Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/J27-gS1CKsTlO8vCgRDvNB8Q65M.roa
File: J27-gS1CKsTlO8vCgRDvNB8Q65M.roa (raw, json)
Hash identifier: ZIFu6kcc4tZ91GYykLH/eQ+rhO6XsoBKA5lSMQvRhso=
Subject key identifier: 27:6E:FE:81:2D:42:2A:C4:E5:3B:CB:C2:81:10:EF:34:1F:10:EB:93
Certificate issuer: /CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Certificate serial: 018CC5014E4BFACE866D355E3A0D7EF2E650
Authority key identifier: 5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/J27-gS1CKsTlO8vCgRDvNB8Q65M.roa
Signing time: Mon 01 Jan 2024 12:30:46 +0000
ROA not before: Mon 01 Jan 2024 12:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13045
IP address blocks: 195.8.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:4e:4b:fa:ce:86:6d:35:5e:3a:0d:7e:f2:e6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Validity
Not Before: Jan 1 12:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=276efe812d422ac4e53bcbc28110ef341f10eb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cb:e8:4c:b4:1b:7b:30:c9:09:ce:a9:1b:10:
57:f6:4d:ed:24:f4:3e:a7:0c:f0:1d:d2:84:e0:38:
1c:d6:23:3b:81:b5:1c:f8:ee:ed:b7:84:0b:eb:b0:
43:76:a0:3d:89:e1:38:21:63:fc:6f:dc:86:0b:15:
27:ab:7a:1b:89:6e:92:0f:07:72:91:45:c2:d5:3a:
0c:69:e9:75:14:99:d3:95:b9:49:ee:ab:1c:22:f0:
7b:50:11:c3:71:c8:09:60:36:73:13:23:b1:3c:68:
dc:fa:29:d5:98:09:0b:4f:68:e7:a1:64:4d:c6:45:
c9:72:d0:c5:47:35:3f:92:70:c3:e1:e4:7e:6d:a3:
6d:72:18:83:7d:bf:a0:17:48:59:d2:e9:fc:db:17:
b4:69:40:e6:75:0f:fe:a3:0e:f0:65:59:81:6d:cc:
a9:8f:08:40:eb:17:d7:b5:af:77:e8:98:04:a3:b7:
40:1f:03:a4:29:ef:18:ac:cb:5d:a2:f6:8e:dd:0e:
86:8f:a8:59:88:44:a6:8e:1a:51:87:b5:e0:df:a4:
d5:6e:0d:2e:9d:ae:c2:68:e6:cb:80:35:05:92:94:
57:4f:05:06:c8:94:0b:6c:33:8e:df:5f:46:fa:55:
a8:96:1a:89:b6:5b:50:3e:db:4d:49:df:c1:c5:22:
e0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6E:FE:81:2D:42:2A:C4:E5:3B:CB:C2:81:10:EF:34:1F:10:EB:93
X509v3 Authority Key Identifier:
keyid:5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/J27-gS1CKsTlO8vCgRDvNB8Q65M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.104.0/24
Signature Algorithm: sha256WithRSAEncryption
96:d5:3a:0c:73:f1:ba:db:c5:9b:c5:b1:48:6d:6b:27:bf:74:
4d:48:bf:75:0e:d9:9c:44:65:97:96:90:f0:8d:50:69:ff:f8:
f9:4f:30:ca:87:42:fc:21:4e:2c:ec:60:27:55:81:8d:92:df:
b8:b5:2d:f2:7d:aa:45:a7:4f:2f:38:ea:2d:e8:bc:17:6f:4f:
53:f5:bd:8e:80:d5:eb:6f:48:01:32:37:f2:89:36:a6:a2:24:
15:a4:46:0a:ae:65:2b:03:9c:8b:49:fb:43:5a:0a:d6:26:98:
90:8d:e1:45:f3:fb:63:72:1e:4d:f6:26:93:33:0b:ef:6d:02:
69:7b:e4:b3:e4:31:d4:22:87:e0:80:d9:7f:83:91:1d:3c:96:
9f:ee:5a:50:e4:01:07:3a:5d:c2:d5:dd:87:76:33:9b:4d:44:
0a:02:05:59:1f:b3:e6:8b:76:aa:bd:b1:41:e6:fa:5b:de:32:
cf:ee:37:1e:4f:7f:4f:fe:e9:41:ca:0d:e4:25:f6:64:09:14:
04:03:4a:96:81:d9:4c:d8:2c:26:02:02:63:48:3a:2a:cd:ab:
ad:23:b7:8c:89:0c:8d:85:4d:b1:52:03:1d:0f:1a:84:b2:d1:
40:c4:18:7c:91:7b:61:7b:e4:71:da:61:f7:de:bb:e3:14:22:
c4:55:3e:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAU5L+s6GbTVeOg1+8uZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYmI2ZjdkMTFkZWJmOWU0YmE4YjFmNjljMzgzYjhmYzNj
NGFlMTIwHhcNMjQwMTAxMTIzMDQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzZlZmU4MTJkNDIyYWM0ZTUzYmNiYzI4MTEwZWYzNDFmMTBlYjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosvoTLQbezDJCc6pGxBX9k3tJPQ+
pwzwHdKE4Dgc1iM7gbUc+O7tt4QL67BDdqA9ieE4IWP8b9yGCxUnq3obiW6SDwdy
kUXC1ToMael1FJnTlblJ7qscIvB7UBHDccgJYDZzEyOxPGjc+inVmAkLT2jnoWRN
xkXJctDFRzU/knDD4eR+baNtchiDfb+gF0hZ0un82xe0aUDmdQ/+ow7wZVmBbcyp
jwhA6xfXta936JgEo7dAHwOkKe8YrMtdovaO3Q6Gj6hZiESmjhpRh7Xg36TVbg0u
na7CaObLgDUFkpRXTwUGyJQLbDOO319G+lWolhqJtltQPttNSd/BxSLgFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCdu/oEtQirE5TvLwoEQ7zQfEOuTMB8GA1UdIwQY
MBaAFFy7b30R3r+eS6ix9pw4O4/DxK4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEx0dmZSSGV2NTVMcUxIMm5EZzdqOFBFcmhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jYTgxMjUtNTQ3Ny00MjIyLWIwNTUt
YmJlYjQ1NTBkOWU2LzEvSjI3LWdTMUNLc1RsTzh2Q2dSRHZOQjhRNjVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jYTgxMjUtNTQ3Ny00MjIyLWIwNTUtYmJlYjQ1NTBkOWU2
LzEvWEx0dmZSSGV2NTVMcUxIMm5EZzdqOFBFcmhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwhoMA0G
CSqGSIb3DQEBCwUAA4IBAQCW1ToMc/G628WbxbFIbWsnv3RNSL91DtmcRGWXlpDw
jVBp//j5TzDKh0L8IU4s7GAnVYGNkt+4tS3yfapFp08vOOot6LwXb09T9b2OgNXr
b0gBMjfyiTamoiQVpEYKrmUrA5yLSftDWgrWJpiQjeFF8/tjch5N9iaTMwvvbQJp
e+Sz5DHUIofggNl/g5EdPJaf7lpQ5AEHOl3C1d2HdjObTUQKAgVZH7Pmi3aqvbFB
5vpb3jLP7jceT39P/ulByg3kJfZkCRQEA0qWgdlM2CwmAgJjSDoqzautI7eMiQyN
hU2xUgMdDxqEstFAxBh8kXthe+Rx2mH33rvjFCLEVT7A
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:11:34 2024 by rpki-client on console-fra.rpki-client.org