Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/jOwAQd3-P7f9hyNnCgexev-EOsY.roa
File: jOwAQd3-P7f9hyNnCgexev-EOsY.roa (raw, json)
Hash identifier: 8bQPUZ8jkFcsjhoiGzztCrXfsXYfaeENW+zad3lsEks=
Subject key identifier: 8C:EC:00:41:DD:FE:3F:B7:FD:87:23:67:0A:07:B1:7A:FF:84:3A:C6
Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Certificate serial: 018CC56E2402B89F1C9B3CE99B0D8691FD50
Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/jOwAQd3-P7f9hyNnCgexev-EOsY.roa
Signing time: Mon 01 Jan 2024 14:29:38 +0000
ROA not before: Mon 01 Jan 2024 14:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199330
IP address blocks: 194.169.218.0/24 maxlen: 24
2001:67c:13cc::/48 maxlen: 48
2a04:2b00:a005::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:24:02:b8:9f:1c:9b:3c:e9:9b:0d:86:91:fd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Validity
Not Before: Jan 1 14:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cec0041ddfe3fb7fd8723670a07b17aff843ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:af:bd:86:48:e8:45:ee:c2:50:7e:0e:46:88:
b9:6e:32:8f:f2:81:0e:7c:2e:4a:6c:23:d7:ea:58:
46:b2:db:2c:10:2d:c3:1a:8d:64:6e:75:36:5a:99:
ec:43:82:b1:e5:2a:86:da:7a:3c:52:fa:4f:bf:44:
dc:c4:e7:4b:9c:ce:45:fa:7e:32:ad:7e:74:c0:d4:
96:b8:4d:d8:00:57:02:d6:e0:26:00:86:dd:a6:28:
9b:d7:b7:65:cf:63:c2:41:6c:ed:b6:79:90:0f:23:
b2:ca:d2:0c:c8:79:af:e9:b9:97:6b:02:88:42:d4:
4a:a6:4c:4a:84:a2:e1:d9:8f:63:b3:6c:99:30:f3:
c6:8f:e6:7e:79:1d:6f:a8:4c:e1:4f:b4:c8:2f:51:
b8:3e:a2:ad:04:43:c0:d1:f2:b8:bb:48:06:c7:d9:
fb:9b:94:d1:bf:1e:62:c7:99:60:9c:a2:31:36:ce:
bb:cb:34:5a:d9:b0:a7:dd:60:83:c5:f8:5a:fd:d4:
d9:0a:1c:7b:6d:00:35:5b:94:66:10:8e:fc:f5:47:
83:c5:4f:0f:f4:f8:5c:13:d3:50:96:ed:a4:7f:0e:
fa:c7:54:0b:c2:d9:63:6b:2d:ca:2b:40:65:25:70:
4c:a3:69:14:d8:d6:6e:cb:08:f9:46:85:22:93:77:
f7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EC:00:41:DD:FE:3F:B7:FD:87:23:67:0A:07:B1:7A:FF:84:3A:C6
X509v3 Authority Key Identifier:
keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/jOwAQd3-P7f9hyNnCgexev-EOsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.218.0/24
IPv6:
2001:67c:13cc::/48
2a04:2b00:a005::/48
Signature Algorithm: sha256WithRSAEncryption
69:72:4a:75:b9:33:b2:0c:bd:73:1c:f0:cc:48:a0:94:57:25:
cb:7b:ba:2e:96:7a:fc:d4:8c:45:40:54:bc:ea:6d:0b:87:fd:
0c:57:9e:34:d5:0d:14:a9:c2:71:c6:63:03:ba:b1:66:d4:d8:
ab:e3:55:26:4d:b4:4b:66:5f:73:82:0e:32:27:59:b5:46:c8:
46:d5:d7:31:fd:6e:35:1f:10:a0:93:ba:66:9a:6a:40:0f:f6:
cd:c6:63:d4:c4:9a:12:02:ce:bf:74:5c:c3:04:ec:70:af:52:
2e:b1:3b:d1:87:51:e8:6b:50:c9:0e:e0:88:0c:a2:41:0f:71:
7f:98:e7:28:71:6e:89:a2:32:22:cc:47:ab:b9:e5:bb:eb:26:
e6:2b:1c:a0:60:b2:b5:ae:54:24:09:66:80:39:da:fe:98:7f:
b5:c1:d8:45:94:12:5c:dc:30:86:12:2d:97:97:43:63:a9:3d:
90:94:66:dc:18:99:c4:3a:22:fb:a4:0b:3b:9f:2b:46:7b:78:
76:00:e8:1b:b8:10:05:a9:1b:2a:de:23:db:da:46:09:77:b9:
95:c2:29:e2:34:91:b9:9c:34:ea:9d:45:a8:c8:e3:29:21:b3:
52:c9:5e:75:e6:ef:2e:48:61:f2:41:f5:9c:37:a3:ea:7f:74:
e9:8e:db:b5
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYzFbiQCuJ8cmzzpmw2Gkf1QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3
ZGY4ZDMwHhcNMjQwMTAxMTQyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2VjMDA0MWRkZmUzZmI3ZmQ4NzIzNjcwYTA3YjE3YWZmODQzYWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK+9hkjoRe7CUH4ORoi5bjKP8oEO
fC5KbCPX6lhGstssEC3DGo1kbnU2WpnsQ4Kx5SqG2no8UvpPv0TcxOdLnM5F+n4y
rX50wNSWuE3YAFcC1uAmAIbdpiib17dlz2PCQWzttnmQDyOyytIMyHmv6bmXawKI
QtRKpkxKhKLh2Y9js2yZMPPGj+Z+eR1vqEzhT7TIL1G4PqKtBEPA0fK4u0gGx9n7
m5TRvx5ix5lgnKIxNs67yzRa2bCn3WCDxfha/dTZChx7bQA1W5RmEI789UeDxU8P
9PhcE9NQlu2kfw76x1QLwtljay3KK0BlJXBMo2kU2NZuywj5RoUik3f3oQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFIzsAEHd/j+3/YcjZwoHsXr/hDrGMB8GA1UdIwQY
MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt
MDUzOGU5NWYzZjEyLzEvak93QVFkMy1QN2Y5aHlObkNnZXhldi1FT3NZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy
LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAwqnaMBgE
AgACMBIDBwAgAQZ8E8wDBwAqBCsAoAUwDQYJKoZIhvcNAQELBQADggEBAGlySnW5
M7IMvXMc8MxIoJRXJct7ui6WevzUjEVAVLzqbQuH/QxXnjTVDRSpwnHGYwO6sWbU
2KvjVSZNtEtmX3OCDjInWbVGyEbV1zH9bjUfEKCTumaaakAP9s3GY9TEmhICzr90
XMME7HCvUi6xO9GHUehrUMkO4IgMokEPcX+Y5yhxbomiMiLMR6u55bvrJuYrHKBg
srWuVCQJZoA52v6Yf7XB2EWUElzcMIYSLZeXQ2OpPZCUZtwYmcQ6IvukCzufK0Z7
eHYA6Bu4EAWpGyreI9vaRgl3uZXCKeI0kbmcNOqdRajI4ykhs1LJXnXm7y5IYfJB
9Zw3o+p/dOmO27U=
-----END CERTIFICATE-----
Generated at Fri Jun 7 13:53:39 2024 by rpki-client on console-fra.rpki-client.org