Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JTPhuS0nz3g9OWt_a8iep3Asl2g.roa
File: JTPhuS0nz3g9OWt_a8iep3Asl2g.roa (raw, json)
Hash identifier: te8RCYAutdT35JQ+VwgB7AQARsyBcf1tK5pW/F/xLng=
Subject key identifier: 25:33:E1:B9:2D:27:CF:78:3D:39:6B:7F:6B:C8:9E:A7:70:2C:97:68
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018FA57B77521A661DA968F3B92BAF34A7E0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JTPhuS0nz3g9OWt_a8iep3Asl2g.roa
Signing time: Thu 23 May 2024 12:44:43 +0000
ROA not before: Thu 23 May 2024 12:44:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214855
IP address blocks: 82.152.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a5:7b:77:52:1a:66:1d:a9:68:f3:b9:2b:af:34:a7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 23 12:44:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2533e1b92d27cf783d396b7f6bc89ea7702c9768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:34:a9:08:3c:d3:fb:40:19:7d:dc:88:70:fc:
54:e9:45:8f:44:4d:4b:fb:90:a8:90:48:86:0f:eb:
cb:77:bd:57:34:71:c0:fa:e7:94:17:a4:47:6e:d1:
a2:10:5d:60:fe:39:5e:af:45:33:4c:42:45:b5:f2:
b9:fb:59:41:7d:f8:04:91:0f:b6:c7:bc:67:c2:d2:
c7:2a:f8:b6:1e:9a:e0:b1:fa:49:1e:34:b9:d7:ab:
7f:8e:80:0c:ab:8f:a0:78:34:a3:af:fc:c9:54:25:
7b:44:e2:14:0f:0d:08:f9:cb:f2:df:fc:32:d2:12:
8b:a7:03:99:a5:b0:8c:73:6d:91:d7:01:cb:c1:5f:
79:24:7e:e5:81:42:c9:11:c1:f4:22:df:e9:fe:54:
af:5e:1f:fe:e2:cd:45:3e:82:b6:f9:cc:6e:47:76:
c6:68:94:7b:e5:3d:7e:32:cc:c7:63:5a:11:33:26:
7a:61:40:a2:3b:74:0c:09:05:4f:28:17:be:87:46:
89:92:8b:8d:2c:3f:03:a0:30:d2:1a:75:2d:9b:d3:
9b:52:b5:5e:4d:fe:0b:df:d4:77:94:88:71:09:c8:
a6:a1:ad:5b:0f:45:32:de:f1:cf:03:a2:24:2f:ed:
15:37:09:7d:ad:e7:e1:c6:1c:0f:82:45:93:f8:14:
56:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:33:E1:B9:2D:27:CF:78:3D:39:6B:7F:6B:C8:9E:A7:70:2C:97:68
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JTPhuS0nz3g9OWt_a8iep3Asl2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.2.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:91:d1:44:ab:2d:79:97:8c:0d:4d:79:00:03:85:c5:62:97:
a2:6d:8a:b4:00:51:b4:60:de:07:b6:e7:95:ff:12:e3:92:57:
40:fc:23:75:72:ee:80:44:9d:a6:19:ee:a0:d4:6c:be:c2:0f:
15:65:09:d4:6d:9a:f9:8f:0d:53:07:34:8a:14:9e:12:83:a0:
26:ab:2b:bb:3f:de:7a:e6:c1:91:5d:e0:bc:c9:24:4c:53:d4:
76:b9:7b:78:fa:e7:7c:77:dd:57:3f:d6:62:58:60:5e:b5:17:
bc:91:ac:62:48:4e:79:bf:ba:7b:d7:26:f4:07:10:9a:6a:63:
a5:6f:cb:97:02:05:ae:29:1f:2a:4a:54:d7:bb:f1:68:43:d1:
51:4e:3d:81:a5:97:ef:01:50:6c:16:a9:b9:b4:94:9a:70:7d:
5b:39:28:38:01:f3:bd:52:7f:fc:46:c8:a0:ae:04:62:b9:bc:
59:a6:2c:d9:f5:ec:1d:2b:f3:e5:cc:1d:bf:6e:32:e7:e9:66:
b6:d7:d6:80:59:1d:7b:48:5a:44:12:41:63:0d:9c:d2:4f:25:
c6:c9:e7:ff:da:df:84:81:32:e6:7d:e9:71:51:3a:7c:13:36:
b6:d0:55:0d:d7:7c:f7:c7:e9:7f:19:06:d5:07:ea:87:49:34:
b3:b2:21:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY+le3dSGmYdqWjzuSuvNKfgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNTIzMTI0NDQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTMzZTFiOTJkMjdjZjc4M2QzOTZiN2Y2YmM4OWVhNzcwMmM5NzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzSpCDzT+0AZfdyIcPxU6UWPRE1L
+5CokEiGD+vLd71XNHHA+ueUF6RHbtGiEF1g/jler0UzTEJFtfK5+1lBffgEkQ+2
x7xnwtLHKvi2HprgsfpJHjS516t/joAMq4+geDSjr/zJVCV7ROIUDw0I+cvy3/wy
0hKLpwOZpbCMc22R1wHLwV95JH7lgULJEcH0It/p/lSvXh/+4s1FPoK2+cxuR3bG
aJR75T1+MszHY1oRMyZ6YUCiO3QMCQVPKBe+h0aJkouNLD8DoDDSGnUtm9ObUrVe
Tf4L39R3lIhxCcimoa1bD0Uy3vHPA6IkL+0VNwl9refhxhwPgkWT+BRWCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCUz4bktJ894PTlrf2vInqdwLJdoMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvSlRQaHVTMG56M2c5T1d0X2E4aWVwM0FzbDJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpgCMA0G
CSqGSIb3DQEBCwUAA4IBAQB7kdFEqy15l4wNTXkAA4XFYpeibYq0AFG0YN4HtueV
/xLjkldA/CN1cu6ARJ2mGe6g1Gy+wg8VZQnUbZr5jw1TBzSKFJ4Sg6Amqyu7P956
5sGRXeC8ySRMU9R2uXt4+ud8d91XP9ZiWGBetRe8kaxiSE55v7p71yb0BxCaamOl
b8uXAgWuKR8qSlTXu/FoQ9FRTj2BpZfvAVBsFqm5tJSacH1bOSg4AfO9Un/8Rsig
rgRiubxZpizZ9ewdK/PlzB2/bjLn6Wa219aAWR17SFpEEkFjDZzSTyXGyef/2t+E
gTLmfelxUTp8Eza20FUN13z3x+l/GQbVB+qHSTSzsiHp
-----END CERTIFICATE-----
Generated at Wed Jun 26 09:03:45 2024 by rpki-client on console-ams.rpki-client.org