Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/jKupxe_itlY3U739vX4wEwX34KI.roa
File: jKupxe_itlY3U739vX4wEwX34KI.roa (raw, json)
Hash identifier: l7YKjFVWIR5NryBfRrIqqTTmJwLhkO8Uxr+2Rcl7Xtc=
Subject key identifier: 8C:AB:A9:C5:EF:E2:B6:56:37:53:BD:FD:BD:7E:30:13:05:F7:E0:A2
Certificate issuer: /CN=168731917170c4b81bee351d0455c32cbad63b26
Certificate serial: 018CC726C243D15FA219AC1222D6CF616BB0
Authority key identifier: 16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/jKupxe_itlY3U739vX4wEwX34KI.roa
Signing time: Mon 01 Jan 2024 22:30:55 +0000
ROA not before: Mon 01 Jan 2024 22:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209707
IP address blocks: 91.132.76.0/22 maxlen: 22
2a09:c180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:c2:43:d1:5f:a2:19:ac:12:22:d6:cf:61:6b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168731917170c4b81bee351d0455c32cbad63b26
Validity
Not Before: Jan 1 22:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8caba9c5efe2b6563753bdfdbd7e301305f7e0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:93:55:61:88:62:cf:65:78:44:7b:dd:e0:14:
26:02:30:5b:84:dd:d0:b7:25:e9:f2:51:23:c2:6b:
7d:2a:3e:54:5f:25:30:b6:40:34:27:d5:47:ea:31:
f4:63:24:42:6e:c8:85:80:11:d3:f5:dc:f3:de:b6:
2d:12:ad:f9:fb:bb:d7:eb:ea:49:97:82:a4:f4:05:
3b:b3:e6:57:cf:95:30:e5:5e:34:87:fe:cb:2c:9f:
1d:69:f2:42:56:bb:0c:6b:c1:43:15:f1:7e:08:e3:
32:ce:34:74:e0:b5:b7:0c:39:3c:2f:56:5a:56:0c:
9a:84:2f:18:44:c4:84:fa:e1:3e:fc:da:e3:1b:77:
74:46:c3:61:ec:d6:d9:56:9a:d4:c1:30:4b:27:4c:
5c:a7:12:2a:1b:56:c8:0a:68:61:ad:27:b7:1d:ee:
b0:13:82:a0:f4:65:0c:50:c5:5a:02:b0:a7:1d:4a:
dc:75:a2:fe:d5:16:e8:c1:40:d3:ca:e0:c6:b0:07:
d9:51:37:1b:ce:14:9d:0f:04:71:b9:82:cc:ff:aa:
13:87:aa:27:ce:e6:05:cc:4f:85:b3:5e:7f:13:6a:
bd:d3:c2:98:4b:8f:c3:ec:8b:9e:5d:b2:f7:0d:dd:
05:cb:b8:72:d1:f8:78:7f:4b:cc:7f:62:b5:2a:66:
c8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AB:A9:C5:EF:E2:B6:56:37:53:BD:FD:BD:7E:30:13:05:F7:E0:A2
X509v3 Authority Key Identifier:
keyid:16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/jKupxe_itlY3U739vX4wEwX34KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.76.0/22
IPv6:
2a09:c180::/29
Signature Algorithm: sha256WithRSAEncryption
48:18:9e:8a:7a:b2:04:75:22:e8:12:bc:6a:5c:61:8d:a0:22:
c9:44:ef:ad:02:3d:36:a3:ea:fc:24:ee:1d:a4:df:ab:e4:5e:
64:1e:40:9b:ff:be:bc:97:cb:76:c2:c6:36:fe:40:25:85:91:
