Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/J-j-1_Q3-AgdH5_2mblGepigdE4.roa
File: J-j-1_Q3-AgdH5_2mblGepigdE4.roa (raw, json)
Hash identifier: l9qxua7fcMxy+Mg6som3dhxYgWapLMZHlacNbsqj3X8=
Subject key identifier: 27:E8:FE:D7:F4:37:F8:08:1D:1F:9F:F6:99:B9:46:7A:98:A0:74:4E
Certificate issuer: /CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Certificate serial: 018CC8DF19DAB0E98D61DCFF92BD885D6D3B
Authority key identifier: 28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/J-j-1_Q3-AgdH5_2mblGepigdE4.roa
Signing time: Tue 02 Jan 2024 06:31:53 +0000
ROA not before: Tue 02 Jan 2024 06:31:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3170
IP address blocks: 92.60.44.0/22 maxlen: 24
91.218.58.0/24 maxlen: 24
2a07:f1c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:19:da:b0:e9:8d:61:dc:ff:92:bd:88:5d:6d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Validity
Not Before: Jan 2 06:31:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27e8fed7f437f8081d1f9ff699b9467a98a0744e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:47:7c:7d:9d:85:69:39:31:f1:a3:3b:58:
73:34:78:75:f6:36:85:66:9e:83:0a:5d:3b:03:25:
f9:4b:e3:3e:80:c0:9b:5c:de:44:76:3e:45:a4:65:
d4:e0:38:a7:d9:49:f8:b7:38:6c:56:49:dc:14:09:
4f:53:0b:7e:9c:a5:0c:7a:29:cb:52:8a:2d:84:c5:
e1:d2:3a:a2:58:91:7b:a1:ed:23:b9:82:fc:05:1a:
f3:7a:a4:9f:f5:91:dd:96:14:e6:62:37:9d:62:b9:
35:ff:a3:da:00:7f:4a:e5:2b:c6:11:ff:e1:e0:1e:
54:54:ac:f8:c7:31:cb:ef:2e:51:b7:57:54:78:06:
d7:60:07:09:5e:25:5b:c9:3f:6a:f8:bf:68:99:75:
98:04:ec:4d:58:18:19:2c:e9:81:86:6d:e3:3b:69:
9a:62:df:da:d5:b3:ee:53:11:d3:47:da:ee:e9:9e:
04:7d:86:d5:4d:5d:a6:05:d8:fe:b2:a2:f6:3b:57:
da:b5:82:ac:8b:93:1a:4b:d3:c6:e3:c7:7d:79:89:
ef:cf:13:0a:44:03:92:f6:cc:af:d4:1d:3e:dd:b6:
27:65:19:16:67:ac:e4:06:db:cd:90:f6:70:fa:4a:
90:e9:85:cd:88:30:8e:06:ae:2b:cc:85:7d:06:0a:
c7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E8:FE:D7:F4:37:F8:08:1D:1F:9F:F6:99:B9:46:7A:98:A0:74:4E
X509v3 Authority Key Identifier:
keyid:28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/J-j-1_Q3-AgdH5_2mblGepigdE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.58.0/24
92.60.44.0/22
IPv6:
2a07:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
52:a6:91:5b:8d:39:ce:b5:46:08:7b:79:50:8f:86:15:a7:43:
e4:25:32:f9:35:8a:39:9e:23:14:a4:98:1b:19:d2:11:e9:3b:
0a:e4:2c:a8:db:41:f2:f7:fe:ee:f2:d7:e3:87:e5:53:a8:2a:
