Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/jVeEEcG0tItgklouSO744tTEy5Y.roa
File: jVeEEcG0tItgklouSO744tTEy5Y.roa (raw, json)
Hash identifier: s1mVTGAaJO2twIPXwRKceMzA0FsJmRE29csv9HbnBbo=
Subject key identifier: 8D:57:84:11:C1:B4:B4:8B:60:92:5A:2E:48:EE:F8:E2:D4:C4:CB:96
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018EE3578458738917D676ED6EC7468BB518
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/jVeEEcG0tItgklouSO744tTEy5Y.roa
Signing time: Mon 15 Apr 2024 19:59:07 +0000
ROA not before: Mon 15 Apr 2024 19:59:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 27176
IP address blocks: 37.16.76.0/24 maxlen: 24
91.188.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e3:57:84:58:73:89:17:d6:76:ed:6e:c7:46:8b:b5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 15 19:59:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d578411c1b4b48b60925a2e48eef8e2d4c4cb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3b:6b:44:5b:dd:74:4a:b9:4d:dd:41:21:e5:
59:07:1b:98:46:f8:56:93:a5:8f:46:b5:92:88:cc:
de:7f:8d:5b:2c:9d:5f:a7:58:43:f5:9d:7e:75:83:
8c:ab:f1:23:11:75:4f:bf:61:e9:c0:17:5c:1f:eb:
28:c5:ae:9f:b0:ad:79:c9:53:d5:17:01:50:ca:ba:
b5:0b:d6:e7:eb:d7:52:52:97:53:a9:15:57:b5:a9:
21:16:05:42:e3:dd:00:a8:ce:28:88:35:f7:84:22:
65:79:41:0d:db:ec:38:b7:3e:0c:8f:9f:c2:f5:4a:
5a:13:51:2c:1b:7f:b0:46:99:42:d7:7c:97:e3:44:
4f:2f:70:66:90:31:f8:73:bf:5e:2f:89:b4:73:2e:
37:07:58:dc:14:92:e6:e4:11:87:5a:a0:fa:a0:c7:
82:00:75:74:16:bb:c7:0f:3f:81:a8:3b:a4:5d:27:
7d:82:46:b2:75:2b:82:bb:18:d3:f5:6c:12:ca:d4:
b6:7b:8c:05:83:db:2f:f8:0f:3a:42:09:e9:28:a3:
ee:03:a7:1b:a9:2b:27:ca:c8:93:3d:63:7c:be:a0:
1f:50:e0:ba:14:92:69:84:32:03:57:42:cb:ca:0c:
10:d4:8f:83:2d:b5:6b:32:b9:cd:cf:da:e9:c1:d1:
0e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:57:84:11:C1:B4:B4:8B:60:92:5A:2E:48:EE:F8:E2:D4:C4:CB:96
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/jVeEEcG0tItgklouSO744tTEy5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.76.0/24
91.188.236.0/22
Signature Algorithm: sha256WithRSAEncryption
38:08:73:d1:d0:08:c5:a1:ae:25:ed:99:d4:38:c0:ce:fc:18:
6b:a3:bf:71:62:1c:54:fd:f7:4b:e2:28:5f:27:f8:dd:23:5b:
b7:60:5c:13:2f:33:32:32:36:07:cd:f2:12:ca:0d:29:0c:73:
dc:f9:e3:a9:d7:aa:ec:e8:ef:12:b3:3b:f3:6e:b9:ea:1c:b6:
74:7e:69:c4:b2:c0:ab:d7:b8:51:3e:ad:55:35:32:fd:7a:2d:
cb:81:06:9c:e1:0d:e3:ca:bc:16:06:fb:24:7d:12:8d:80:54:
cc:2a:c4:ba:d4:23:04:bc:94:17:a2:6e:0e:80:fe:b4:3d:b9:
04:da:c1:f8:5d:17:c0:28:42:6e:9f:98:6d:ac:68:08:05:ce:
a1:79:a1:9c:d4:2c:a0:a4:22:d0:c8:ba:e3:b8:25:6a:c5:7d:
80:0b:0b:1c:5e:c4:90:c6:da:cf:a1:aa:ef:f8:c8:83:f8:5a:
49:7c:66:57:3b:af:9e:0e:df:08:b0:8d:0f:83:3b:35:d0:23:
7f:76:06:fd:1b:18:bc:d3:86:f7:a9:0d:a5:1d:03:dc:de:f9:
34:6e:05:28:18:b5:d9:36:83:a8:bd:c2:d2:09:0d:60:a0:a3:
b4:0c:16:35:6e:77:0f:58:98:08:a0:bf:69:e4:53:df:23:d4:
66:d3:50:97
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY7jV4RYc4kX1nbtbsdGi7UYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjQwNDE1MTk1OTA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDU3ODQxMWMxYjRiNDhiNjA5MjVhMmU0OGVlZjhlMmQ0YzRjYjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ztrRFvddEq5Td1BIeVZBxuYRvhW
k6WPRrWSiMzef41bLJ1fp1hD9Z1+dYOMq/EjEXVPv2HpwBdcH+soxa6fsK15yVPV
FwFQyrq1C9bn69dSUpdTqRVXtakhFgVC490AqM4oiDX3hCJleUEN2+w4tz4Mj5/C
9UpaE1EsG3+wRplC13yX40RPL3BmkDH4c79eL4m0cy43B1jcFJLm5BGHWqD6oMeC
AHV0FrvHDz+BqDukXSd9gkaydSuCuxjT9WwSytS2e4wFg9sv+A86QgnpKKPuA6cb
qSsnysiTPWN8vqAfUOC6FJJphDIDV0LLygwQ1I+DLbVrMrnNz9rpwdEO8wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFI1XhBHBtLSLYJJaLkju+OLUxMuWMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvalZlRUVjRzB0SXRna2xvdVNPNzQ0dFRFeTVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJRBMAwQC
W7zsMA0GCSqGSIb3DQEBCwUAA4IBAQA4CHPR0AjFoa4l7ZnUOMDO/Bhro79xYhxU
/fdL4ihfJ/jdI1u3YFwTLzMyMjYHzfISyg0pDHPc+eOp16rs6O8SszvzbrnqHLZ0
fmnEssCr17hRPq1VNTL9ei3LgQac4Q3jyrwWBvskfRKNgFTMKsS61CMEvJQXom4O
gP60PbkE2sH4XRfAKEJun5htrGgIBc6heaGc1CygpCLQyLrjuCVqxX2ACwscXsSQ
xtrPoarv+MiD+FpJfGZXO6+eDt8IsI0Pgzs10CN/dgb9Gxi804b3qQ2lHQPc3vk0
bgUoGLXZNoOovcLSCQ1goKO0DBY1bncPWJgIoL9p5FPfI9Rm01CX
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:53:27 2024 by rpki-client on console-ams.rpki-client.org