Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/0Jg3_aFQiZraSb10sLr9ixkf3ZA.roa
File: 0Jg3_aFQiZraSb10sLr9ixkf3ZA.roa (raw, json)
Hash identifier: yKNaz/EP+R3aprSpHPvVSImY2K0vAlSWjZBFCi+RPvs=
Subject key identifier: D0:98:37:FD:A1:50:89:9A:DA:49:BD:74:B0:BA:FD:8B:19:1F:DD:90
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018EBC7FC66D15A8C1FA35C77955EC7E418E
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/0Jg3_aFQiZraSb10sLr9ixkf3ZA.roa
Signing time: Mon 08 Apr 2024 06:57:54 +0000
ROA not before: Mon 08 Apr 2024 06:57:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42337
IP address blocks: 217.60.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bc:7f:c6:6d:15:a8:c1:fa:35:c7:79:55:ec:7e:41:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Apr 8 06:57:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d09837fda150899ada49bd74b0bafd8b191fdd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2e:ee:5a:71:dd:c4:9b:e2:69:19:87:13:7e:
b7:53:d0:cc:77:dd:85:08:fe:80:20:5b:7d:38:a9:
37:9e:74:86:08:27:24:bf:82:f3:04:ea:ab:bd:c7:
16:e2:58:27:a5:3b:fe:f8:a3:cc:4a:d6:73:2b:e4:
e3:94:02:40:60:83:74:33:4b:5c:c9:26:1a:da:a3:
bf:7c:c3:03:59:71:c3:d2:e6:23:29:70:f6:d6:47:
b5:b3:0e:61:cd:99:37:d4:d8:ca:6f:1d:20:e1:c4:
0d:b9:60:f3:a0:ea:04:86:90:33:8b:6c:c3:7e:38:
94:36:a9:61:7b:d8:b6:21:1c:34:a5:5c:bb:fe:43:
dd:fe:33:da:5a:e4:b5:eb:d6:6e:82:9d:98:f4:4e:
25:e4:08:b4:ab:3d:53:31:0f:57:bf:82:15:78:d4:
f7:ae:ac:75:86:6a:d3:83:15:a2:66:cf:a6:79:40:
8c:a5:0c:84:c2:c1:34:6d:ba:59:4d:40:a8:d0:5f:
19:92:e1:f3:fb:0d:42:42:c4:a2:1a:b4:c3:2f:05:
cc:e6:1b:45:20:8a:a1:30:c9:2c:50:93:57:e5:9d:
24:3c:05:2c:82:58:0a:64:2d:a2:45:52:18:7e:16:
6a:95:8f:95:2c:fc:c7:37:ed:e7:1b:8a:4a:f5:14:
e3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:98:37:FD:A1:50:89:9A:DA:49:BD:74:B0:BA:FD:8B:19:1F:DD:90
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/0Jg3_aFQiZraSb10sLr9ixkf3ZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.245.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f0:44:1d:da:9e:30:a5:3e:d4:76:d3:71:06:88:71:3f:9d:
8b:8c:ea:b3:3e:cc:b2:d7:f5:95:67:03:30:4c:df:d8:83:f5:
8d:b0:f8:40:d1:4f:dc:83:b5:32:24:f9:bc:92:3f:c2:af:fe:
6f:c9:68:fb:ee:73:04:f1:22:53:1e:47:52:58:9d:b8:03:d8:
d4:2d:34:9e:e8:fb:98:f9:aa:92:3a:0b:bd:27:ba:d8:01:c7:
80:2b:e4:88:06:a8:f5:e1:19:ed:ec:9c:20:c2:3f:6e:a4:a4:
c6:6f:6e:b3:2e:44:b5:81:68:11:d8:10:19:8b:e8:20:d9:fd:
30:ac:f9:f0:c5:ef:62:78:c0:2c:ed:c0:0d:77:0b:e3:e1:8c:
8b:ad:17:37:f3:5d:af:93:3a:3d:2b:c7:36:6d:04:5d:97:ac:
61:94:35:d7:c4:bf:a2:ff:94:47:83:6d:41:0b:79:d2:f3:2e:
ed:80:20:41:f8:6b:b3:bc:57:c6:03:54:e2:df:38:22:75:7a:
d1:51:d9:67:f8:2d:f3:a2:72:0a:2d:a5:61:26:6d:9d:90:73:
00:51:d4:7a:2e:30:6b:39:e3:f8:bf:1f:a7:50:b6:09:03:de:
8a:9c:22:85:57:50:b9:c7:cc:71:20:e1:f5:53:12:47:22:43:
60:20:62:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY68f8ZtFajB+jXHeVXsfkGOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy
ZGM2NmUwHhcNMjQwNDA4MDY1NzU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDk4MzdmZGExNTA4OTlhZGE0OWJkNzRiMGJhZmQ4YjE5MWZkZDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgy7uWnHdxJviaRmHE363U9DMd92F
CP6AIFt9OKk3nnSGCCckv4LzBOqrvccW4lgnpTv++KPMStZzK+TjlAJAYIN0M0tc
ySYa2qO/fMMDWXHD0uYjKXD21ke1sw5hzZk31NjKbx0g4cQNuWDzoOoEhpAzi2zD
fjiUNqlhe9i2IRw0pVy7/kPd/jPaWuS169Zugp2Y9E4l5Ai0qz1TMQ9Xv4IVeNT3
rqx1hmrTgxWiZs+meUCMpQyEwsE0bbpZTUCo0F8ZkuHz+w1CQsSiGrTDLwXM5htF
IIqhMMksUJNX5Z0kPAUsglgKZC2iRVIYfhZqlY+VLPzHN+3nG4pK9RTjpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNCYN/2hUIma2km9dLC6/YsZH92QMB8GA1UdIwQY
MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt
MGJlZTA2MTI2YjFhLzEvMEpnM19hRlFpWnJhU2IxMHNMcjlpeGtmM1pBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh
LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Tz1MA0G
CSqGSIb3DQEBCwUAA4IBAQBu8EQd2p4wpT7UdtNxBohxP52LjOqzPsyy1/WVZwMw
TN/Yg/WNsPhA0U/cg7UyJPm8kj/Cr/5vyWj77nME8SJTHkdSWJ24A9jULTSe6PuY
+aqSOgu9J7rYAceAK+SIBqj14Rnt7Jwgwj9upKTGb26zLkS1gWgR2BAZi+gg2f0w
rPnwxe9ieMAs7cANdwvj4YyLrRc3812vkzo9K8c2bQRdl6xhlDXXxL+i/5RHg21B
C3nS8y7tgCBB+GuzvFfGA1Ti3zgidXrRUdln+C3zonIKLaVhJm2dkHMAUdR6LjBr
OeP4vx+nULYJA96KnCKFV1C5x8xxIOH1UxJHIkNgIGJc
-----END CERTIFICATE-----
Generated at Fri Jun 14 06:38:46 2024 by rpki-client on console-fra.rpki-client.org