Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/jp8qX4Eac_y0tBMssyEbzGUHPzg.roa
File: jp8qX4Eac_y0tBMssyEbzGUHPzg.roa (raw, json)
Hash identifier: EeZ09A5JLDJhCz0P2yg3c7i8YnFZXB2/5NfTMmnRi3w=
Subject key identifier: 8E:9F:2A:5F:81:1A:73:FC:B4:B4:13:2C:B3:21:1B:CC:65:07:3F:38
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018D69EA907942FFD8BB5C6E4C9D27F361EC
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/jp8qX4Eac_y0tBMssyEbzGUHPzg.roa
Signing time: Fri 02 Feb 2024 13:03:16 +0000
ROA not before: Fri 02 Feb 2024 13:03:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204104
IP address blocks: 195.96.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:69:ea:90:79:42:ff:d8:bb:5c:6e:4c:9d:27:f3:61:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 2 13:03:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e9f2a5f811a73fcb4b4132cb3211bcc65073f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:13:1a:6f:87:ef:0f:eb:3f:7b:0a:ff:1f:01:
b8:90:27:2b:c3:98:44:f4:9e:be:48:ef:d6:6b:51:
09:9c:ab:db:dc:fd:12:d0:16:50:7b:1a:a4:51:d3:
5e:e2:a0:2e:0f:57:73:96:6f:c5:cc:d8:36:26:9b:
56:cc:34:a5:4a:71:b0:30:96:df:7d:68:94:15:97:
9b:70:c3:fb:25:22:0f:bf:0c:2a:12:21:46:da:3e:
14:45:4f:1d:d4:8f:c7:4d:6b:9e:99:ee:33:45:60:
89:e5:51:13:26:09:09:f4:f9:fa:84:4a:e3:37:e2:
53:91:98:fe:37:a3:04:ff:96:82:47:91:8d:f7:69:
7e:69:08:b9:2a:23:b5:f4:af:f7:f4:74:2d:cc:dc:
e4:9e:f9:ef:89:2e:41:f5:05:3d:d9:4e:f0:96:88:
3b:9c:30:72:3c:51:0a:82:de:59:99:d8:e4:d7:9e:
3c:42:fa:6e:6b:06:b6:cb:3b:fe:46:b3:97:34:e7:
26:ef:ab:d9:9a:4b:09:7a:ff:b3:e6:d6:6e:b9:16:
dd:5e:fd:ed:ee:96:af:b2:5a:2e:02:d7:7b:be:10:
38:58:c1:4a:7f:c9:66:91:08:f3:d9:bb:6f:b1:6e:
2e:94:2d:28:1c:1b:1f:39:4c:b4:ce:57:8c:af:38:
fa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9F:2A:5F:81:1A:73:FC:B4:B4:13:2C:B3:21:1B:CC:65:07:3F:38
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/jp8qX4Eac_y0tBMssyEbzGUHPzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.135.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:44:0a:b0:b2:93:9a:cd:66:15:a2:8d:ad:41:99:4a:93:51:
28:53:65:a4:cb:af:0f:02:3f:86:ee:21:d7:3d:5d:7f:25:45:
25:e3:a5:bb:26:e7:24:61:56:f5:05:4a:75:ba:e0:c7:db:0a:
14:79:c1:1e:87:9f:71:5f:9a:49:c3:d9:2d:60:29:30:2f:8e:
13:11:95:35:ba:0d:83:98:5a:2f:2e:1a:c5:6f:75:3f:6c:82:
ae:7d:a4:81:1f:ce:90:f9:10:29:99:19:95:4c:85:0b:48:ee:
b0:e1:4b:ba:f6:ea:bb:c7:d0:4d:4d:a4:bf:b3:32:e1:07:9f:
fa:5f:64:c6:72:35:df:9b:be:47:55:15:47:ca:47:34:ca:46:
4c:cf:b4:64:d0:fc:bf:79:42:67:c3:7f:f4:ae:ae:12:91:73:
7c:a0:bc:ff:bf:38:09:8c:a3:64:ff:95:18:03:c3:68:1b:7f:
2a:5d:86:79:83:7e:6f:e1:18:f9:3e:cb:3e:2f:00:1c:23:6f:
a9:75:5e:5a:e1:48:8a:24:d3:87:b5:0b:20:d3:e5:48:ea:a2:
6c:2e:1c:39:41:1a:7e:6a:c5:a1:b5:1d:7e:12:f2:f3:69:bc:
8d:4e:8e:14:dd:0a:f8:7c:16:2f:46:23:5c:e2:9d:b2:7c:9b:
0d:6c:1a:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1p6pB5Qv/Yu1xuTJ0n82HsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjQwMjAyMTMwMzE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTlmMmE1ZjgxMWE3M2ZjYjRiNDEzMmNiMzIxMWJjYzY1MDczZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxMab4fvD+s/ewr/HwG4kCcrw5hE
9J6+SO/Wa1EJnKvb3P0S0BZQexqkUdNe4qAuD1dzlm/FzNg2JptWzDSlSnGwMJbf
fWiUFZebcMP7JSIPvwwqEiFG2j4URU8d1I/HTWueme4zRWCJ5VETJgkJ9Pn6hErj
N+JTkZj+N6ME/5aCR5GN92l+aQi5KiO19K/39HQtzNzknvnviS5B9QU92U7wlog7
nDByPFEKgt5Zmdjk1548Qvpuawa2yzv+RrOXNOcm76vZmksJev+z5tZuuRbdXv3t
7pavslouAtd7vhA4WMFKf8lmkQjz2btvsW4ulC0oHBsfOUy0zleMrzj6cQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI6fKl+BGnP8tLQTLLMhG8xlBz84MB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvanA4cVg0RWFjX3kwdEJNc3N5RWJ6R1VIUHpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw2CHMA0G
CSqGSIb3DQEBCwUAA4IBAQCtRAqwspOazWYVoo2tQZlKk1EoU2Wky68PAj+G7iHX
PV1/JUUl46W7JuckYVb1BUp1uuDH2woUecEeh59xX5pJw9ktYCkwL44TEZU1ug2D
mFovLhrFb3U/bIKufaSBH86Q+RApmRmVTIULSO6w4Uu69uq7x9BNTaS/szLhB5/6
X2TGcjXfm75HVRVHykc0ykZMz7Rk0Py/eUJnw3/0rq4SkXN8oLz/vzgJjKNk/5UY
A8NoG38qXYZ5g35v4Rj5Pss+LwAcI2+pdV5a4UiKJNOHtQsg0+VI6qJsLhw5QRp+
asWhtR1+EvLzabyNTo4U3Qr4fBYvRiNc4p2yfJsNbBrl
-----END CERTIFICATE-----
Generated at Mon May 6 15:45:06 2024 by rpki-client on console-ams.rpki-client.org