Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/CjE86MSTqIXlVfVsJB2qOZ26Rdw.roa
File: CjE86MSTqIXlVfVsJB2qOZ26Rdw.roa (raw, json)
Hash identifier: /qs/nMqtHyLTfsgfgX4MSyWtzFFtgT1c0d6nvRP2els=
Subject key identifier: 0A:31:3C:E8:C4:93:A8:85:E5:55:F5:6C:24:1D:AA:39:9D:BA:45:DC
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018CE9CB41C78A088AC1A455A86F21E6692A
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/CjE86MSTqIXlVfVsJB2qOZ26Rdw.roa
Signing time: Mon 08 Jan 2024 15:57:41 +0000
ROA not before: Mon 08 Jan 2024 15:57:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197889
IP address blocks: 87.229.36.0/24 maxlen: 24
87.229.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:cb:41:c7:8a:08:8a:c1:a4:55:a8:6f:21:e6:69:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 8 15:57:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a313ce8c493a885e555f56c241daa399dba45dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:37:ff:2d:51:f5:5c:14:e3:03:d0:66:98:40:
c1:17:ab:c5:ae:e2:c4:1f:40:0e:7f:31:d4:6e:4e:
d9:41:1e:2c:ed:62:81:9b:eb:1e:10:bc:eb:9e:82:
44:38:eb:46:80:e8:b6:15:f2:8f:50:bb:5e:3d:7f:
4e:4a:80:71:e3:be:31:ff:80:4a:1b:e6:1b:1c:f0:
6b:95:da:48:a9:a8:3c:41:04:98:1a:43:9c:82:48:
95:d1:22:50:d0:64:b7:a3:56:42:a9:b7:eb:57:d7:
c7:6e:cc:45:a4:85:00:8f:14:97:5d:ad:83:61:77:
4c:74:94:0e:a5:27:61:49:82:ff:2e:7b:c0:15:1e:
63:9b:2d:63:3a:a1:e0:b0:0b:d6:ac:9b:cc:0b:fc:
6d:6c:e9:4c:b9:7b:b1:f0:ac:d6:72:06:6b:ec:bd:
bd:e4:bd:d6:bd:da:22:21:4d:fa:8b:69:66:aa:e1:
0f:c6:a6:7c:f2:6b:76:a9:82:10:85:6b:d1:f1:5c:
2f:e2:23:5a:73:65:d5:74:a0:50:c7:67:60:4d:50:
db:cc:cd:6b:f0:e2:45:7d:e3:78:ba:1d:95:ba:02:
57:ef:b1:e0:eb:ab:a2:c8:66:4a:85:ac:25:1d:5a:
64:55:ad:82:38:4d:1e:e4:f9:fd:31:b0:72:ca:dd:
37:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:31:3C:E8:C4:93:A8:85:E5:55:F5:6C:24:1D:AA:39:9D:BA:45:DC
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/CjE86MSTqIXlVfVsJB2qOZ26Rdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.36.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:91:8c:2e:bb:61:6f:cc:a1:a4:7c:96:ea:51:18:f1:29:6f:
09:3c:96:ac:3c:4a:ad:13:ee:24:da:dc:18:36:7d:54:16:ec:
5e:27:7c:13:d2:b9:9b:13:c1:ca:1e:a3:30:bd:03:e5:65:46:
37:94:8f:2b:01:ab:dd:e4:3e:c6:97:82:80:c7:b0:7d:c5:58:
46:da:cb:d2:b3:8c:3b:58:87:ce:20:a7:01:0a:fd:ef:b1:28:
4e:9b:82:41:b3:1e:7e:da:ce:79:15:03:a1:88:6b:ca:58:22:
61:d3:e8:23:86:c2:8f:0d:27:cc:dc:36:13:90:56:b9:6e:9e:
c0:44:73:33:0c:e0:4d:40:c5:b4:51:79:01:d0:b8:3f:af:5b:
ca:2d:45:13:2c:45:3a:1c:e8:ff:4c:83:14:7b:71:12:4a:1c:
2b:9d:6d:57:2a:53:9d:b5:ee:be:d4:0f:3f:43:91:70:5e:d5:
52:c2:af:7f:9e:b4:b4:86:85:88:a2:ef:44:42:49:e7:71:39:
80:df:1d:f4:4b:1d:fb:55:27:86:e4:f3:f5:e5:81:2e:4f:8e:
b3:9f:f3:bb:21:18:5c:7d:42:7d:b3:14:db:63:ce:17:e3:01:
b9:13:d2:7a:a1:97:f6:3f:7c:50:03:0f:72:41:4e:48:6c:cd:
ce:04:7b:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzpy0HHigiKwaRVqG8h5mkqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjQwMTA4MTU1NzQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTMxM2NlOGM0OTNhODg1ZTU1NWY1NmMyNDFkYWEzOTlkYmE0NWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTf/LVH1XBTjA9BmmEDBF6vFruLE
H0AOfzHUbk7ZQR4s7WKBm+seELzrnoJEOOtGgOi2FfKPULtePX9OSoBx474x/4BK
G+YbHPBrldpIqag8QQSYGkOcgkiV0SJQ0GS3o1ZCqbfrV9fHbsxFpIUAjxSXXa2D
YXdMdJQOpSdhSYL/LnvAFR5jmy1jOqHgsAvWrJvMC/xtbOlMuXux8KzWcgZr7L29
5L3WvdoiIU36i2lmquEPxqZ88mt2qYIQhWvR8Vwv4iNac2XVdKBQx2dgTVDbzM1r
8OJFfeN4uh2VugJX77Hg66uiyGZKhawlHVpkVa2COE0e5Pn9MbByyt03ywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAoxPOjEk6iF5VX1bCQdqjmdukXcMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvQ2pFODZNU1RxSVhsVmZWc0pCMnFPWjI2UmR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBV+UkMA0G
CSqGSIb3DQEBCwUAA4IBAQCOkYwuu2FvzKGkfJbqURjxKW8JPJasPEqtE+4k2twY
Nn1UFuxeJ3wT0rmbE8HKHqMwvQPlZUY3lI8rAavd5D7Gl4KAx7B9xVhG2svSs4w7
WIfOIKcBCv3vsShOm4JBsx5+2s55FQOhiGvKWCJh0+gjhsKPDSfM3DYTkFa5bp7A
RHMzDOBNQMW0UXkB0Lg/r1vKLUUTLEU6HOj/TIMUe3ESShwrnW1XKlOdte6+1A8/
Q5FwXtVSwq9/nrS0hoWIou9EQknncTmA3x30Sx37VSeG5PP15YEuT46zn/O7IRhc
fUJ9sxTbY84X4wG5E9J6oZf2P3xQAw9yQU5IbM3OBHsk
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:05:38 2024 by rpki-client on console-ams.rpki-client.org