Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/JqRczA1RNj-dAC6cpybBfRqNbug.roa
File: JqRczA1RNj-dAC6cpybBfRqNbug.roa (raw, json)
Hash identifier: YNhCu7B8dEA3jwCf7J0ByILq2k6K2T5LcGQKmzGVDog=
Subject key identifier: 26:A4:5C:CC:0D:51:36:3F:9D:00:2E:9C:A7:26:C1:7D:1A:8D:6E:E8
Certificate issuer: /CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Certificate serial: 018CC86F4D9F0EBF427C8A914B3E5E31645B
Authority key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/JqRczA1RNj-dAC6cpybBfRqNbug.roa
Signing time: Tue 02 Jan 2024 04:29:46 +0000
ROA not before: Tue 02 Jan 2024 04:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3330
IP address blocks: 195.43.149.0/24 maxlen: 24
2001:67c:2aa8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 17:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:4d:9f:0e:bf:42:7c:8a:91:4b:3e:5e:31:64:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Validity
Not Before: Jan 2 04:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26a45ccc0d51363f9d002e9ca726c17d1a8d6ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a3:a7:85:93:75:14:42:a9:79:e0:4d:f2:40:
8e:9f:2b:bf:9a:4f:ba:d9:d6:a1:99:3b:88:76:72:
e6:37:1b:20:92:1d:ac:35:1c:7b:f0:35:1c:8d:ae:
9e:40:46:01:e0:6a:c8:f2:74:7a:ac:13:94:27:02:
bc:9a:8d:29:63:bd:67:22:5a:a5:1b:cc:f2:b2:1a:
8e:2d:54:46:5c:e3:11:60:04:09:e4:bb:1f:09:c8:
e6:84:a2:02:b5:f6:89:85:be:f1:1a:ab:91:ee:aa:
06:cf:2f:18:c9:b0:c1:3c:ed:d1:f9:ed:92:10:d3:
2e:86:df:65:ca:2e:6a:fc:47:ff:e8:e1:b4:2a:66:
2d:7c:ab:9c:15:bf:8a:05:db:55:67:ca:4f:4d:bd:
e1:cd:5d:1b:52:3e:f7:46:31:85:2d:2e:07:55:47:
08:f6:aa:2a:15:31:cd:fe:6f:97:92:74:3d:f7:59:
2b:ac:34:9e:55:46:03:19:7b:f7:ab:be:97:51:82:
13:d5:b6:38:04:84:2c:a1:3e:fe:02:ec:a2:95:02:
fa:cd:c6:af:93:e3:1a:33:d5:ef:0c:bc:19:a5:24:
c8:31:7f:79:6f:1a:be:1f:a0:af:7b:89:36:78:d1:
84:e3:c1:d7:5f:c2:44:ed:80:27:62:5c:b4:23:04:
0f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A4:5C:CC:0D:51:36:3F:9D:00:2E:9C:A7:26:C1:7D:1A:8D:6E:E8
X509v3 Authority Key Identifier:
keyid:5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/JqRczA1RNj-dAC6cpybBfRqNbug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.149.0/24
IPv6:
2001:67c:2aa8::/48
Signature Algorithm: sha256WithRSAEncryption
7d:bb:d3:b7:13:97:f2:fa:a1:40:2b:fd:c9:09:40:5a:39:2f:
94:0a:a5:ba:48:99:5a:e3:43:df:a4:0b:aa:db:b2:21:e6:ae:
