Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/__JSENt81o8aDEdqL1KyO60fYrk.roa
File: __JSENt81o8aDEdqL1KyO60fYrk.roa (raw, json)
Hash identifier: EEvwYBMNXNHfM6Sl7N9grGucoQ0MgSX3UfVE+3cJi9E=
Subject key identifier: FF:F2:52:10:DB:7C:D6:8F:1A:0C:47:6A:2F:52:B2:3B:AD:1F:62:B9
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DEBD9CF974972E2F7C58B7D8AEF856DD4
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/__JSENt81o8aDEdqL1KyO60fYrk.roa
Signing time: Tue 27 Feb 2024 18:35:36 +0000
ROA not before: Tue 27 Feb 2024 18:35:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203087
IP address blocks: 93.177.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:eb:d9:cf:97:49:72:e2:f7:c5:8b:7d:8a:ef:85:6d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 27 18:35:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fff25210db7cd68f1a0c476a2f52b23bad1f62b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fa:6c:d5:2a:86:3a:e0:1b:7d:40:47:aa:f6:
59:5c:21:26:3a:89:d7:a0:a7:ba:2f:b2:bc:7e:4a:
95:4f:95:e7:99:bf:c4:45:16:34:62:95:4b:6b:ab:
aa:d3:d7:a8:c5:19:ca:f0:87:34:ff:e6:69:77:f5:
97:e4:08:d9:42:42:85:35:97:aa:ec:5a:0e:11:de:
10:78:c5:05:9f:95:78:17:78:75:5f:78:39:3e:1c:
91:79:4f:7e:5b:b9:a9:b8:dd:fd:fd:25:df:60:f6:
fc:fa:1d:8a:c8:64:9a:b7:fe:04:3b:f0:ea:68:1c:
64:da:99:c9:12:46:7e:0a:8c:36:1b:2c:d6:2e:66:
c1:6e:c0:cc:72:a1:66:31:e7:98:8e:00:a8:28:ae:
8f:64:f2:24:8e:d1:6c:88:ba:1a:f1:73:8d:a2:db:
5b:1e:64:ba:d4:8e:c3:1b:70:f6:36:5a:a3:7c:b0:
2f:5d:86:cc:8f:62:35:fd:ca:88:01:b9:36:7a:9d:
d8:b7:3f:f8:6f:62:c9:39:75:7d:ca:c9:cb:69:63:
20:1d:97:e7:02:56:a1:12:f3:c4:9c:e8:9c:78:be:
9d:c0:3b:20:1e:46:b7:05:05:09:38:d6:91:22:9a:
c4:d8:82:ec:aa:d8:8c:aa:4f:49:29:61:d6:c3:45:
1a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F2:52:10:DB:7C:D6:8F:1A:0C:47:6A:2F:52:B2:3B:AD:1F:62:B9
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/__JSENt81o8aDEdqL1KyO60fYrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.106.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:71:df:4b:1e:27:ef:b2:8b:ef:4f:81:a6:87:4c:85:b4:a0:
0c:3a:30:54:20:7b:4f:49:3a:93:b5:76:62:1d:c1:c2:be:71:
6a:86:31:20:37:64:6b:4b:eb:74:a6:89:c4:1f:de:91:16:ad:
41:fa:85:ba:3a:f1:3a:83:3b:e8:74:30:6a:bb:40:20:6c:5f:
1a:95:cd:52:5b:71:6a:74:c9:d3:33:9b:29:bf:8d:56:f6:97:
d3:22:d3:3f:75:fb:d0:d8:6f:de:49:25:70:b2:69:dc:9a:cd:
1d:92:1a:6e:75:7e:54:d5:ea:5b:36:a6:03:be:ae:3b:4c:fc:
3b:76:4c:d0:92:54:53:09:6b:61:49:37:9c:3d:ba:23:f0:c8:
6c:0e:8c:4a:1a:c0:b4:5a:33:13:a1:1d:33:bc:ae:3e:4d:4f:
26:72:ca:c2:0a:7b:b0:07:49:f4:b7:c2:03:d2:c3:c6:e1:54:
26:d5:3c:08:48:fc:a5:8a:13:53:8d:c1:fd:da:5f:b8:ed:6e:
f4:a6:89:03:dc:2f:9f:96:e8:af:77:a6:d1:55:6f:9c:b1:a3:
54:08:77:90:a5:55:e3:ba:54:5f:61:6d:1e:8c:88:39:99:1b:
00:98:55:66:84:86:aa:b4:50:2e:47:28:3f:56:03:08:af:e5:
44:05:aa:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3r2c+XSXLi98WLfYrvhW3UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjQwMjI3MTgzNTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmYyNTIxMGRiN2NkNjhmMWEwYzQ3NmEyZjUyYjIzYmFkMWY2MmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/ps1SqGOuAbfUBHqvZZXCEmOonX
oKe6L7K8fkqVT5Xnmb/ERRY0YpVLa6uq09eoxRnK8Ic0/+Zpd/WX5AjZQkKFNZeq
7FoOEd4QeMUFn5V4F3h1X3g5PhyReU9+W7mpuN39/SXfYPb8+h2KyGSat/4EO/Dq
aBxk2pnJEkZ+Cow2GyzWLmbBbsDMcqFmMeeYjgCoKK6PZPIkjtFsiLoa8XONottb
HmS61I7DG3D2NlqjfLAvXYbMj2I1/cqIAbk2ep3Ytz/4b2LJOXV9ysnLaWMgHZfn
AlahEvPEnOiceL6dwDsgHka3BQUJONaRIprE2ILsqtiMqk9JKWHWw0UalwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP/yUhDbfNaPGgxHai9SsjutH2K5MB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvX19KU0VOdDgxbzhhREVkcUwxS3lPNjBmWXJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXbFqMA0G
CSqGSIb3DQEBCwUAA4IBAQAdcd9LHifvsovvT4Gmh0yFtKAMOjBUIHtPSTqTtXZi
HcHCvnFqhjEgN2RrS+t0ponEH96RFq1B+oW6OvE6gzvodDBqu0AgbF8alc1SW3Fq
dMnTM5spv41W9pfTItM/dfvQ2G/eSSVwsmncms0dkhpudX5U1epbNqYDvq47TPw7
dkzQklRTCWthSTecPboj8MhsDoxKGsC0WjMToR0zvK4+TU8mcsrCCnuwB0n0t8ID
0sPG4VQm1TwISPylihNTjcH92l+47W70pokD3C+fluivd6bRVW+csaNUCHeQpVXj
ulRfYW0ejIg5mRsAmFVmhIaqtFAuRyg/VgMIr+VEBaoA
-----END CERTIFICATE-----
Generated at Fri Jun 7 22:25:57 2024 by rpki-client on console-ams.rpki-client.org