ca:4b:2a:f3:0f:dd:af:28:01:
97:f6:f5:62:a5:70:8f:01:27:ea:ce:0e:fb:c4:a1:
b2:17:62:8a:4d:9b:a0:93:47:5f:a8:30:7c:ac:fb:
f2:4c:f2:4a:1b:5c:a2:70:df:61:04:04:86:14:44:
97:10:e1:7b:c9:51:43:3d:ab:43:45:12:1b:d2:6e:
93:a7:4e:57:c3:e7:0a:fe:92:e3:23:31:0a:9c:c1:
68:d6:5b:94:db:d5:2a:ef:e5:42:06:c6:c6:a1:65:
92:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:20:BB:21:72:CC:98:7C:65:68:C3:DF:08:F6:99:67:6F:3E:A3:A5
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/jiC7IXLMmHxlaMPfCPaZZ28-o6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.5.0/24
95.164.95.0/24
Signature Algorithm: sha256WithRSAEncryption
38:2d:1a:f3:aa:28:da:75:07:13:41:94:b9:8d:62:a7:84:ae:
9a:56:19:f3:02:83:55:fc:64:46:15:95:ef:29:d2:dc:21:1e:
8c:56:7f:cb:bf:43:78:98:7a:94:1a:db:60:b6:1b:64:63:1c:
6c:42:1d:32:e4:42:63:9f:c0:dc:d7:9f:b8:56:b6:20:89:fa:
6f:26:50:d1:95:98:5a:da:44:2e:a8:64:95:28:10:0f:07:dd:
5c:f7:84:0a:82:72:7a:3c:86:e8:2c:36:50:30:6b:a7:0e:c9:
14:15:65:48:ad:8f:0d:88:4b:25:be:0d:c7:a1:9c:9e:43:d2:
c8:f2:34:d3:dc:b4:fe:8d:e3:52:a5:35:b4:e2:87:b0:60:dc:
c2:87:2d:ed:15:31:1b:f9:ef:8e:88:eb:34:fd:8e:0d:38:4a:
ee:17:ab:2c:e3:39:2b:5b:62:99:6e:da:f8:65:55:24:b7:b3:
b1:67:17:43:5f:ca:a0:9f:68:2f:eb:40:ed:52:54:6f:a3:4b:
cf:41:7d:80:3e:19:a8:be:81:3c:27:21:26:c6:c5:7b:70:bd:
7a:81:5a:bf:1d:c2:28:c4:cf:bf:62:09:dc:5e:f8:bd:72:87:
6b:bb:10:48:db:59:54:df:c6:b9:8b:47:af:7e:2f:ee:66:6a:
27:5e:9f:1c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY53+TeZxurysaYx3Hdbi3yjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj
NjJhMDMwHhcNMjQwMzI1MjMzNjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTIwYmIyMTcyY2M5ODdjNjU2OGMzZGYwOGY2OTk2NzZmM2VhM2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusgD9GEVm4/HegTTeooxCgXC7e2i
UNgxcLH8HJsPRNs0YHocZ9fohLgm1/g/jzV4vQa/4nAQSQlIR4eZ7A98bOqD0CL4
yj4sXqAokwrM+KX13jVAInmZ+HWtPypdh/yTiMSAN25o2b7eP44eRkyZ5cYNgwHH
F6RZ71Zk7IPqcJWc9E2nyMAcrmvaG1UUO4/XPYU8NDZbdcgx3UnKSyrzD92vKAGX
9vVipXCPASfqzg77xKGyF2KKTZugk0dfqDB8rPvyTPJKG1yicN9hBASGFESXEOF7
yVFDPatDRRIb0m6Tp05Xw+cK/pLjIzEKnMFo1luU29Uq7+VCBsbGoWWSsQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFI4guyFyzJh8ZWjD3wj2mWdvPqOlMB8GA1UdIwQY
MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt
ZTk3MjRhN2E2YmM4LzEvamlDN0lYTE1tSHhsYU1QZkNQYVpaMjgtbzZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4
LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXoMFAwQA
X6RfMA0GCSqGSIb3DQEBCwUAA4IBAQA4LRrzqijadQcTQZS5jWKnhK6aVhnzAoNV
/GRGFZXvKdLcIR6MVn/Lv0N4mHqUGttgthtkYxxsQh0y5EJjn8Dc15+4VrYgifpv
JlDRlZha2kQuqGSVKBAPB91c94QKgnJ6PIboLDZQMGunDskUFWVIrY8NiEslvg3H
oZyeQ9LI8jTT3LT+jeNSpTW04oewYNzChy3tFTEb+e+OiOs0/Y4NOEruF6ss4zkr
W2KZbtr4ZVUkt7OxZxdDX8qgn2gv60DtUlRvo0vPQX2APhmovoE8JyEmxsV7cL16
gVq/HcIoxM+/YgncXvi9codruxBI21lU38a5i0evfi/uZmonXp8c
-----END CERTIFICATE-----
Generated at Sat Jun 1 08:33:59 2024 by rpki-client on console-ams.rpki-client.org