Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/r_RJNp6pmqkDFXzzLjA9Avkanoc.roa
File: r_RJNp6pmqkDFXzzLjA9Avkanoc.roa (raw, json)
Hash identifier: GbVOa9Wajdkh2zRsPhbIfyfFkf3u3BLeRTItW8RTpsg=
Subject key identifier: AF:F4:49:36:9E:A9:9A:A9:03:15:7C:F3:2E:30:3D:02:F9:1A:9E:87
Certificate issuer: /CN=7a10ee228073328a2c2081cbb2a96cd1264dbef1
Certificate serial: 018CEE61DF21C5A1BB5A691ADCA46AD407C7
Authority key identifier: 7A:10:EE:22:80:73:32:8A:2C:20:81:CB:B2:A9:6C:D1:26:4D:BE:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehDuIoBzMoosIIHLsqls0SZNvvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/r_RJNp6pmqkDFXzzLjA9Avkanoc.roa
Signing time: Tue 09 Jan 2024 13:20:40 +0000
ROA not before: Tue 09 Jan 2024 13:20:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49151
IP address blocks: 185.53.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehDuIoBzMoosIIHLsqls0SZNvvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 17:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:61:df:21:c5:a1:bb:5a:69:1a:dc:a4:6a:d4:07:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a10ee228073328a2c2081cbb2a96cd1264dbef1
Validity
Not Before: Jan 9 13:20:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aff449369ea99aa903157cf32e303d02f91a9e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cf:88:3e:35:4a:3d:f1:3b:dd:cf:65:be:55:
c5:87:8f:e6:df:ce:24:98:14:9a:75:22:99:92:f8:
14:75:52:b9:93:76:c8:5e:1f:c8:46:70:70:20:43:
8a:1b:9e:ea:f1:fa:80:31:22:a8:82:38:31:a5:b7:
d4:da:1d:aa:8a:89:98:7b:69:bf:a3:db:33:17:73:
07:70:4a:d0:46:10:f7:b3:eb:47:ff:ad:24:26:88:
b9:12:16:5e:24:58:c2:03:b3:dc:0e:b5:07:52:74:
13:31:9f:26:12:db:ca:59:3b:99:70:17:37:a6:83:
1f:00:51:f5:12:15:55:e4:d6:a1:3a:21:85:85:97:
4b:58:72:95:2e:9f:a9:56:7c:98:f7:a7:2f:bd:2d:
01:c4:26:9b:3a:19:15:00:cf:39:54:b7:24:d3:72:
1a:b9:6d:56:f3:e9:89:56:2c:6a:ea:cd:74:48:c3:
bd:e6:fc:29:cf:23:bc:eb:8c:0a:a4:c0:d8:80:b2:
92:f8:c5:63:17:88:d3:29:e8:35:ff:b9:67:b5:0a:
b5:87:68:30:79:e3:bf:90:60:68:4b:a3:69:eb:c0:
35:6b:80:76:93:4a:21:a1:fd:e2:d4:29:79:e7:46:
38:58:97:12:a2:ed:34:98:80:07:de:ed:55:55:a3:
1f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F4:49:36:9E:A9:9A:A9:03:15:7C:F3:2E:30:3D:02:F9:1A:9E:87
X509v3 Authority Key Identifier:
keyid:7A:10:EE:22:80:73:32:8A:2C:20:81:CB:B2:A9:6C:D1:26:4D:BE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehDuIoBzMoosIIHLsqls0SZNvvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/r_RJNp6pmqkDFXzzLjA9Avkanoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.147.0/24
