Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/JZGJAOnyD8DXgjZaV2Ez9nlgYN4.roa
File: JZGJAOnyD8DXgjZaV2Ez9nlgYN4.roa (raw, json)
Hash identifier: c7QWjoMl6keYpOGqyK0ikFsFHVKtJUoLvFH/iO3/Gf0=
Subject key identifier: 25:91:89:00:E9:F2:0F:C0:D7:82:36:5A:57:61:33:F6:79:60:60:DE
Certificate issuer: /CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Certificate serial: 018CC26D55DD933BBE9C26EE419CF3AB40BC
Authority key identifier: 21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/JZGJAOnyD8DXgjZaV2Ez9nlgYN4.roa
Signing time: Mon 01 Jan 2024 00:29:54 +0000
ROA not before: Mon 01 Jan 2024 00:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15404
IP address blocks: 193.178.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:55:dd:93:3b:be:9c:26:ee:41:9c:f3:ab:40:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Validity
Not Before: Jan 1 00:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25918900e9f20fc0d782365a576133f6796060de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:72:12:ed:b8:72:6f:52:db:09:b8:22:cf:c6:
77:e3:38:dd:e5:6e:85:cb:5f:97:d8:23:ee:b0:42:
fc:5f:04:f9:c8:ff:a5:7e:b8:db:56:84:dd:8b:5d:
28:c7:9e:75:a6:85:54:ab:2d:12:76:3b:42:3a:9a:
d2:fa:73:a0:a3:44:83:b9:dc:4b:0f:91:24:06:c4:
3d:36:ca:79:5c:b6:b6:e2:12:83:4c:56:4c:7d:db:
42:0e:0c:c5:35:95:1b:8c:3e:30:2a:49:47:d4:13:
bb:51:2b:33:4d:66:22:04:5c:51:1b:b4:52:10:af:
b5:4f:e9:fc:4c:51:12:0c:08:fe:4c:08:85:46:e9:
28:95:1e:ee:ae:4d:9f:b8:2f:7f:5f:c4:84:49:54:
56:e4:d3:14:09:f4:74:43:e4:fa:e0:67:2f:ee:62:
61:9a:2c:2a:4a:2f:7a:b9:c5:5e:6b:13:8e:1b:35:
d7:26:54:35:ec:30:71:e2:22:a4:3d:69:2b:e4:5b:
cd:e7:80:11:10:75:b0:44:c1:16:ad:35:a8:be:6a:
fc:83:98:73:d0:e9:c8:a9:69:e0:c9:b7:c0:01:55:
1d:87:9f:2e:22:2f:57:b4:9f:6e:9c:23:9b:54:d6:
5f:a0:6a:b9:95:71:fe:2d:e8:1c:df:dc:93:10:59:
1c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:91:89:00:E9:F2:0F:C0:D7:82:36:5A:57:61:33:F6:79:60:60:DE
X509v3 Authority Key Identifier:
keyid:21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/JZGJAOnyD8DXgjZaV2Ez9nlgYN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.140.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:6d:45:1a:98:23:43:52:c9:72:c8:47:c9:93:0d:8a:32:7b:
a7:44:e1:da:d9:a4:53:ed:39:fe:62:84:2d:7c:4b:5e:d7:c2:
e7:11:8e:c4:3e:8e:7a:6e:3d:4c:0c:97:18:78:d2:26:93:d6:
5a:2c:43:30:ab:e8:43:43:53:e7:d5:b4:59:16:c0:a0:76:b6:
6c:ed:1d:b1:c2:86:74:7c:1d:fb:b1:d4:e5:6a:aa:f5:76:0a:
7f:25:53:58:04:9d:5b:27:9d:f8:00:d8:1f:96:94:ea:10:3f:
a9:9e:38:23:40:7d:41:08:02:14:b9:26:35:80:41:f4:d3:ba:
99:23:74:8a:56:fa:1b:03:f7:ab:08:d1:4e:2c:08:65:b7:4f:
c7:8c:85:a9:ef:21:32:00:70:34:76:bd:b7:19:64:de:c7:17:
f0:ad:74:14:3f:a5:96:5a:29:fc:68:86:ee:24:48:eb:8f:6a:
0f:c6:02:5a:03:5b:16:fa:8c:30:2a:65:be:96:de:6b:a9:44:
c4:a6:8e:df:f1:ac:2e:2f:16:8f:ec:cc:8d:72:05:ec:4a:d0:
03:7b:c5:58:44:9a:86:9f:38:c3:1d:84:58:ca:3c:24:e1:43:
43:65:3f:4e:86:b4:f4:ac:f3:54:da:92:b2:6f:f9:7f:70:c8:
59:7c:3e:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbVXdkzu+nCbuQZzzq0C8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDFmNDM5ZGViYWZmNTg4MDM5NWQ3OGYwYmJmYWQ4Y2E3
NjA4YmYwHhcNMjQwMTAxMDAyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTkxODkwMGU5ZjIwZmMwZDc4MjM2NWE1NzYxMzNmNjc5NjA2MGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3IS7bhyb1LbCbgiz8Z34zjd5W6F
y1+X2CPusEL8XwT5yP+lfrjbVoTdi10ox551poVUqy0SdjtCOprS+nOgo0SDudxL
D5EkBsQ9Nsp5XLa24hKDTFZMfdtCDgzFNZUbjD4wKklH1BO7USszTWYiBFxRG7RS
EK+1T+n8TFESDAj+TAiFRukolR7urk2fuC9/X8SESVRW5NMUCfR0Q+T64Gcv7mJh
miwqSi96ucVeaxOOGzXXJlQ17DBx4iKkPWkr5FvN54AREHWwRMEWrTWovmr8g5hz
0OnIqWngybfAAVUdh58uIi9XtJ9unCObVNZfoGq5lXH+Legc39yTEFkcsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCWRiQDp8g/A14I2WldhM/Z5YGDeMB8GA1UdIwQY
MBaAFCEB9Dneuv9YgDldePC7+tjKdgi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFIME9kNjZfMWlBT1YxNDhMdjYyTXAyQ0w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83OGM0MTQtOWIwOS00Nzc1LWE1NTgt
ZTNkZWZiN2UyNTE4LzEvSlpHSkFPbnlEOERYZ2paYVYyRXo5bmxnWU40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83OGM0MTQtOWIwOS00Nzc1LWE1NTgtZTNkZWZiN2UyNTE4
LzEvSVFIME9kNjZfMWlBT1YxNDhMdjYyTXAyQ0w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbKMMA0G
CSqGSIb3DQEBCwUAA4IBAQA6bUUamCNDUslyyEfJkw2KMnunROHa2aRT7Tn+YoQt
fEte18LnEY7EPo56bj1MDJcYeNImk9ZaLEMwq+hDQ1Pn1bRZFsCgdrZs7R2xwoZ0
fB37sdTlaqr1dgp/JVNYBJ1bJ534ANgflpTqED+pnjgjQH1BCAIUuSY1gEH007qZ
I3SKVvobA/erCNFOLAhlt0/HjIWp7yEyAHA0dr23GWTexxfwrXQUP6WWWin8aIbu
JEjrj2oPxgJaA1sW+owwKmW+lt5rqUTEpo7f8awuLxaP7MyNcgXsStADe8VYRJqG
nzjDHYRYyjwk4UNDZT9OhrT0rPNU2pKyb/l/cMhZfD4i
-----END CERTIFICATE-----
Generated at Tue Nov 26 00:34:36 2024 by rpki-client on console-fra.rpki-client.org