38:45:4f:9c:7a:2c:30:e7:f7:0a:29:b3:56:13:74:18:d6:f5:
0f:42:52:6d:af:fa:53:79:42:39:f3:fc:8e:06:76:e2:92:40:
55:f6:3c:87:b0:8b:ee:3a:3b:d8:ec:be:d9:e4:94:7b:0f:09:
32:72:97:c1:f8:70:1d:e9:ec:c1:8b:b1:9f:16:f4:20:63:8d:
82:b4:10:62:3f:8b:f6:3b:29:a9:32:ab:ce:a2:c6:96:53:17:
94:94:7a:5f:ca:81:cf:aa:f8:e4:ee:34:7e:03:7a:6c:1a:10:
39:83:2e:c4:29:be:32:83:4a:31:83:29:26:8d:ff:dd:fa:0f:
39:1d:09:d4:94:f5:66:10:d2:64:f2:25:06:0d:98:45:41:29:
c2:6f:01:55:6c:ef:b9:d7:ff:19:70:30:24:ca:17:0b:af:68:
4a:97:dd:12:cd:50:1a:1c:83:90:58:92:1c:64:71:86:17:d4:
f2:5b:6d:ae:d3:60:61:16:b7:5b:47:0e:04:35:0b:ae:af:fa:
58:f9:f0:11
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzI3xnasOmNYdz/kr2IXW07MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YWM5ZWRkMjQwYmZjNDUyMGNlMGJjOWIyNDU5NjNkMjRl
MmJmZTIwHhcNMjQwMTAyMDYzMTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2U4ZmVkN2Y0MzdmODA4MWQxZjlmZjY5OWI5NDY3YTk4YTA3NDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroVHfH2dhWk5MfGjO1hzNHh19jaF
Zp6DCl07AyX5S+M+gMCbXN5Edj5FpGXU4Din2Un4tzhsVkncFAlPUwt+nKUMeinL
UoothMXh0jqiWJF7oe0juYL8BRrzeqSf9ZHdlhTmYjedYrk1/6PaAH9K5SvGEf/h
4B5UVKz4xzHL7y5Rt1dUeAbXYAcJXiVbyT9q+L9omXWYBOxNWBgZLOmBhm3jO2ma
Yt/a1bPuUxHTR9ru6Z4EfYbVTV2mBdj+sqL2O1fatYKsi5MaS9PG48d9eYnvzxMK
RAOS9syv1B0+3bYnZRkWZ6zkBtvNkPZw+kqQ6YXNiDCOBq4rzIV9BgrHTwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFCfo/tf0N/gIHR+f9pm5RnqYoHROMB8GA1UdIwQY
MBaAFCisnt0kC/xFIM4LybJFlj0k4r/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0t5ZTNTUUxfRVVnemd2SnNrV1dQU1Rpdi1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zNjBiMTctN2UxNy00NTFiLWFiZDUt
ODVhNTM0ZjE4MGZkLzEvSi1qLTFfUTMtQWdkSDVfMm1ibEdlcGlnZEU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zNjBiMTctN2UxNy00NTFiLWFiZDUtODVhNTM0ZjE4MGZk
LzEvS0t5ZTNTUUxfRVVnemd2SnNrV1dQU1Rpdi1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW9o6AwQC
XDwsMA0EAgACMAcDBQMqB/HAMA0GCSqGSIb3DQEBCwUAA4IBAQBSppFbjTnOtUYI
e3lQj4YVp0PkJTL5NYo5niMUpJgbGdIR6TsK5Cyo20Hy9/7u8tfjh+VTqCo4RU+c
eiww5/cKKbNWE3QY1vUPQlJtr/pTeUI58/yOBnbikkBV9jyHsIvuOjvY7L7Z5JR7
DwkycpfB+HAd6ezBi7GfFvQgY42CtBBiP4v2OympMqvOosaWUxeUlHpfyoHPqvjk
7jR+A3psGhA5gy7EKb4yg0oxgykmjf/d+g85HQnUlPVmENJk8iUGDZhFQSnCbwFV
bO+51/8ZcDAkyhcLr2hKl90SzVAaHIOQWJIcZHGGF9TyW22u02BhFrdbRw4ENQuu
r/pY+fAR
-----END CERTIFICATE-----
Generated at Mon May 6 10:51:05 2024 by rpki-client on console-ams.rpki-client.org