Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/jR-ow2gjQwcqidQRee3qcfCqni0.roa
File: jR-ow2gjQwcqidQRee3qcfCqni0.roa (raw, json)
Hash identifier: Nt8ngAmZ8eTBLQvUKj85hfmg3868A4cy2IE+7n/ng9M=
Subject key identifier: 8D:1F:A8:C3:68:23:43:07:2A:89:D4:11:79:ED:EA:71:F0:AA:9E:2D
Certificate issuer: /CN=ef583686464c533d4152bca2edf3a01b487eea92
Certificate serial: 018CC26CEE486772B574FEE3F4EEF6742F95
Authority key identifier: EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/jR-ow2gjQwcqidQRee3qcfCqni0.roa
Signing time: Mon 01 Jan 2024 00:29:27 +0000
ROA not before: Mon 01 Jan 2024 00:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21263
IP address blocks: 178.157.88.0/23 maxlen: 24
5.154.178.0/24 maxlen: 24
5.154.177.0/24 maxlen: 24
2a0e:1d00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:ee:48:67:72:b5:74:fe:e3:f4:ee:f6:74:2f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef583686464c533d4152bca2edf3a01b487eea92
Validity
Not Before: Jan 1 00:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d1fa8c3682343072a89d41179edea71f0aa9e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:62:a3:2f:bc:c1:f7:35:58:1f:d0:14:f6:ad:
a5:a7:e2:f7:fc:a4:76:6f:8a:3c:64:ca:42:ea:e6:
5b:8e:cb:e5:92:79:d5:ef:29:88:e4:31:e0:62:f1:
65:2e:2b:9b:79:31:4b:91:23:cb:76:a4:5a:93:ef:
0e:6b:ba:9b:0a:65:6c:01:4a:84:62:a2:cf:f0:1e:
40:fe:9a:de:41:c0:56:57:18:1f:07:a5:8d:72:8a:
be:ee:c7:33:42:29:f7:8e:da:f5:b6:38:84:e5:df:
94:fb:46:3c:c6:e3:3b:4e:bf:54:e6:ae:60:c3:89:
e8:88:b3:6b:49:38:b0:3c:dd:d2:70:e5:36:64:f3:
45:49:17:3e:cc:aa:2e:e5:59:2d:35:72:fc:e2:86:
e8:1b:f4:5a:de:be:4a:e9:91:ae:13:08:74:88:87:
a9:d7:6a:5b:1f:b6:96:6d:52:12:41:6d:a3:5b:be:
71:fd:c3:5e:e8:57:9b:93:9f:f9:ab:f9:5e:5e:cb:
84:f2:0b:b2:cf:c4:95:52:fc:e3:ae:98:19:cf:a5:
a4:7b:4b:60:cf:8a:3d:b0:65:21:57:4d:fd:be:dc:
20:f3:49:a3:b2:92:4b:8d:2b:18:7f:16:04:15:59:
20:e8:fe:a4:62:3b:5a:e1:06:16:e8:25:5b:be:6d:
60:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1F:A8:C3:68:23:43:07:2A:89:D4:11:79:ED:EA:71:F0:AA:9E:2D
X509v3 Authority Key Identifier:
keyid:EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/jR-ow2gjQwcqidQRee3qcfCqni0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.177.0-5.154.178.255
178.157.88.0/23
IPv6:
2a0e:1d00::/32
Signature Algorithm: sha256WithRSAEncryption
b5:d9:fd:3d:5a:16:fd:1f:b5:28:82:b8:a1:32:aa:c1:1b:98:
09:f1:ca:99:89:19:e6:0e:db:14:c4:9f:43:c5:77:20:5f:14:
