Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/JdgAe1IsbORN7hiyLhyTFGx9-88.roa
File: JdgAe1IsbORN7hiyLhyTFGx9-88.roa (raw, json)
Hash identifier: gCFdn8d+cfgY8ktOUVgfLa4lzGfUbF9Q0zWuZRBuqf0=
Subject key identifier: 25:D8:00:7B:52:2C:6C:E4:4D:EE:18:B2:2E:1C:93:14:6C:7D:FB:CF
Certificate issuer: /CN=68383ffa9f20bf021c090262994212d71667ed02
Certificate serial: 018CC7934B3104C053D510346EA0AF4D3990
Authority key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/JdgAe1IsbORN7hiyLhyTFGx9-88.roa
Signing time: Tue 02 Jan 2024 00:29:28 +0000
ROA not before: Tue 02 Jan 2024 00:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 81.90.143.0/24 maxlen: 24
2a00:e27:143::/48 maxlen: 48
2a00:e20:150::/44 maxlen: 48
2a00:e20:143::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:4b:31:04:c0:53:d5:10:34:6e:a0:af:4d:39:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68383ffa9f20bf021c090262994212d71667ed02
Validity
Not Before: Jan 2 00:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25d8007b522c6ce44dee18b22e1c93146c7dfbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:37:14:bc:c7:96:ed:87:07:0f:98:db:63:e5:
a3:d2:5f:54:db:dd:c8:f9:bf:5d:57:61:a3:aa:a9:
61:c0:be:de:7a:33:46:07:f3:ab:34:f9:50:7d:b4:
9c:d9:00:2f:85:cc:a5:ed:06:62:e4:ee:00:58:3a:
8d:31:ca:d0:5d:b9:29:9f:d5:ad:6f:0b:5e:7d:25:
62:0d:e3:52:ab:b0:46:66:17:23:63:74:43:80:48:
d7:e4:aa:a5:81:89:60:b8:66:4f:40:2e:48:5d:50:
02:a5:93:64:4a:26:45:41:12:9e:1c:a7:2b:58:87:
3d:0d:d8:d9:24:f3:81:f1:89:af:09:f0:30:6a:19:
58:fb:31:48:7f:87:eb:a8:f3:9c:bf:df:be:e2:30:
37:82:58:a8:1f:72:54:82:f1:8b:0a:09:d8:c6:d5:
d6:3a:6b:35:7c:19:d4:41:91:d1:22:0b:08:df:d9:
b7:c2:3b:a1:e0:c3:b7:cd:ec:4e:42:00:df:de:59:
11:27:f7:3b:35:fe:2b:47:8c:f3:17:be:67:27:1d:
4e:e6:8c:ff:cd:e3:15:fb:51:ec:74:26:7e:13:6f:
30:aa:2e:68:6e:34:d0:d8:61:d3:7b:f5:ea:a4:8a:
22:b1:e3:4d:6e:23:33:06:53:52:1d:43:b5:76:1d:
8f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D8:00:7B:52:2C:6C:E4:4D:EE:18:B2:2E:1C:93:14:6C:7D:FB:CF
X509v3 Authority Key Identifier:
keyid:68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/JdgAe1IsbORN7hiyLhyTFGx9-88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.143.0/24
IPv6:
2a00:e20:143::/48
2a00:e20:150::/44
2a00:e27:143::/48
Signature Algorithm: sha256WithRSAEncryption
4e:2c:ca:b2:31:66:4b:1e:90:36:59:3f:c5:a0:5e:da:e7:a8:
24:d4:00:45:a2:62:b6:dd:01:4c:87:78:8d:8d:62:07:b5:e6:
db:39:ae:e9:6e:90:79:d3:cc:ef:38:2a:54:e5:49:73:6c:0d:
1f:81:83:1c:8d:da:11:20:18:c0:d5:43:da:8c:50:e4:5d:e5:
51:1a:56:8a:5d:0a:2f:2e:f6:6d:f3:f9:8b:10:01:a4:3c:bb:
3d:23:e7:ac:57:07:70:ab:80:9c:6c:e0:51:b2:88:ee:68:b8:
b7:5f:84:5f:6e:4f:31:ba:12:ea:5d:6e:47:fe:b5:fe:05:cc:
95:12:ec:5b:35:c9:a5:98:4e:7a:a7:86:03:00:1a:88:f9:08:
26:ab:3d:c2:49:fb:37:ba:c8:64:26:aa:03:82:ed:0b:4d:d3:
48:06:97:6a:80:9b:0b:12:0c:aa:5d:91:e8:da:bc:49:9c:c7:
34:6b:34:de:74:89:1c:5b:59:c6:fe:1d:bb:7e:55:a8:11:87:
b4:be:32:12:11:8d:bf:72:a9:a1:47:ce:70:06:b4:c8:f0:2b:
eb:e9:02:55:46:ff:f1:01:0e:73:44:54:fc:52:09:9e:2c:a2:
01:da:06:2f:6a:88:b4:65:ac:8a:5b:cd:5b:d6:1d:ee:88:7e:
cf:42:9d:d3
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAYzHk0sxBMBT1RA0bqCvTTmQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MzgzZmZhOWYyMGJmMDIxYzA5MDI2Mjk5NDIxMmQ3MTY2
N2VkMDIwHhcNMjQwMTAyMDAyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWQ4MDA3YjUyMmM2Y2U0NGRlZTE4YjIyZTFjOTMxNDZjN2RmYmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDcUvMeW7YcHD5jbY+Wj0l9U293I
+b9dV2GjqqlhwL7eejNGB/OrNPlQfbSc2QAvhcyl7QZi5O4AWDqNMcrQXbkpn9Wt
bwtefSViDeNSq7BGZhcjY3RDgEjX5KqlgYlguGZPQC5IXVACpZNkSiZFQRKeHKcr
WIc9DdjZJPOB8YmvCfAwahlY+zFIf4frqPOcv9++4jA3glioH3JUgvGLCgnYxtXW
Oms1fBnUQZHRIgsI39m3wjuh4MO3zexOQgDf3lkRJ/c7Nf4rR4zzF75nJx1O5oz/
zeMV+1HsdCZ+E28wqi5objTQ2GHTe/XqpIoiseNNbiMzBlNSHUO1dh2P0QIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFCXYAHtSLGzkTe4Ysi4ckxRsffvPMB8GA1UdIwQY
MBaAFGg4P/qfIL8CHAkCYplCEtcWZ+0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYt
NDA2MGU5ZWVlYjllLzEvSmRnQWUxSXNiT1JON2hpeUxoeVRGR3g5LTg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYtNDA2MGU5ZWVlYjll
LzEvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQAUVqPMCEE
AgACMBsDBwAqAA4gAUMDBwQqAA4gAVADBwAqAA4nAUMwDQYJKoZIhvcNAQELBQAD
ggEBAE4syrIxZksekDZZP8WgXtrnqCTUAEWiYrbdAUyHeI2NYge15ts5rulukHnT
zO84KlTlSXNsDR+BgxyN2hEgGMDVQ9qMUORd5VEaVopdCi8u9m3z+YsQAaQ8uz0j
56xXB3CrgJxs4FGyiO5ouLdfhF9uTzG6Eupdbkf+tf4FzJUS7Fs1yaWYTnqnhgMA
Goj5CCarPcJJ+ze6yGQmqgOC7QtN00gGl2qAmwsSDKpdkejavEmcxzRrNN50iRxb
Wcb+Hbt+VagRh7S+MhIRjb9yqaFHznAGtMjwK+vpAlVG//EBDnNEVPxSCZ4sogHa
Bi9qiLRlrIpbzVvWHe6Ifs9CndM=
-----END CERTIFICATE-----
Generated at Thu May 2 22:18:52 2024 by rpki-client on console-fra.rpki-client.org