Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/jRno8iyIor_R48P-mrEAwZV-BN4.roa
File: jRno8iyIor_R48P-mrEAwZV-BN4.roa (raw, json)
Hash identifier: CbYl/UZ2fJkwl8U+MzW3f8HTMOldXWU6VdRd0CDrXYM=
Subject key identifier: 8D:19:E8:F2:2C:88:A2:BF:D1:E3:C3:FE:9A:B1:00:C1:95:7E:04:DE
Certificate issuer: /CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57
Certificate serial: 018CC86F042EFF9EBC7616F00B1CD464DF25
Authority key identifier: C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/jRno8iyIor_R48P-mrEAwZV-BN4.roa
Signing time: Tue 02 Jan 2024 04:29:27 +0000
ROA not before: Tue 02 Jan 2024 04:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31083
IP address blocks: 193.68.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:04:2e:ff:9e:bc:76:16:f0:0b:1c:d4:64:df:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57
Validity
Not Before: Jan 2 04:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d19e8f22c88a2bfd1e3c3fe9ab100c1957e04de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3e:e0:6c:d9:55:22:de:ad:53:6e:b1:5f:cd:
4b:83:29:d3:00:85:fd:34:8c:e6:7f:d7:8b:56:14:
6b:ff:5b:d6:9c:7c:ed:14:94:11:fc:d6:69:78:2b:
2e:48:de:01:fe:eb:6b:65:a6:a3:f9:bd:0d:72:26:
7b:26:b8:f1:5e:c5:2e:e9:a5:c9:74:90:82:50:98:
9f:cc:3a:c2:1c:c3:60:5a:70:52:8d:b8:60:c9:14:
86:81:9a:e7:48:40:cd:0e:14:e1:aa:25:68:0f:4f:
72:e8:ce:8c:2e:14:58:8e:0c:d3:56:b1:21:15:5e:
72:60:83:2b:2d:ed:db:55:82:77:e6:7c:ef:8a:df:
ee:86:ba:15:8a:65:a8:15:33:88:d0:81:41:ce:79:
46:2b:87:cb:ec:8b:48:07:8b:ad:57:2b:45:ae:15:
06:e2:fc:55:ce:c1:30:b3:89:91:b5:9d:a7:1a:62:
85:77:25:24:05:06:48:b6:82:2a:66:84:6b:a9:01:
bb:14:35:ef:02:ac:5c:8f:53:da:38:f1:90:b2:6f:
f5:41:df:c2:6c:39:c2:30:d5:94:5e:b4:ea:c3:99:
ce:9d:04:03:d2:a1:96:35:e2:72:24:43:9f:8d:2a:
34:e1:76:fc:6f:e4:6a:b7:c5:df:7f:5c:87:2c:9f:
3e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:19:E8:F2:2C:88:A2:BF:D1:E3:C3:FE:9A:B1:00:C1:95:7E:04:DE
X509v3 Authority Key Identifier:
keyid:C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/jRno8iyIor_R48P-mrEAwZV-BN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.68.119.0/24
Signature Algorithm: sha256WithRSAEncryption
66:ff:96:e4:4e:7e:be:72:c6:bc:f8:50:07:73:59:04:3d:a3:
01:55:7a:b8:d0:8a:65:52:4e:3b:8b:15:97:7c:de:83:81:b5:
80:d4:01:84:cb:ba:f7:e7:b6:bf:94:1a:93:2f:3e:cb:e5:ca:
2c:64:4a:d1:78:58:7e:42:af:6b:66:58:86:bc:0e:cc:8b:6a:
96:c8:2e:99:67:3f:57:87:74:a6:f6:d8:64:af:d6:bc:4e:ed:
8d:26:66:af:86:8f:ed:06:f0:05:7e:1d:24:14:e7:7a:01:21:
2b:dd:e4:83:0c:a3:c3:3f:57:bc:de:9b:66:31:c3:3f:83:8b:
07:a9:19:2d:fc:37:76:e7:65:e6:e0:d2:3d:d7:eb:c0:12:bc:
cc:cb:fb:2f:eb:e2:fe:cd:6f:7c:30:41:0a:ef:d0:85:db:b9:
05:34:a8:9a:3f:58:03:c1:dc:bb:32:4e:ca:d5:7c:0f:39:04:
c1:00:67:bf:cb:7f:60:b5:3e:88:7c:4c:d3:f3:66:83:7e:3d:
e7:c8:ee:e0:50:ad:79:68:58:96:07:c8:da:72:d9:8f:bb:85:
f3:0f:a3:21:20:b9:90:e1:b5:16:76:d1:e1:fd:c5:d0:62:c2:
56:3d:aa:bc:e0:b6:55:fa:ee:6a:53:7e:3e:49:c8:46:e6:28:
1e:77:ca:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIbwQu/568dhbwCxzUZN8lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNWNiNzEzMmMxOWY3ZDUxZjAwMmVkNGFkODExYWVjZjVi
MjBmNTcwHhcNMjQwMTAyMDQyOTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDE5ZThmMjJjODhhMmJmZDFlM2MzZmU5YWIxMDBjMTk1N2UwNGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD7gbNlVIt6tU26xX81LgynTAIX9
NIzmf9eLVhRr/1vWnHztFJQR/NZpeCsuSN4B/utrZaaj+b0NciZ7JrjxXsUu6aXJ
dJCCUJifzDrCHMNgWnBSjbhgyRSGgZrnSEDNDhThqiVoD09y6M6MLhRYjgzTVrEh
FV5yYIMrLe3bVYJ35nzvit/uhroVimWoFTOI0IFBznlGK4fL7ItIB4utVytFrhUG
4vxVzsEws4mRtZ2nGmKFdyUkBQZItoIqZoRrqQG7FDXvAqxcj1PaOPGQsm/1Qd/C
bDnCMNWUXrTqw5nOnQQD0qGWNeJyJEOfjSo04Xb8b+Rqt8Xff1yHLJ8+wQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI0Z6PIsiKK/0ePD/pqxAMGVfgTeMB8GA1UdIwQY
MBaAFMJctxMsGffVHwAu1K2BGuz1sg9XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2x5M0V5d1o5OVVmQUM3VXJZRWE3UFd5RDFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iMjcyMDMtOWQ0OC00OWE1LWFmMjUt
NDlkNDBhMTNjYmMyLzEvalJubzhpeUlvcl9SNDhQLW1yRUF3WlYtQk40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9iMjcyMDMtOWQ0OC00OWE1LWFmMjUtNDlkNDBhMTNjYmMy
LzEvd2x5M0V5d1o5OVVmQUM3VXJZRWE3UFd5RDFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwUR3MA0G
CSqGSIb3DQEBCwUAA4IBAQBm/5bkTn6+csa8+FAHc1kEPaMBVXq40IplUk47ixWX
fN6DgbWA1AGEy7r357a/lBqTLz7L5cosZErReFh+Qq9rZliGvA7Mi2qWyC6ZZz9X
h3Sm9thkr9a8Tu2NJmavho/tBvAFfh0kFOd6ASEr3eSDDKPDP1e83ptmMcM/g4sH
qRkt/Dd252Xm4NI91+vAErzMy/sv6+L+zW98MEEK79CF27kFNKiaP1gDwdy7Mk7K
1XwPOQTBAGe/y39gtT6IfEzT82aDfj3nyO7gUK15aFiWB8jactmPu4XzD6MhILmQ
4bUWdtHh/cXQYsJWPaq84LZV+u5qU34+SchG5iged8qt
-----END CERTIFICATE-----
Generated at Fri May 17 07:11:17 2024 by rpki-client on console-ams.rpki-client.org