3c:ff:af:3f:8e:f8:d0:5f:6e:44:77:68:f3:c8:17:13:0a:92:
63:61:4b:67:b7:f8:21:e0:b1:ad:14:7f:48:3b:df:a4:0f:ff:
36:2f:62:f0:a4:3b:68:29:f1:eb:20:6b:8f:79:97:66:e3:43:
a6:96:20:d7:68:10:b8:c9:1a:57:e5:3c:63:bd:6b:96:10:31:
84:a9:44:1c:e2:8b:b4:24:28:ff:44:5a:71:df:48:82:b7:3c:
2f:08:49:4a:96:2d:3c:44:2b:12:e8:2c:f7:60:84:6b:13:28:
f4:8c:b6:7b:cd:34:ff:e7:39:30:c4:4f:8a:a3:93:0d:32:ac:
8e:37:88:f4:a2:13:9e:c5:07:38:ac:88:19:81:6b:1a:7e:16:
8a:80:bf:04:b5:4f:6e:c0:fb:7e:4e:37:c1:79:3c:f0:9e:e6:
3e:f9:ba:f9:e4:6c:46:4e:4c:83:0c:b5:af:2b:6a:df:02:26:
58:5f:73:56:b2:48:30:b9:70:95:54:be:82:3c:7d:85:f9:a4:
b8:48:be:76:3f:ac:30:50:01:dd:29:bd:ce:c6:90:73:cd:5a:
37:d0:71:a7
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYzCbO5IZ3K1dP7j9O72dC+VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTgzNjg2NDY0YzUzM2Q0MTUyYmNhMmVkZjNhMDFiNDg3
ZWVhOTIwHhcNMjQwMTAxMDAyOTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDFmYThjMzY4MjM0MzA3MmE4OWQ0MTE3OWVkZWE3MWYwYWE5ZTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimKjL7zB9zVYH9AU9q2lp+L3/KR2
b4o8ZMpC6uZbjsvlknnV7ymI5DHgYvFlLiubeTFLkSPLdqRak+8Oa7qbCmVsAUqE
YqLP8B5A/preQcBWVxgfB6WNcoq+7sczQin3jtr1tjiE5d+U+0Y8xuM7Tr9U5q5g
w4noiLNrSTiwPN3ScOU2ZPNFSRc+zKou5VktNXL84oboG/Ra3r5K6ZGuEwh0iIep
12pbH7aWbVISQW2jW75x/cNe6Febk5/5q/leXsuE8guyz8SVUvzjrpgZz6Wke0tg
z4o9sGUhV039vtwg80mjspJLjSsYfxYEFVkg6P6kYjta4QYW6CVbvm1gxwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFI0fqMNoI0MHKonUEXnt6nHwqp4tMB8GA1UdIwQY
MBaAFO9YNoZGTFM9QVK8ou3zoBtIfuqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFnMmhrWk1VejFCVXJ5aTdmT2dHMGgtNnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82YTc1NGUtNThmNi00YzEwLTlkNWUt
ZjQzYWEyNzAwM2M1LzEvalItb3cyZ2pRd2NxaWRRUmVlM3FjZkNxbmkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS82YTc1NGUtNThmNi00YzEwLTlkNWUtZjQzYWEyNzAwM2M1
LzEvNzFnMmhrWk1VejFCVXJ5aTdmT2dHMGgtNnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUMAwDBAAFmrED
BAAFmrIDBAGynVgwDQQCAAIwBwMFACoOHQAwDQYJKoZIhvcNAQELBQADggEBALXZ
/T1aFv0ftSiCuKEyqsEbmAnxypmJGeYO2xTEn0PFdyBfFDz/rz+O+NBfbkR3aPPI
FxMKkmNhS2e3+CHgsa0Uf0g736QP/zYvYvCkO2gp8esga495l2bjQ6aWINdoELjJ
GlflPGO9a5YQMYSpRBzii7QkKP9EWnHfSIK3PC8ISUqWLTxEKxLoLPdghGsTKPSM
tnvNNP/nOTDET4qjkw0yrI43iPSiE57FBzisiBmBaxp+FoqAvwS1T27A+35ON8F5
PPCe5j75uvnkbEZOTIMMta8rat8CJlhfc1aySDC5cJVUvoI8fYX5pLhIvnY/rDBQ
Ad0pvc7GkHPNWjfQcac=
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:21:38 2024 by rpki-client on console-fra.rpki-client.org