Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/JPxlB_GrwFganPMWQNPgMsiIgY4.roa
File: JPxlB_GrwFganPMWQNPgMsiIgY4.roa (raw, json)
Hash identifier: MAZaeXqf4exLJ3/m4P8dWZuEtrPgDk5xIMKYFFtgMIk=
Subject key identifier: 24:FC:65:07:F1:AB:C0:58:1A:9C:F3:16:40:D3:E0:32:C8:88:81:8E
Certificate issuer: /CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Certificate serial: 018CC725AFB053B4D31DEF2E8C609126887C
Authority key identifier: 8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/JPxlB_GrwFganPMWQNPgMsiIgY4.roa
Signing time: Mon 01 Jan 2024 22:29:44 +0000
ROA not before: Mon 01 Jan 2024 22:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198033
IP address blocks: 195.190.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:af:b0:53:b4:d3:1d:ef:2e:8c:60:91:26:88:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Validity
Not Before: Jan 1 22:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24fc6507f1abc0581a9cf31640d3e032c888818e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:44:24:8c:65:95:b5:b2:44:ff:e1:99:d0:e3:
d2:7f:0a:c8:98:39:fb:cd:5a:01:5f:d1:6f:6d:3a:
e8:c7:9d:5c:0f:8e:3d:ab:9e:bd:19:37:8f:67:77:
bf:d4:0c:06:12:c4:0a:de:68:3e:0a:50:98:68:f0:
c3:51:6f:b1:12:4e:7e:b2:4f:fc:e7:42:a1:74:ed:
77:a8:9a:4e:7d:e2:42:fd:5a:4e:49:4d:48:36:41:
2c:8f:38:87:6b:f5:6c:5c:4a:01:a6:10:19:41:09:
5a:fc:ce:bf:09:11:07:9a:70:94:e0:7b:0e:b6:d0:
ef:20:88:05:ea:ef:a4:ac:f6:5b:9f:ed:23:82:46:
b5:ba:96:9e:c2:72:ad:53:a9:14:77:14:fb:4a:df:
a1:43:fa:92:28:e6:91:dd:ca:00:a3:c2:65:27:ec:
e9:6a:93:fd:55:c4:83:20:11:77:8e:88:94:94:e9:
0b:58:70:1d:3a:77:24:84:6b:f9:7b:92:4f:9a:57:
1e:70:a3:29:d5:fa:cd:a2:63:fa:9e:58:87:5d:9b:
2c:68:cc:54:4f:ac:48:c4:38:ac:ee:e3:10:39:eb:
46:b6:96:43:b4:3a:12:8f:57:5f:e2:a6:a5:75:cb:
dd:0d:5f:7a:46:eb:4f:d4:1c:48:ce:f0:bd:29:fd:
bb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FC:65:07:F1:AB:C0:58:1A:9C:F3:16:40:D3:E0:32:C8:88:81:8E
X509v3 Authority Key Identifier:
keyid:8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/JPxlB_GrwFganPMWQNPgMsiIgY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.152.0/24
Signature Algorithm: sha256WithRSAEncryption
68:09:bc:65:e7:9a:f3:e7:69:89:bd:ee:18:b7:8c:51:5f:cd:
a7:73:cd:20:c8:54:7d:f3:5a:ff:6f:fb:c2:ed:e7:73:57:98:
4d:35:00:1b:19:e2:20:85:03:9b:b6:75:08:43:bd:6a:bb:6b:
4f:6d:60:0f:a8:fb:4e:c6:f5:1c:0b:1a:00:a5:b6:60:15:57:
f2:7d:9b:a1:6b:b7:9f:3f:36:cc:5d:c3:58:d3:ab:bb:75:23:
86:6b:24:1d:a9:21:4d:f1:e8:43:d9:d9:99:f6:14:97:f7:03:
60:11:39:0b:94:79:e0:d3:3e:9f:c9:06:d3:c4:24:96:91:c4:
e9:73:c0:e0:47:dd:b5:e4:86:5f:dc:67:1b:97:b8:a3:f9:2e:
f3:11:14:a3:c1:62:5a:85:06:ad:cd:42:f0:d6:03:70:15:2a:
6e:99:a4:23:c7:88:d3:ae:c6:4f:d2:11:a0:7e:d9:80:c0:fb:
a1:58:63:88:42:54:e6:bb:2c:bc:41:19:69:73:74:0f:75:f9:
9d:29:5f:76:5f:9a:ea:83:64:b8:01:29:5c:0a:6a:9e:06:9b:
89:90:08:c9:8a:22:cb:19:76:bf:af:6f:24:44:05:8e:20:ce:
c5:35:95:f6:f6:f6:71:ec:4f:55:d0:b8:36:e2:66:a3:01:f4:
a0:d6:3c:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJa+wU7TTHe8ujGCRJoh8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNjIyYTM0YzU1ZTM5YjhmYTE1YTM3YmE5ZTM3MGVhYWZk
OTk3NzQwHhcNMjQwMTAxMjIyOTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGZjNjUwN2YxYWJjMDU4MWE5Y2YzMTY0MGQzZTAzMmM4ODg4MThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokQkjGWVtbJE/+GZ0OPSfwrImDn7
zVoBX9FvbTrox51cD449q569GTePZ3e/1AwGEsQK3mg+ClCYaPDDUW+xEk5+sk/8
50KhdO13qJpOfeJC/VpOSU1INkEsjziHa/VsXEoBphAZQQla/M6/CREHmnCU4HsO
ttDvIIgF6u+krPZbn+0jgka1upaewnKtU6kUdxT7St+hQ/qSKOaR3coAo8JlJ+zp
apP9VcSDIBF3joiUlOkLWHAdOnckhGv5e5JPmlcecKMp1frNomP6nliHXZssaMxU
T6xIxDis7uMQOetGtpZDtDoSj1df4qaldcvdDV96RutP1BxIzvC9Kf27iwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCT8ZQfxq8BYGpzzFkDT4DLIiIGOMB8GA1UdIwQY
MBaAFI5iKjTFXjm4+hWje6njcOqv2Zd0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam1JcU5NVmVPYmo2RmFON3FlTnc2cV9abDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84MmNiM2UtODE5OS00OTE3LWExNzYt
ZTUwZTFlOWJiNGIzLzEvSlB4bEJfR3J3RmdhblBNV1FOUGdNc2lJZ1k0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84MmNiM2UtODE5OS00OTE3LWExNzYtZTUwZTFlOWJiNGIz
LzEvam1JcU5NVmVPYmo2RmFON3FlTnc2cV9abDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw76YMA0G
CSqGSIb3DQEBCwUAA4IBAQBoCbxl55rz52mJve4Yt4xRX82nc80gyFR981r/b/vC
7edzV5hNNQAbGeIghQObtnUIQ71qu2tPbWAPqPtOxvUcCxoApbZgFVfyfZuha7ef
PzbMXcNY06u7dSOGayQdqSFN8ehD2dmZ9hSX9wNgETkLlHng0z6fyQbTxCSWkcTp
c8DgR9215IZf3Gcbl7ij+S7zERSjwWJahQatzULw1gNwFSpumaQjx4jTrsZP0hGg
ftmAwPuhWGOIQlTmuyy8QRlpc3QPdfmdKV92X5rqg2S4ASlcCmqeBpuJkAjJiiLL
GXa/r28kRAWOIM7FNZX29vZx7E9V0Lg24majAfSg1jw3
-----END CERTIFICATE-----
Generated at Sat Jun 15 00:20:54 2024 by rpki-client on console-ams.rpki-client.org