Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/4rJs4liSligk4htLUPChvwGnHfg.roa
File: 4rJs4liSligk4htLUPChvwGnHfg.roa (raw, json)
Hash identifier: 7OtAUFDZorntUBWkWww6j0LJFLBFLaPAZNBrcOy7XnI=
Subject key identifier: E2:B2:6C:E2:58:92:96:28:24:E2:1B:4B:50:F0:A1:BF:01:A7:1D:F8
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 018CC94E6841A9ECE4695B2DB4F511DF4952
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/4rJs4liSligk4htLUPChvwGnHfg.roa
Signing time: Tue 02 Jan 2024 08:33:28 +0000
ROA not before: Tue 02 Jan 2024 08:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4755
IP address blocks: 89.39.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:68:41:a9:ec:e4:69:5b:2d:b4:f5:11:df:49:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 2 08:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2b26ce25892962824e21b4b50f0a1bf01a71df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:24:07:5b:63:cc:07:8b:fe:16:3f:98:bd:49:
ff:ed:e0:15:9b:6d:d9:58:7d:f4:98:c3:e0:c7:f5:
f5:91:d2:c2:40:3e:b9:23:ec:9d:90:34:ba:77:cb:
b1:66:d1:53:16:78:1d:9a:1f:cc:6b:5b:af:6a:42:
a1:7d:0a:24:40:bc:a2:ab:f6:bd:98:5c:a5:31:77:
29:a8:bb:41:2f:e5:ab:e0:45:3e:b7:46:b3:87:47:
05:68:df:a6:94:69:17:c2:54:27:d2:c0:35:24:cb:
d5:5d:5e:8e:a4:8a:bd:09:3b:14:0f:46:a6:13:e2:
ed:42:ed:1d:13:82:60:fc:5e:70:d5:cd:7d:4c:be:
c4:e8:9b:32:f0:1e:66:b7:15:5b:12:00:dd:6c:0e:
1b:7d:89:56:97:3d:d6:e3:56:91:2d:4c:99:19:84:
1e:43:ec:93:36:ac:63:0b:33:98:ed:2b:8f:67:02:
cb:11:12:5f:70:a0:67:0f:f7:26:a1:67:74:ac:5f:
ae:d2:c4:bf:b3:e5:22:3a:78:ab:07:8d:1a:ee:bd:
2e:2d:28:fc:79:18:b3:57:72:2f:d0:a2:54:44:5b:
38:28:76:f8:15:c1:03:40:e9:79:9d:3f:af:1a:f3:
ca:2f:bc:11:43:17:40:e7:b5:ac:2b:c7:0b:5b:bb:
af:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B2:6C:E2:58:92:96:28:24:E2:1B:4B:50:F0:A1:BF:01:A7:1D:F8
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/4rJs4liSligk4htLUPChvwGnHfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.6.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:86:45:f9:b6:c4:ee:18:7f:96:72:b5:b5:22:51:42:dc:a1:
d2:0f:16:0e:43:fb:e9:8b:57:3b:48:e4:06:ef:4c:68:ea:09:
63:2e:28:03:90:1b:61:6f:9f:86:83:e5:b4:09:c5:d1:f2:14:
33:04:95:c0:39:ab:31:cb:56:28:43:cb:ac:ea:dd:80:62:8a:
40:76:41:5b:97:64:fe:07:42:e0:3a:31:1f:c2:1d:28:11:55:
98:d5:fc:d2:ac:b7:61:d5:e2:2e:5d:c4:2d:30:6a:e8:7c:4b:
10:59:42:8f:f5:72:e3:8a:9f:e8:e4:bd:f1:97:00:a7:2f:d9:
66:55:8a:fe:7c:ec:8b:91:1d:e1:73:24:7b:cc:6c:3e:d8:3b:
7d:b8:94:cc:ab:5e:38:2e:dc:d1:ad:72:af:bf:2f:cc:c8:2d:
de:c2:41:1f:29:23:81:b1:a7:ac:5d:29:55:5b:82:d9:35:4d:
e1:0d:cc:1d:8d:6a:ed:90:d0:78:0e:84:15:47:ef:ba:de:68:
c7:10:d9:2d:ac:cb:3f:ad:cc:be:af:58:fa:86:59:6b:ef:d7:
04:64:aa:f9:28:8b:32:9f:b3:c1:69:2c:5e:cf:45:08:d1:19:
a6:1a:cb:4d:6d:f6:8d:65:d7:3c:2f:13:b1:43:1e:c5:ac:57:
00:86:ef:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTmhBqezkaVsttPUR30lSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3
YjQ1ODkwHhcNMjQwMTAyMDgzMzI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmIyNmNlMjU4OTI5NjI4MjRlMjFiNGI1MGYwYTFiZjAxYTcxZGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyQHW2PMB4v+Fj+YvUn/7eAVm23Z
WH30mMPgx/X1kdLCQD65I+ydkDS6d8uxZtFTFngdmh/Ma1uvakKhfQokQLyiq/a9
mFylMXcpqLtBL+Wr4EU+t0azh0cFaN+mlGkXwlQn0sA1JMvVXV6OpIq9CTsUD0am
E+LtQu0dE4Jg/F5w1c19TL7E6Jsy8B5mtxVbEgDdbA4bfYlWlz3W41aRLUyZGYQe
Q+yTNqxjCzOY7SuPZwLLERJfcKBnD/cmoWd0rF+u0sS/s+UiOnirB40a7r0uLSj8
eRizV3Iv0KJURFs4KHb4FcEDQOl5nT+vGvPKL7wRQxdA57WsK8cLW7uv3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOKybOJYkpYoJOIbS1Dwob8Bpx34MB8GA1UdIwQY
MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt
MmVjZTA0ZTE4NWMyLzEvNHJKczRsaVNsaWdrNGh0TFVQQ2h2d0duSGZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy
LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWScGMA0G
CSqGSIb3DQEBCwUAA4IBAQA9hkX5tsTuGH+WcrW1IlFC3KHSDxYOQ/vpi1c7SOQG
70xo6gljLigDkBthb5+Gg+W0CcXR8hQzBJXAOasxy1YoQ8us6t2AYopAdkFbl2T+
B0LgOjEfwh0oEVWY1fzSrLdh1eIuXcQtMGrofEsQWUKP9XLjip/o5L3xlwCnL9lm
VYr+fOyLkR3hcyR7zGw+2Dt9uJTMq144LtzRrXKvvy/MyC3ewkEfKSOBsaesXSlV
W4LZNU3hDcwdjWrtkNB4DoQVR++63mjHENktrMs/rcy+r1j6hllr79cEZKr5KIsy
n7PBaSxez0UI0RmmGstNbfaNZdc8LxOxQx7FrFcAhu9C
-----END CERTIFICATE-----
Generated at Sun May 19 03:39:20 2024 by rpki-client on console-ams.rpki-client.org