Signature Algorithm: sha256WithRSAEncryption
20:99:3f:78:9d:96:54:43:2a:b4:ce:6c:28:ee:dd:0f:99:22:
33:ed:8e:ef:15:42:d4:88:e7:9c:f7:81:39:30:5a:67:9f:0f:
8c:31:1c:3c:06:23:86:05:59:bc:fe:9b:88:f9:17:44:e0:06:
9b:3c:66:a2:e9:c1:5f:2c:d3:0a:c8:f3:95:01:b6:ff:1c:f9:
4e:38:39:68:27:11:97:0f:1f:c2:8d:39:0c:32:61:55:69:01:
e2:6e:58:8b:c5:60:12:7a:b1:f0:e2:03:58:00:b2:21:ec:1e:
0e:3f:78:a6:b3:96:06:42:31:8a:e1:fb:9b:cd:63:f3:33:04:
6b:7f:65:59:ab:8a:fc:21:1d:4e:74:36:37:b3:57:eb:ee:13:
c0:cf:6c:f9:98:f0:a7:36:df:9f:3c:7d:fd:7d:ee:01:95:18:
e1:d7:a7:1a:30:9d:70:1a:e9:66:c6:d5:5d:26:0e:60:61:9a:
87:e5:bc:a4:fa:d4:ea:4a:53:f4:31:52:45:2c:f9:37:ab:05:
6b:b8:a5:bb:39:aa:e8:76:90:97:86:e7:c9:bc:b1:0e:b7:25:
41:ee:56:f7:87:5b:33:9e:c5:86:29:44:27:cb:80:77:ba:75:
26:7b:47:d5:60:68:b1:27:d0:76:82:d5:20:2a:6b:6f:67:59:
07:a2:db:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzuYd8hxaG7Wmka3KRq1AfHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMTBlZTIyODA3MzMyOGEyYzIwODFjYmIyYTk2Y2QxMjY0
ZGJlZjEwHhcNMjQwMTA5MTMyMDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmY0NDkzNjllYTk5YWE5MDMxNTdjZjMyZTMwM2QwMmY5MWE5ZTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc+IPjVKPfE73c9lvlXFh4/m384k
mBSadSKZkvgUdVK5k3bIXh/IRnBwIEOKG57q8fqAMSKogjgxpbfU2h2qiomYe2m/
o9szF3MHcErQRhD3s+tH/60kJoi5EhZeJFjCA7PcDrUHUnQTMZ8mEtvKWTuZcBc3
poMfAFH1EhVV5NahOiGFhZdLWHKVLp+pVnyY96cvvS0BxCabOhkVAM85VLck03Ia
uW1W8+mJVixq6s10SMO95vwpzyO864wKpMDYgLKS+MVjF4jTKeg1/7lntQq1h2gw
eeO/kGBoS6Np68A1a4B2k0ohof3i1Cl550Y4WJcSou00mIAH3u1VVaMfewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK/0STaeqZqpAxV88y4wPQL5Gp6HMB8GA1UdIwQY
MBaAFHoQ7iKAczKKLCCBy7KpbNEmTb7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWhEdUlvQnpNb29zSUlITHNxbHMwU1pOdnZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mYjE4MjctYTdlOS00NWM4LWI2NDMt
NzZlMDdhNTc3ZTRkLzEvcl9SSk5wNnBtcWtERlh6ekxqQTlBdmthbm9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9mYjE4MjctYTdlOS00NWM4LWI2NDMtNzZlMDdhNTc3ZTRk
LzEvZWhEdUlvQnpNb29zSUlITHNxbHMwU1pOdnZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTWTMA0G
CSqGSIb3DQEBCwUAA4IBAQAgmT94nZZUQyq0zmwo7t0PmSIz7Y7vFULUiOec94E5
MFpnnw+MMRw8BiOGBVm8/puI+RdE4AabPGai6cFfLNMKyPOVAbb/HPlOODloJxGX
Dx/CjTkMMmFVaQHibliLxWASerHw4gNYALIh7B4OP3ims5YGQjGK4fubzWPzMwRr
f2VZq4r8IR1OdDY3s1fr7hPAz2z5mPCnNt+fPH39fe4BlRjh16caMJ1wGulmxtVd
Jg5gYZqH5byk+tTqSlP0MVJFLPk3qwVruKW7OarodpCXhufJvLEOtyVB7lb3h1sz
nsWGKUQny4B3unUme0fVYGixJ9B2gtUgKmtvZ1kHotuG
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:45:50 2024 by rpki-client on console-fra.rpki-client.org