Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/JtzBOiylx3EFn4W-RQEn67gCczE.roa
File: JtzBOiylx3EFn4W-RQEn67gCczE.roa (raw, json)
Hash identifier: 0mXFn3F2aVWO+DIXfmvw4x9pMSQL7ylDm7zCTN6p2wA=
Subject key identifier: 26:DC:C1:3A:2C:A5:C7:71:05:9F:85:BE:45:01:27:EB:B8:02:73:31
Certificate issuer: /CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Certificate serial: 018CC3B6878DC0D121E877ABB739637A90B0
Authority key identifier: D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/JtzBOiylx3EFn4W-RQEn67gCczE.roa
Signing time: Mon 01 Jan 2024 06:29:28 +0000
ROA not before: Mon 01 Jan 2024 06:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15532
IP address blocks: 91.206.104.0/23 maxlen: 23
194.11.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:87:8d:c0:d1:21:e8:77:ab:b7:39:63:7a:90:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Validity
Not Before: Jan 1 06:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26dcc13a2ca5c771059f85be450127ebb8027331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:37:da:1a:59:46:de:3f:7b:04:b5:99:a8:d0:
76:07:b5:06:7f:a4:99:b6:75:bd:f7:04:17:35:24:
b9:b7:ee:b5:9a:0d:d7:79:b2:a3:53:07:f6:b1:72:
5f:ec:ae:6e:38:4d:fe:6a:09:01:6a:85:b5:09:80:
f5:fc:e1:8a:e4:b5:7d:1b:fb:6b:c3:8a:04:f6:51:
3a:88:16:d6:e2:88:44:87:f8:1c:6d:79:c3:e8:ef:
c3:20:77:76:ab:cc:55:c1:27:53:0a:ae:c8:00:74:
12:f5:f7:48:26:97:33:80:5f:72:8d:da:91:b3:8f:
ed:f4:1f:52:0c:dd:1d:3f:bb:79:64:86:f2:f5:99:
ea:31:3b:a0:b5:73:31:e8:e2:7b:a2:04:7b:4b:31:
55:8e:96:84:07:5a:10:1a:e5:bf:e7:8e:dc:de:59:
a2:ff:bc:e3:90:14:42:1e:d5:81:e2:7e:e3:5c:35:
48:38:a7:ce:a4:01:39:b1:2e:98:b5:84:ea:57:80:
eb:e2:b8:81:6d:44:72:09:a6:ca:7b:90:73:26:32:
87:f6:df:f9:e0:6a:06:01:06:dc:51:32:92:95:fd:
4e:a9:2f:73:61:de:6c:f0:69:1c:90:28:93:29:9e:
bf:f3:96:c4:59:de:25:db:1d:a3:2a:8d:bf:01:a1:
ba:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DC:C1:3A:2C:A5:C7:71:05:9F:85:BE:45:01:27:EB:B8:02:73:31
X509v3 Authority Key Identifier:
keyid:D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/JtzBOiylx3EFn4W-RQEn67gCczE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.104.0/23
194.11.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:78:b9:bf:e0:94:63:b9:c0:c5:ed:4a:4b:37:34:d9:9b:3f:
20:08:0a:f8:bd:5c:5c:fe:bb:6b:bc:73:8f:31:08:cb:f5:fd:
12:f8:99:cd:5d:54:e9:34:d5:ec:2e:44:31:c7:8c:8c:1d:ee:
7f:e7:58:18:19:35:cd:35:fa:63:ad:b7:36:b1:70:47:7a:ec:
26:8d:c1:40:ee:38:9b:67:76:a0:55:88:48:91:26:ed:e5:7a:
e6:23:44:75:52:dd:1a:75:55:3e:b0:aa:48:5f:43:58:2e:94:
88:ee:ef:0c:cb:0b:c8:8c:a0:fc:aa:74:51:f1:ec:a1:ac:71:
6f:a2:a3:ec:7b:56:0f:77:a2:cb:fc:89:43:5d:5b:cd:f7:97:
c6:8f:34:07:67:df:07:2d:95:38:0f:39:79:bb:21:01:f9:d5:
f0:2c:d6:95:34:63:e0:ae:3e:a6:16:92:6b:3f:d0:24:70:3a:
8b:7c:3e:fd:bf:8f:2b:e7:cb:4d:ad:0d:1c:97:6c:98:03:0c:
51:ac:68:25:f8:d4:2e:33:32:6c:bf:2a:f5:8c:f1:30:6e:f0:
06:28:00:1f:2f:bf:4d:f2:c5:29:9b:3d:ae:e2:9e:73:22:c5:
e9:bf:b6:57:18:e0:fe:f1:20:f7:7e:ab:76:52:d0:0b:8e:cc:
c2:e6:43:b7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzDtoeNwNEh6HertzljepCwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNGJjZjIxMjdhZjBiMmUwYTI0NmFlNDU3NDMwNGM3YWU3
NzE1ZTkwHhcNMjQwMTAxMDYyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmRjYzEzYTJjYTVjNzcxMDU5Zjg1YmU0NTAxMjdlYmI4MDI3MzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDfaGllG3j97BLWZqNB2B7UGf6SZ
tnW99wQXNSS5t+61mg3XebKjUwf2sXJf7K5uOE3+agkBaoW1CYD1/OGK5LV9G/tr
w4oE9lE6iBbW4ohEh/gcbXnD6O/DIHd2q8xVwSdTCq7IAHQS9fdIJpczgF9yjdqR
s4/t9B9SDN0dP7t5ZIby9ZnqMTugtXMx6OJ7ogR7SzFVjpaEB1oQGuW/547c3lmi
/7zjkBRCHtWB4n7jXDVIOKfOpAE5sS6YtYTqV4Dr4riBbURyCabKe5BzJjKH9t/5
4GoGAQbcUTKSlf1OqS9zYd5s8GkckCiTKZ6/85bEWd4l2x2jKo2/AaG6jwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCbcwTospcdxBZ+FvkUBJ+u4AnMxMB8GA1UdIwQY
MBaAFNNLzyEnrwsuCiRq5FdDBMeudxXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDB2UElTZXZDeTRLSkdya1YwTUV4NjUzRmVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wYTRiYzQtZGE0Yi00ZjE4LWI0YmUt
YWZjMWVlNDYxMWExLzEvSnR6Qk9peWx4M0VGbjRXLVJRRW42N2dDY3pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wYTRiYzQtZGE0Yi00ZjE4LWI0YmUtYWZjMWVlNDYxMWEx
LzEvMDB2UElTZXZDeTRLSkdya1YwTUV4NjUzRmVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW85oAwQA
wgvfMA0GCSqGSIb3DQEBCwUAA4IBAQA/eLm/4JRjucDF7UpLNzTZmz8gCAr4vVxc
/rtrvHOPMQjL9f0S+JnNXVTpNNXsLkQxx4yMHe5/51gYGTXNNfpjrbc2sXBHeuwm
jcFA7jibZ3agVYhIkSbt5XrmI0R1Ut0adVU+sKpIX0NYLpSI7u8MywvIjKD8qnRR
8eyhrHFvoqPse1YPd6LL/IlDXVvN95fGjzQHZ98HLZU4Dzl5uyEB+dXwLNaVNGPg
rj6mFpJrP9AkcDqLfD79v48r58tNrQ0cl2yYAwxRrGgl+NQuMzJsvyr1jPEwbvAG
KAAfL79N8sUpmz2u4p5zIsXpv7ZXGOD+8SD3fqt2UtALjszC5kO3
-----END CERTIFICATE-----
Generated at Sun May 19 20:33:27 2024 by rpki-client on console-fra.rpki-client.org