Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/JIJFa_Jxmp6PYMq7HDauxbqhGYc.roa
File: JIJFa_Jxmp6PYMq7HDauxbqhGYc.roa (raw, json)
Hash identifier: OaBHR3SUrA4/0zhvl446eEffSXuFEg9fTcuM1m//qXg=
Subject key identifier: 24:82:45:6B:F2:71:9A:9E:8F:60:CA:BB:1C:36:AE:C5:BA:A1:19:87
Certificate issuer: /CN=7b5754e4d208c6435f1abec937cde20009204dc0
Certificate serial: 018CC4251B87D1B08C7AD30BC9B839F7D0CF
Authority key identifier: 7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/JIJFa_Jxmp6PYMq7HDauxbqhGYc.roa
Signing time: Mon 01 Jan 2024 08:30:15 +0000
ROA not before: Mon 01 Jan 2024 08:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199486
IP address blocks: 185.214.158.0/24 maxlen: 24
185.214.157.0/24 maxlen: 24
185.214.156.0/24 maxlen: 24
31.47.64.0/21 maxlen: 21
31.47.69.0/24 maxlen: 24
2a09:2e80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:1b:87:d1:b0:8c:7a:d3:0b:c9:b8:39:f7:d0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5754e4d208c6435f1abec937cde20009204dc0
Validity
Not Before: Jan 1 08:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2482456bf2719a9e8f60cabb1c36aec5baa11987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:51:30:d8:23:08:e3:9e:c0:04:0c:6b:5c:20:
71:d7:0b:e9:a5:8b:c6:77:c4:4e:fa:68:36:ad:c8:
2f:48:1f:29:3c:bb:c1:b2:78:b6:f6:53:54:96:ff:
5b:3b:30:83:53:5a:72:9d:34:ba:e7:59:f1:c2:1e:
0a:3e:ba:75:a8:54:13:53:21:93:aa:a8:2a:29:3e:
cd:c9:6b:a2:a7:9f:af:b6:71:b2:df:9c:ac:a4:65:
78:74:a1:5f:0b:b2:fd:70:ee:d3:15:06:c6:4e:28:
fc:64:12:42:6a:fe:4e:8d:76:2d:1f:50:25:1b:e2:
51:1a:53:f9:ca:34:b7:60:06:6f:28:ca:77:a5:11:
fe:f4:f4:20:21:6c:9a:61:59:37:c1:05:47:8d:7e:
b8:0e:b2:4f:f7:3b:b2:9a:93:25:b7:db:7e:f9:7f:
c0:18:1f:3b:ec:17:b5:af:23:1f:d1:3d:6d:0e:49:
d6:6d:96:34:58:d5:e9:e3:e8:bf:58:64:5e:0a:44:
1d:f7:b7:dc:37:81:21:2e:47:40:e0:88:fd:ff:cf:
b1:b8:de:c6:c4:e7:80:b3:9f:86:55:87:c2:43:a2:
a6:3b:85:62:48:ba:fa:97:35:4e:ed:15:c2:21:23:
e0:02:82:0a:cf:2b:3d:ab:8c:a0:c7:e2:01:85:ff:
62:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:82:45:6B:F2:71:9A:9E:8F:60:CA:BB:1C:36:AE:C5:BA:A1:19:87
X509v3 Authority Key Identifier:
keyid:7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/JIJFa_Jxmp6PYMq7HDauxbqhGYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.47.64.0/21
185.214.156.0-185.214.158.255
IPv6:
2a09:2e80::/29
Signature Algorithm: sha256WithRSAEncryption
55:c6:dd:64:9b:ac:68:1f:1b:8a:f6:20:fb:9e:d0:3c:43:30:
fc:f3:bc:17:79:79:c8:d0:82:82:61:2b:b3:d8:f4:75:f4:4b:
b9:99:bf:55:81:ca:a0:00:b6:8a:9f:3e:bb:e5:0e:73:89:c3:
f8:fb:3b:74:8a:12:06:82:12:4b:2d:9d:53:6c:6f:2d:a8:9e:
7e:33:46:c4:f7:26:3e:46:27:3f:a5:ff:19:c8:2c:7e:78:22:
d5:3b:d2:78:d3:43:b3:a8:12:a4:f4:b5:e2:0f:a3:b1:c8:d6:
4c:8b:33:0c:e3:1e:14:9c:28:e1:97:94:b6:32:67:66:99:7d:
2c:6b:29:63:80:a0:af:c1:3e:74:ca:d2:a7:11:73:7e:07:d2:
57:bf:7a:a5:fb:0f:a1:05:3c:42:71:38:91:7d:ed:89:60:62:
65:97:8d:22:af:b0:73:44:14:d6:6c:4b:64:e3:8b:94:6a:8c:
40:d6:ee:72:2d:34:ea:c7:fd:d5:f9:1e:95:1e:57:05:5a:df:
fa:91:23:28:6f:8e:83:95:79:73:5e:ab:7c:8b:3c:be:88:02:
00:33:51:57:32:7f:28:b1:33:9c:c2:33:4a:e0:24:71:73:9c:
e2:89:3c:d1:8b:92:61:94:9c:b0:3f:4e:52:9b:9f:e6:5c:da:
7c:ff:54:81
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYzEJRuH0bCMetMLybg599DPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNTc1NGU0ZDIwOGM2NDM1ZjFhYmVjOTM3Y2RlMjAwMDky
MDRkYzAwHhcNMjQwMTAxMDgzMDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDgyNDU2YmYyNzE5YTllOGY2MGNhYmIxYzM2YWVjNWJhYTExOTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31Ew2CMI457ABAxrXCBx1wvppYvG
d8RO+mg2rcgvSB8pPLvBsni29lNUlv9bOzCDU1pynTS651nxwh4KPrp1qFQTUyGT
qqgqKT7NyWuip5+vtnGy35yspGV4dKFfC7L9cO7TFQbGTij8ZBJCav5OjXYtH1Al
G+JRGlP5yjS3YAZvKMp3pRH+9PQgIWyaYVk3wQVHjX64DrJP9zuympMlt9t++X/A
GB877Be1ryMf0T1tDknWbZY0WNXp4+i/WGReCkQd97fcN4EhLkdA4Ij9/8+xuN7G
xOeAs5+GVYfCQ6KmO4ViSLr6lzVO7RXCISPgAoIKzys9q4ygx+IBhf9ilQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFCSCRWvycZqej2DKuxw2rsW6oRmHMB8GA1UdIwQY
MBaAFHtXVOTSCMZDXxq+yTfN4gAJIE3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTFkVTVOSUl4a05mR3I3Sk44M2lBQWtnVGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xZGQxYWMtNGE4Ny00YmYxLThkNTIt
ZmQ0OTNjNmE1Yzc2LzEvSklKRmFfSnhtcDZQWU1xN0hEYXV4YnFoR1ljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8xZGQxYWMtNGE4Ny00YmYxLThkNTItZmQ0OTNjNmE1Yzc2
LzEvZTFkVTVOSUl4a05mR3I3Sk44M2lBQWtnVGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQDHy9AMAwD
BAK51pwDBAC51p4wDQQCAAIwBwMFAyoJLoAwDQYJKoZIhvcNAQELBQADggEBAFXG
3WSbrGgfG4r2IPue0DxDMPzzvBd5ecjQgoJhK7PY9HX0S7mZv1WByqAAtoqfPrvl
DnOJw/j7O3SKEgaCEkstnVNsby2onn4zRsT3Jj5GJz+l/xnILH54ItU70njTQ7Oo
EqT0teIPo7HI1kyLMwzjHhScKOGXlLYyZ2aZfSxrKWOAoK/BPnTK0qcRc34H0le/
eqX7D6EFPEJxOJF97YlgYmWXjSKvsHNEFNZsS2Tji5RqjEDW7nItNOrH/dX5HpUe
VwVa3/qRIyhvjoOVeXNeq3yLPL6IAgAzUVcyfyixM5zCM0rgJHFznOKJPNGLkmGU
nLA/TlKbn+Zc2nz/VIE=
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:43 2024 by rpki-client on console-fra.rpki-client.org