Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/JBzYbiamr5HjxlOY5-bo6p1E0EA.roa
File: JBzYbiamr5HjxlOY5-bo6p1E0EA.roa (raw, json)
Hash identifier: b2zQ8Wo3QJaqz63GzDAD/esB0EKx8V28lWDVJbYIqw8=
Subject key identifier: 24:1C:D8:6E:26:A6:AF:91:E3:C6:53:98:E7:E6:E8:EA:9D:44:D0:40
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 018CC49372ABC20C862D6E23E77905416F00
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/JBzYbiamr5HjxlOY5-bo6p1E0EA.roa
Signing time: Mon 01 Jan 2024 10:30:46 +0000
ROA not before: Mon 01 Jan 2024 10:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205214
IP address blocks: 2a0d:2146:8480::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:72:ab:c2:0c:86:2d:6e:23:e7:79:05:41:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 10:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=241cd86e26a6af91e3c65398e7e6e8ea9d44d040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d3:bd:4b:2a:7e:20:2e:93:38:82:45:f6:65:
9c:b5:e7:82:09:93:ff:5a:0b:9f:ad:65:2a:60:f0:
20:58:a4:95:b0:f6:c5:a8:fd:88:46:12:60:e1:ea:
96:cc:30:2f:60:1a:67:83:4c:a1:06:67:48:b3:cd:
b3:26:c6:3b:6b:24:8a:70:f6:43:e5:ac:ed:4e:54:
eb:40:dd:30:92:f0:90:5f:b2:85:42:56:ca:e4:38:
c1:2a:bc:8d:dd:5b:7a:97:39:79:cd:21:5d:30:e6:
3f:38:a5:af:c1:38:a7:41:79:ff:1f:96:02:af:7d:
d5:bf:24:11:4f:3e:fe:70:be:ab:e6:b8:70:43:9a:
29:b2:21:83:26:6d:a2:54:e0:57:44:ef:05:38:d6:
3d:2f:19:8d:5e:d5:21:ac:ad:b0:81:ce:be:b1:74:
31:a3:1c:dc:16:67:95:70:1e:a6:ed:a6:37:78:31:
25:0c:94:b3:a5:9a:8a:a8:23:92:9c:14:bb:73:70:
6b:e1:29:72:f4:25:5e:ca:68:72:9a:8c:35:b7:d6:
59:96:4a:7a:74:c0:c3:03:b5:36:9e:c3:da:d5:d7:
33:6b:29:19:b1:3c:45:21:aa:5d:3e:69:18:f0:0a:
1e:e4:13:a1:88:cd:5d:d1:30:4f:51:1a:c8:56:cd:
1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1C:D8:6E:26:A6:AF:91:E3:C6:53:98:E7:E6:E8:EA:9D:44:D0:40
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/JBzYbiamr5HjxlOY5-bo6p1E0EA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2146:8480::/44
Signature Algorithm: sha256WithRSAEncryption
30:02:ea:73:3d:43:d0:56:3c:75:04:3d:07:bc:51:58:79:79:
5a:e1:6c:7d:8e:f3:31:c9:c3:68:eb:a1:90:6c:4f:34:45:42:
21:20:aa:83:f7:44:49:8e:da:ec:94:8f:cc:3a:22:46:2e:e6:
ac:54:03:c4:68:bf:c3:d8:63:c3:a0:19:1e:e4:b8:32:24:af:
43:d7:4c:13:c1:db:a7:2b:37:6e:b8:e2:b9:5d:f1:46:f7:00:
51:11:9f:c0:b0:7a:d5:9f:c5:a9:8c:c8:b6:fe:24:50:b7:cc:
ce:eb:cd:dc:fe:f6:be:5f:46:72:d2:6c:b6:19:8a:1c:fa:07:
c4:cc:d7:0f:89:9c:4a:e5:d2:87:b1:13:00:3b:6b:a5:dd:97:
98:29:28:8a:0f:4f:a4:3d:ac:f1:d7:f0:0a:57:eb:9d:9d:8f:
21:7f:a1:4e:c7:27:62:39:d8:63:d3:8d:76:10:01:82:aa:cd:
24:70:62:24:cf:d2:9d:da:6b:cd:d2:c9:a9:bc:6a:5a:7e:55:
40:74:bd:a1:ed:7e:4e:75:1c:25:34:3c:d8:66:74:65:af:be:
b0:90:5d:c2:df:c8:13:f3:2a:3c:20:fe:ee:c3:0b:66:84:b8:
27:25:4a:f5:5d:51:51:f4:42:5c:98:de:28:7d:89:c1:56:fd:
2f:40:b4:43
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzEk3KrwgyGLW4j53kFQW8AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm
YzAyNWYwHhcNMjQwMTAxMTAzMDQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDFjZDg2ZTI2YTZhZjkxZTNjNjUzOThlN2U2ZThlYTlkNDRkMDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9O9Syp+IC6TOIJF9mWcteeCCZP/
WgufrWUqYPAgWKSVsPbFqP2IRhJg4eqWzDAvYBpng0yhBmdIs82zJsY7aySKcPZD
5aztTlTrQN0wkvCQX7KFQlbK5DjBKryN3Vt6lzl5zSFdMOY/OKWvwTinQXn/H5YC
r33VvyQRTz7+cL6r5rhwQ5opsiGDJm2iVOBXRO8FONY9LxmNXtUhrK2wgc6+sXQx
oxzcFmeVcB6m7aY3eDElDJSzpZqKqCOSnBS7c3Br4Sly9CVeymhymow1t9ZZlkp6
dMDDA7U2nsPa1dczaykZsTxFIapdPmkY8Aoe5BOhiM1d0TBPURrIVs0dHwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCQc2G4mpq+R48ZTmOfm6OqdRNBAMB8GA1UdIwQY
MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt
NzBlODk4YmIzOGRkLzEvSkJ6WWJpYW1yNUhqeGxPWTUtYm82cDFFMEVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk
LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg0hRoSA
MA0GCSqGSIb3DQEBCwUAA4IBAQAwAupzPUPQVjx1BD0HvFFYeXla4Wx9jvMxycNo
66GQbE80RUIhIKqD90RJjtrslI/MOiJGLuasVAPEaL/D2GPDoBke5LgyJK9D10wT
wdunKzduuOK5XfFG9wBREZ/AsHrVn8WpjMi2/iRQt8zO683c/va+X0Zy0my2GYoc
+gfEzNcPiZxK5dKHsRMAO2ul3ZeYKSiKD0+kPazx1/AKV+udnY8hf6FOxydiOdhj
0412EAGCqs0kcGIkz9Kd2mvN0smpvGpaflVAdL2h7X5OdRwlNDzYZnRlr76wkF3C
38gT8yo8IP7uwwtmhLgnJUr1XVFR9EJcmN4ofYnBVv0vQLRD
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:53:11 2024 by rpki-client on console-fra.rpki-client.org