db:78:53:89:91:bf:a1:37:c4:65:23:5b:a1:52:92:0a:58:96:
ac:18:85:9c:c6:4a:a0:35:9d:39:3d:b0:53:c4:62:5e:23:02:
61:58:0a:06:a2:50:eb:fc:66:c3:73:c7:07:57:55:ad:81:f7:
02:bc:31:b8:ad:04:a8:bb:5c:e0:b0:10:cf:97:21:46:b8:c3:
51:03:2e:8b:30:4c:ba:bf:e3:46:22:ce:26:60:a7:3f:5d:cb:
4b:43:4d:09:71:55:90:f6:a2:79:49:67:69:3f:5c:8b:e9:53:
12:e0:ee:ed:97:32:a8:55:4f:da:ff:9b:58:15:51:81:1a:d1:
76:cc:8a:9a:9a:4d:a1:59:47:cf:cc:88:42:f7:02:18:2d:74:
e6:47:9c:0c:ff:47:74:7d:54:e4:e8:37:11:ba:ce:53:75:6f:
b3:9b:64:f3:0b:07:29:a4:f7:ae:6e:06:e0:fe:a2:fe:55:92:
be:99:f9:97:f2:8e:ae:5d:4f:3e:cc:26:79:a5:d8:d4:60:c1:
87:77:b7:ad
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzHJsJD0V+iGawSItbPYWuwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ODczMTkxNzE3MGM0YjgxYmVlMzUxZDA0NTVjMzJjYmFk
NjNiMjYwHhcNMjQwMTAxMjIzMDU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2FiYTljNWVmZTJiNjU2Mzc1M2JkZmRiZDdlMzAxMzA1ZjdlMGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpNVYYhiz2V4RHvd4BQmAjBbhN3Q
tyXp8lEjwmt9Kj5UXyUwtkA0J9VH6jH0YyRCbsiFgBHT9dzz3rYtEq35+7vX6+pJ
l4Kk9AU7s+ZXz5Uw5V40h/7LLJ8dafJCVrsMa8FDFfF+COMyzjR04LW3DDk8L1Za
VgyahC8YRMSE+uE+/NrjG3d0RsNh7NbZVprUwTBLJ0xcpxIqG1bICmhhrSe3He6w
E4Kg9GUMUMVaArCnHUrcdaL+1RbowUDTyuDGsAfZUTcbzhSdDwRxuYLM/6oTh6on
zuYFzE+Fs15/E2q908KYS4/D7IueXbL3Dd0Fy7hy0fh4f0vMf2K1KmbI3wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIyrqcXv4rZWN1O9/b1+MBMF9+CiMB8GA1UdIwQY
MBaAFBaHMZFxcMS4G+41HQRVwyy61jsmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm9jeGtYRnd4TGdiN2pVZEJGWERMTHJXT3lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iODM3ZjMtMDg1Mi00ZDdmLTljMGUt
YjJkNDY2Njk3YWM0LzEvakt1cHhlX2l0bFkzVTczOXZYNHdFd1gzNEtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9iODM3ZjMtMDg1Mi00ZDdmLTljMGUtYjJkNDY2Njk3YWM0
LzEvRm9jeGtYRnd4TGdiN2pVZEJGWERMTHJXT3lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCW4RMMA0E
AgACMAcDBQMqCcGAMA0GCSqGSIb3DQEBCwUAA4IBAQBIGJ6KerIEdSLoErxqXGGN
oCLJRO+tAj02o+r8JO4dpN+r5F5kHkCb/768l8t2wsY2/kAlhZHbeFOJkb+hN8Rl
I1uhUpIKWJasGIWcxkqgNZ05PbBTxGJeIwJhWAoGolDr/GbDc8cHV1WtgfcCvDG4
rQSou1zgsBDPlyFGuMNRAy6LMEy6v+NGIs4mYKc/XctLQ00JcVWQ9qJ5SWdpP1yL
6VMS4O7tlzKoVU/a/5tYFVGBGtF2zIqamk2hWUfPzIhC9wIYLXTmR5wM/0d0fVTk
6DcRus5TdW+zm2TzCwcppPeubgbg/qL+VZK+mfmX8o6uXU8+zCZ5pdjUYMGHd7et
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:34:03 2024 by rpki-client on console-fra.rpki-client.org