Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/RjPjE-PVDbb0TkMjrKG5Qo8wd-A.roa
File: RjPjE-PVDbb0TkMjrKG5Qo8wd-A.roa (raw, json)
Hash identifier: NS15tOaWYhYTknAT3SqxYYWRSRmWeDH3pgaoR86ohWg=
Subject key identifier: 46:33:E3:13:E3:D5:0D:B6:F4:4E:43:23:AC:A1:B9:42:8F:30:77:E0
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 018CC794CD2A4651510470A45806D16A43C6
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/RjPjE-PVDbb0TkMjrKG5Qo8wd-A.roa
Signing time: Tue 02 Jan 2024 00:31:06 +0000
ROA not before: Tue 02 Jan 2024 00:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 81.199.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:cd:2a:46:51:51:04:70:a4:58:06:d1:6a:43:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Jan 2 00:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4633e313e3d50db6f44e4323aca1b9428f3077e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b7:e5:41:56:ae:a5:07:91:ff:db:59:bf:50:
83:78:0a:3f:22:12:f9:86:05:f0:dc:b4:27:a0:f8:
22:0a:27:e3:c3:c1:34:39:2e:57:ff:0c:cd:d6:d5:
5a:a4:52:c1:6e:bd:10:da:7c:ca:aa:29:2d:cf:93:
84:9d:29:83:62:87:20:3b:b1:ad:0b:56:3b:15:04:
59:27:48:d4:3f:db:36:69:c5:e9:49:4f:29:63:a8:
b9:d5:ca:b0:e9:4e:32:f3:b8:80:ab:fb:45:13:20:
c9:bf:27:77:27:c9:29:5f:9a:66:76:9a:aa:9c:69:
e9:4d:02:d0:34:c6:d0:7e:30:3f:1a:43:76:98:95:
9d:14:03:5e:d8:40:f1:71:fe:ea:fb:05:27:a3:7e:
35:4c:b2:e2:7e:01:65:40:6b:98:3b:15:c0:56:32:
7e:34:69:25:3d:48:64:53:08:92:74:89:d8:6e:33:
38:2b:78:b7:b6:5a:54:14:fc:62:ad:c3:a9:b0:b5:
45:39:5d:07:c2:94:b2:27:38:7a:3a:22:2e:8b:4f:
73:14:6e:54:86:bf:d9:aa:7b:cb:9f:d1:36:76:8a:
20:ab:a2:c3:9d:af:8b:48:6f:bc:30:2a:82:40:3f:
19:b3:51:c5:86:71:74:0e:54:09:18:5c:36:c4:4e:
82:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:33:E3:13:E3:D5:0D:B6:F4:4E:43:23:AC:A1:B9:42:8F:30:77:E0
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/RjPjE-PVDbb0TkMjrKG5Qo8wd-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.28.0/24
Signature Algorithm: sha256WithRSAEncryption
be:d5:73:97:4f:41:87:7a:ca:af:0f:c0:6e:bd:f0:d3:49:67:
c5:92:bd:2a:f8:85:a6:ce:be:2a:a4:59:3a:8c:c7:33:9a:ee:
27:de:72:2f:ca:99:39:d8:94:44:0a:1a:52:3e:24:53:f3:53:
b6:00:2b:c6:ec:24:1b:5b:f3:9f:eb:49:c6:44:51:fc:df:94:
53:1d:66:37:86:fb:f3:79:0d:a7:a6:8d:3e:30:fe:5e:cf:70:
85:3d:fd:6e:fc:b6:15:98:4d:44:25:88:21:fc:4e:f2:1c:44:
99:9a:31:5b:10:66:06:a4:58:c2:c3:a6:db:05:7e:f5:d5:5c:
26:41:b8:c0:da:91:d7:79:d0:54:34:20:11:c8:d5:30:e3:d5:
20:9d:3f:2a:80:6d:b9:78:eb:52:8f:23:36:66:d7:2e:03:aa:
12:8d:93:f3:f9:e2:e3:11:c0:f1:f0:e4:3d:c1:40:46:96:0b:
58:31:53:af:bd:a1:e4:9e:a6:af:77:5a:d0:d9:3f:1c:23:62:
31:66:a6:f7:c3:f7:a6:3f:34:a0:0e:10:26:76:5f:2d:cb:13:
58:5a:06:7c:7c:6f:7f:1d:7c:83:c7:b6:0a:20:8a:39:b4:d3:
f3:14:7c:69:81:84:f0:6f:ed:24:34:e8:80:05:21:80:de:58:
d6:30:5d:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlM0qRlFRBHCkWAbRakPGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGUxMjRlMGY4YWRiNGU3ZDk1NzZjZWFlMzI1ZjY2OGRk
MjI0YjEwHhcNMjQwMTAyMDAzMTA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjMzZTMxM2UzZDUwZGI2ZjQ0ZTQzMjNhY2ExYjk0MjhmMzA3N2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrflQVaupQeR/9tZv1CDeAo/IhL5
hgXw3LQnoPgiCifjw8E0OS5X/wzN1tVapFLBbr0Q2nzKqiktz5OEnSmDYocgO7Gt
C1Y7FQRZJ0jUP9s2acXpSU8pY6i51cqw6U4y87iAq/tFEyDJvyd3J8kpX5pmdpqq
nGnpTQLQNMbQfjA/GkN2mJWdFANe2EDxcf7q+wUno341TLLifgFlQGuYOxXAVjJ+
NGklPUhkUwiSdInYbjM4K3i3tlpUFPxircOpsLVFOV0HwpSyJzh6OiIui09zFG5U
hr/ZqnvLn9E2doogq6LDna+LSG+8MCqCQD8Zs1HFhnF0DlQJGFw2xE6CoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEYz4xPj1Q229E5DI6yhuUKPMHfgMB8GA1UdIwQY
MBaAFNHeEk4PittOfZV2zq4yX2aN0iSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTct
NGY0YzliMzQzZTkwLzEvUmpQakUtUFZEYmIwVGtNanJLRzVRbzh3ZC1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTctNGY0YzliMzQzZTkw
LzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUcccMA0G
CSqGSIb3DQEBCwUAA4IBAQC+1XOXT0GHesqvD8BuvfDTSWfFkr0q+IWmzr4qpFk6
jMczmu4n3nIvypk52JREChpSPiRT81O2ACvG7CQbW/Of60nGRFH835RTHWY3hvvz
eQ2npo0+MP5ez3CFPf1u/LYVmE1EJYgh/E7yHESZmjFbEGYGpFjCw6bbBX711Vwm
QbjA2pHXedBUNCARyNUw49UgnT8qgG25eOtSjyM2ZtcuA6oSjZPz+eLjEcDx8OQ9
wUBGlgtYMVOvvaHknqavd1rQ2T8cI2IxZqb3w/emPzSgDhAmdl8tyxNYWgZ8fG9/
HXyDx7YKIIo5tNPzFHxpgYTwb+0kNOiABSGA3ljWMF28
-----END CERTIFICATE-----
Generated at Thu May 2 15:13:41 2024 by rpki-client on console-ams.rpki-client.org