Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/jlBgFq1VMPd_NGLdP4JA3M7T6mU.roa
File: jlBgFq1VMPd_NGLdP4JA3M7T6mU.roa (raw, json)
Hash identifier: 03j3k4wrgFI+I1RjipXjVRx4hIo9e3k7oZjZwt2+O9c=
Subject key identifier: 8E:50:60:16:AD:55:30:F7:7F:34:62:DD:3F:82:40:DC:CE:D3:EA:65
Certificate issuer: /CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Certificate serial: 018CC870C101DD19447A3C459E34AF4659D5
Authority key identifier: CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/jlBgFq1VMPd_NGLdP4JA3M7T6mU.roa
Signing time: Tue 02 Jan 2024 04:31:21 +0000
ROA not before: Tue 02 Jan 2024 04:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 680
IP address blocks: 192.124.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:c1:01:dd:19:44:7a:3c:45:9e:34:af:46:59:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Validity
Not Before: Jan 2 04:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e506016ad5530f77f3462dd3f8240dcced3ea65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c7:66:77:49:b8:87:82:64:8e:81:f4:a2:bd:
92:9e:9c:83:76:2a:c3:19:c7:b9:79:c9:6d:34:3a:
20:03:6f:70:bd:cc:88:56:82:7a:42:ac:93:68:ab:
c8:8c:e5:e8:82:49:24:b0:e7:be:cb:6e:25:5d:a8:
45:d7:0e:49:5c:5c:69:da:5a:54:07:12:2d:f7:a2:
62:52:11:bd:5e:07:93:e8:2a:c8:68:cb:67:c3:2f:
74:06:fe:a5:2f:58:0d:f3:df:0a:16:f8:64:89:39:
7e:97:9e:b0:3a:bb:22:18:fc:38:d7:73:f6:80:35:
bc:8a:92:89:18:5d:c0:7a:01:d4:f8:01:73:39:29:
9b:cf:85:6f:e7:4a:b7:da:df:7a:ec:26:e0:dd:1c:
21:4c:39:4b:2a:be:a7:76:a9:50:55:b7:00:61:3c:
0b:5d:d1:18:9e:73:3b:f3:21:e3:5b:b0:2d:66:ba:
d6:3e:3c:c1:a2:5d:84:2e:0d:bf:d7:67:60:b0:12:
71:aa:55:be:e7:58:7e:fb:a9:bd:67:d1:d1:e4:8f:
35:1f:78:1c:e6:b9:9f:5f:6e:47:25:9c:dd:33:14:
17:0b:a2:ff:59:39:b3:cc:93:25:ca:f9:cc:98:10:
3f:f3:7a:16:df:56:8a:f1:c6:3d:33:dc:b6:3f:9b:
4b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:50:60:16:AD:55:30:F7:7F:34:62:DD:3F:82:40:DC:CE:D3:EA:65
X509v3 Authority Key Identifier:
keyid:CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/jlBgFq1VMPd_NGLdP4JA3M7T6mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.254.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:be:ff:32:d2:e1:19:78:1a:e1:af:75:3f:c4:bb:8c:bc:e7:
7a:42:b7:0f:b2:dc:86:a3:58:cd:18:29:b5:7f:52:9e:d4:8a:
f0:15:9b:ae:94:68:66:35:b5:17:e0:1c:9a:cc:c3:59:d6:de:
61:52:a1:f1:a9:97:ac:c6:d0:9f:76:2a:15:d6:cf:24:4f:41:
1b:04:1e:63:a8:50:7c:3c:b8:c9:bb:d8:7e:47:c7:71:79:8e:
61:38:b7:8f:88:8c:c2:01:b8:18:40:3e:e2:c9:ad:cc:06:f0:
6a:c6:9e:35:60:5c:66:f1:f1:52:26:1e:e2:60:c9:63:10:25:
c4:e9:44:e8:88:4d:6d:28:10:86:3f:85:5c:ce:f3:a8:f0:94:
bc:b9:87:23:3d:f4:52:2f:4a:0f:ba:ad:2e:36:7d:69:8d:93:
f2:c3:a3:55:cf:cb:78:17:87:58:b0:96:47:6f:c8:5a:b5:90:
e8:2c:4f:e7:84:89:08:c4:97:64:8e:ac:7a:fc:02:f9:e6:1a:
97:bf:98:6d:77:86:81:32:75:a4:0b:a9:d0:f2:5c:d7:a8:cd:
8b:ce:a3:e6:53:1f:65:3d:10:5b:7c:62:39:66:34:04:f7:4d:
60:94:05:c2:09:5d:ad:4d:c3:8f:2a:61:98:ba:0d:14:60:53:
d1:b7:7f:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIcMEB3RlEejxFnjSvRlnVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNjU0NzFiOTRhMzI2MGMyZDlmNjU4ZGNlZDJmODdmNDBi
NTQyNGIwHhcNMjQwMTAyMDQzMTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTUwNjAxNmFkNTUzMGY3N2YzNDYyZGQzZjgyNDBkY2NlZDNlYTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMdmd0m4h4JkjoH0or2SnpyDdirD
Gce5ecltNDogA29wvcyIVoJ6QqyTaKvIjOXogkkksOe+y24lXahF1w5JXFxp2lpU
BxIt96JiUhG9XgeT6CrIaMtnwy90Bv6lL1gN898KFvhkiTl+l56wOrsiGPw413P2
gDW8ipKJGF3AegHU+AFzOSmbz4Vv50q32t967Cbg3RwhTDlLKr6ndqlQVbcAYTwL
XdEYnnM78yHjW7AtZrrWPjzBol2ELg2/12dgsBJxqlW+51h++6m9Z9HR5I81H3gc
5rmfX25HJZzdMxQXC6L/WTmzzJMlyvnMmBA/83oW31aK8cY9M9y2P5tL7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI5QYBatVTD3fzRi3T+CQNzO0+plMB8GA1UdIwQY
MBaAFM5lRxuUoyYMLZ9ljc7S+H9AtUJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem1WSEc1U2pKZ3d0bjJXTnp0TDRmMEMxUWtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9iYTg3OTAtZWY0My00MGVhLWJlY2Yt
YmIwZTBjYzI2YzQ5LzEvamxCZ0ZxMVZNUGRfTkdMZFA0SkEzTTdUNm1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9iYTg3OTAtZWY0My00MGVhLWJlY2YtYmIwZTBjYzI2YzQ5
LzEvem1WSEc1U2pKZ3d0bjJXTnp0TDRmMEMxUWtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHz+MA0G
CSqGSIb3DQEBCwUAA4IBAQCLvv8y0uEZeBrhr3U/xLuMvOd6QrcPstyGo1jNGCm1
f1Ke1IrwFZuulGhmNbUX4ByazMNZ1t5hUqHxqZesxtCfdioV1s8kT0EbBB5jqFB8
PLjJu9h+R8dxeY5hOLePiIzCAbgYQD7iya3MBvBqxp41YFxm8fFSJh7iYMljECXE
6UToiE1tKBCGP4VczvOo8JS8uYcjPfRSL0oPuq0uNn1pjZPyw6NVz8t4F4dYsJZH
b8hatZDoLE/nhIkIxJdkjqx6/AL55hqXv5htd4aBMnWkC6nQ8lzXqM2LzqPmUx9l
PRBbfGI5ZjQE901glAXCCV2tTcOPKmGYug0UYFPRt39x
-----END CERTIFICATE-----
Generated at Fri Jun 7 16:59:15 2024 by rpki-client on console-ams.rpki-client.org