Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/u1FkzvMrnDDsYV9YzWwvjccKIRY.roa
File: u1FkzvMrnDDsYV9YzWwvjccKIRY.roa (raw, json)
Hash identifier: 29v2bkMd5dO+k+fy1SprmZ0A/LMc1B9Ub43CbyFToW4=
Subject key identifier: BB:51:64:CE:F3:2B:9C:30:EC:61:5F:58:CD:6C:2F:8D:C7:0A:21:16
Certificate issuer: /CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Certificate serial: 018CC79491014B4410CFDB18CE9D0FEDB20B
Authority key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/u1FkzvMrnDDsYV9YzWwvjccKIRY.roa
Signing time: Tue 02 Jan 2024 00:30:51 +0000
ROA not before: Tue 02 Jan 2024 00:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34934
IP address blocks: 78.24.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:91:01:4b:44:10:cf:db:18:ce:9d:0f:ed:b2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Validity
Not Before: Jan 2 00:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb5164cef32b9c30ec615f58cd6c2f8dc70a2116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:14:6e:66:56:e0:ed:56:b0:6f:92:1d:f6:59:
7b:6d:a2:ed:d2:06:36:01:3b:0e:70:80:05:2a:5a:
0a:8a:cb:12:55:9b:ef:b5:83:f4:c2:ed:e9:43:9b:
1e:02:84:07:06:f4:19:a9:26:3a:dc:86:34:19:90:
6d:ed:34:47:4e:45:a4:54:78:35:2b:b4:6a:3c:4e:
56:5f:fd:4a:bd:e7:8b:04:f4:9d:eb:e1:2e:12:41:
52:be:c5:17:59:c2:5e:32:43:bd:51:17:f7:f3:a7:
80:54:a1:ea:79:13:5d:f9:56:72:93:0a:4e:0e:fb:
db:f4:63:1e:58:3f:08:fb:c3:2c:c1:5c:96:e2:57:
77:62:3b:36:05:60:f5:e8:e2:1a:9a:08:75:da:76:
97:c6:c6:03:d8:e9:4c:06:6d:cb:8d:37:0f:53:55:
c2:4d:88:a6:1c:ac:4a:38:43:af:fe:2f:99:0a:e9:
ae:8f:ad:eb:49:a8:6a:9f:be:c9:bb:2b:11:86:f8:
9c:c7:f4:fc:34:36:54:6e:97:1f:54:70:1c:02:ff:
54:1e:88:37:e2:91:c2:7c:11:0f:75:84:1d:90:6d:
cc:7a:22:71:2c:3b:74:11:4c:02:42:0e:a7:13:ce:
69:0b:8b:5b:8f:2b:54:85:12:2d:5b:02:2a:9c:21:
69:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:51:64:CE:F3:2B:9C:30:EC:61:5F:58:CD:6C:2F:8D:C7:0A:21:16
X509v3 Authority Key Identifier:
keyid:E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/u1FkzvMrnDDsYV9YzWwvjccKIRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.89.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ce:63:2e:95:8d:b1:70:73:bb:fa:c2:54:b3:f4:f3:dd:64:
d1:53:54:6b:9b:e0:67:5e:33:eb:44:40:4e:cf:78:61:af:db:
6d:58:d4:51:0b:a7:71:09:c4:33:23:bb:ca:21:02:58:c4:32:
c2:e2:0f:dd:2c:23:3f:b1:b7:a9:45:68:68:5b:41:3f:1b:65:
9a:43:68:d1:cc:4b:a8:18:a6:0d:4e:49:76:aa:fc:d2:69:90:
e5:b2:46:f7:d4:85:04:c9:78:d9:11:83:94:44:d0:5a:9a:1a:
a4:e5:77:82:a8:ec:a2:2f:07:5d:0c:82:50:23:83:68:cf:a5:
c3:88:dd:65:85:95:8e:cc:29:25:05:f7:3f:50:2f:dc:af:2a:
b1:5d:93:4e:2d:df:75:5e:71:42:e0:99:77:75:62:89:64:e0:
76:71:b0:76:03:a4:da:7f:50:02:1f:70:42:32:c1:42:14:a6:
6c:fd:60:19:b5:07:41:10:0e:2a:b0:d5:60:8c:65:50:1b:5c:
34:76:6f:ca:d4:cb:91:e2:87:4a:3f:e8:45:f0:6e:ea:01:92:
cd:2f:ec:72:49:5e:0b:6d:f2:c9:1a:14:01:d3:a0:c1:76:b0:
72:19:99:4e:1b:fa:1e:ce:69:19:fd:f6:ec:d0:a0:48:62:ba:
26:d3:92:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlJEBS0QQz9sYzp0P7bILMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYzhhMzkwZGRlNWUxNTE5YTRiZDNkYTc1NGE5M2U5ODg0
OTJkNjcwHhcNMjQwMTAyMDAzMDUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjUxNjRjZWYzMmI5YzMwZWM2MTVmNThjZDZjMmY4ZGM3MGEyMTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhRuZlbg7Vawb5Id9ll7baLt0gY2
ATsOcIAFKloKissSVZvvtYP0wu3pQ5seAoQHBvQZqSY63IY0GZBt7TRHTkWkVHg1
K7RqPE5WX/1KveeLBPSd6+EuEkFSvsUXWcJeMkO9URf386eAVKHqeRNd+VZykwpO
Dvvb9GMeWD8I+8MswVyW4ld3Yjs2BWD16OIamgh12naXxsYD2OlMBm3LjTcPU1XC
TYimHKxKOEOv/i+ZCumuj63rSahqn77JuysRhvicx/T8NDZUbpcfVHAcAv9UHog3
4pHCfBEPdYQdkG3MeiJxLDt0EUwCQg6nE85pC4tbjytUhRItWwIqnCFpawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLtRZM7zK5ww7GFfWM1sL43HCiEWMB8GA1UdIwQY
MBaAFODIo5Dd5eFRmkvT2nVKk+mISS1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE1pamtOM2w0VkdhUzlQYWRVcVQ2WWhKTFdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS84NjliMzAtZmNkNi00OGRmLThkMjUt
YmVmM2JhMjFjNzE1LzEvdTFGa3p2TXJuRERzWVY5WXpXd3ZqY2NLSVJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS84NjliMzAtZmNkNi00OGRmLThkMjUtYmVmM2JhMjFjNzE1
LzEvNE1pamtOM2w0VkdhUzlQYWRVcVQ2WWhKTFdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAThhZMA0G
CSqGSIb3DQEBCwUAA4IBAQA5zmMulY2xcHO7+sJUs/Tz3WTRU1Rrm+BnXjPrREBO
z3hhr9ttWNRRC6dxCcQzI7vKIQJYxDLC4g/dLCM/sbepRWhoW0E/G2WaQ2jRzEuo
GKYNTkl2qvzSaZDlskb31IUEyXjZEYOURNBamhqk5XeCqOyiLwddDIJQI4Noz6XD
iN1lhZWOzCklBfc/UC/cryqxXZNOLd91XnFC4Jl3dWKJZOB2cbB2A6Taf1ACH3BC
MsFCFKZs/WAZtQdBEA4qsNVgjGVQG1w0dm/K1MuR4odKP+hF8G7qAZLNL+xySV4L
bfLJGhQB06DBdrByGZlOG/oezmkZ/fbs0KBIYrom05IL
-----END CERTIFICATE-----
Generated at Sun May 19 00:44:31 2024 by rpki-client on console-ams.rpki-client.org