26:14:78:c6:97:6d:ac:6d:43:02:82:60:83:37:ee:b3:c8:6b:
df:6c:77:e1:7b:23:4b:65:6c:2d:4d:e4:75:de:9e:e8:4b:02:
6a:87:01:f5:39:5a:da:0f:4c:c1:43:ec:fc:ab:b8:f6:a6:e4:
91:9d:27:91:f0:ac:d1:bb:42:ca:c3:a2:3a:c7:e1:52:d6:27:
c3:fe:9e:96:e7:a8:57:6e:0e:4f:e8:96:1a:b0:a3:09:a7:e1:
b2:b3:06:67:42:5f:0e:38:26:47:9a:de:d9:6b:00:11:46:06:
19:dc:a9:d5:6e:b8:4e:71:5c:f2:75:15:11:c0:ad:72:1d:dd:
c0:6f:b2:16:31:1c:90:f8:d5:e8:87:c7:17:e8:89:84:85:01:
9b:f2:dc:cb:e3:ef:41:b7:f8:0e:1f:91:3a:b7:b1:d3:c1:fd:
26:08:56:05:f3:d0:a0:4c:ce:67:9b:2c:b6:89:a3:7c:d5:a0:
db:21:e7:eb:ef:08:f2:02:4c:28:1a:57:21:e1:89:7e:a7:e3:
d2:24:5e:aa:4f:fc:a2:a7:1b:0c:9d:9f:a8:59:0e:b6:08:9e:
70:af:bf:f7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzIb02fDr9CfIqRSz5eMWRbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViODYyZTIzMWZjYmQ1MzkxYmQ0NzZjNmFiOWFiMmI3MjEw
YTg3YTQwHhcNMjQwMTAyMDQyOTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmE0NWNjYzBkNTEzNjNmOWQwMDJlOWNhNzI2YzE3ZDFhOGQ2ZWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6OnhZN1FEKpeeBN8kCOnyu/mk+6
2dahmTuIdnLmNxsgkh2sNRx78DUcja6eQEYB4GrI8nR6rBOUJwK8mo0pY71nIlql
G8zyshqOLVRGXOMRYAQJ5LsfCcjmhKICtfaJhb7xGquR7qoGzy8YybDBPO3R+e2S
ENMuht9lyi5q/Ef/6OG0KmYtfKucFb+KBdtVZ8pPTb3hzV0bUj73RjGFLS4HVUcI
9qoqFTHN/m+XknQ991krrDSeVUYDGXv3q76XUYIT1bY4BIQsoT7+AuyilQL6zcav
k+MaM9XvDLwZpSTIMX95bxq+H6Cve4k2eNGE48HXX8JE7YAnYly0IwQP4wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCakXMwNUTY/nQAunKcmwX0ajW7oMB8GA1UdIwQY
MBaAFFuGLiMfy9U5G9R2xquasrchCoekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zNDA1ZTMtOGNjMC00NjBkLWI3ZTkt
OWJhNmRhNzBmYWRiLzEvSnFSY3pBMVJOai1kQUM2Y3B5YkJmUnFOYnVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8zNDA1ZTMtOGNjMC00NjBkLWI3ZTktOWJhNmRhNzBmYWRi
LzEvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwyuVMA8E
AgACMAkDBwAgAQZ8KqgwDQYJKoZIhvcNAQELBQADggEBAH2707cTl/L6oUAr/ckJ
QFo5L5QKpbpImVrjQ9+kC6rbsiHmriYUeMaXbaxtQwKCYIM37rPIa99sd+F7I0tl
bC1N5HXenuhLAmqHAfU5WtoPTMFD7PyruPam5JGdJ5HwrNG7QsrDojrH4VLWJ8P+
npbnqFduDk/olhqwowmn4bKzBmdCXw44Jkea3tlrABFGBhncqdVuuE5xXPJ1FRHA
rXId3cBvshYxHJD41eiHxxfoiYSFAZvy3Mvj70G3+A4fkTq3sdPB/SYIVgXz0KBM
zmebLLaJo3zVoNsh5+vvCPICTCgaVyHhiX6n49IkXqpP/KKnGwydn6hZDrYInnCv
v/c=
-----END CERTIFICATE-----
Generated at Wed Jun 26 21:44:34 2024 by rpki-client on console-fra.rpki-client.org