Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/Jn6X44e1MYO7InCPW4qRgIzxSNQ.roa
File: Jn6X44e1MYO7InCPW4qRgIzxSNQ.roa (raw, json)
Hash identifier: IrNm2tRLR0tWZGkvAH92V7/sIZYTN1kVfUrE30WTsh4=
Subject key identifier: 26:7E:97:E3:87:B5:31:83:BB:22:70:8F:5B:8A:91:80:8C:F1:48:D4
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018CC86F8F21A6C32E826C53B3EAE74031EA
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/Jn6X44e1MYO7InCPW4qRgIzxSNQ.roa
Signing time: Tue 02 Jan 2024 04:30:03 +0000
ROA not before: Tue 02 Jan 2024 04:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35407
IP address blocks: 80.233.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:8f:21:a6:c3:2e:82:6c:53:b3:ea:e7:40:31:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 2 04:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=267e97e387b53183bb22708f5b8a91808cf148d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:1a:4a:b4:ed:25:7b:b3:46:48:91:91:f4:
d7:2a:a3:e7:a4:d7:5c:a3:3b:8a:a5:fc:84:3e:9b:
de:fb:85:79:e8:a9:95:15:ce:ed:22:46:a8:ac:fd:
49:c4:97:c8:6a:5c:78:c6:3f:9c:4a:5e:fe:19:77:
bc:5f:82:69:3a:9f:d9:fa:22:ca:75:37:d5:5c:ba:
30:01:f6:e3:f2:06:d8:19:dc:e9:2b:60:36:5f:7d:
27:ed:01:6e:ed:45:89:33:55:1a:22:44:0e:ae:e0:
82:71:ee:a2:67:02:e0:7a:55:c4:12:e7:49:3b:4f:
d6:36:69:ab:04:f1:a2:bd:47:a3:d8:2b:ce:43:c1:
f6:a3:41:11:6b:d7:31:d8:0a:7f:54:bb:f6:72:30:
88:4f:7f:95:cd:50:31:89:b5:1b:ff:f6:1e:2f:c5:
cb:91:65:70:11:b8:f7:d4:4b:b2:fd:58:be:97:24:
93:db:62:98:8e:99:2f:9b:9f:e9:69:ca:ba:a9:90:
86:f6:d5:95:82:34:58:75:df:6f:71:60:81:69:b5:
51:08:87:48:19:1e:c7:f1:05:85:38:b3:10:d8:50:
02:d0:cb:c6:90:06:24:da:63:fe:4d:92:e1:5e:e2:
76:ae:c2:d1:46:4c:28:a7:05:5b:6b:e7:b6:1a:93:
06:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7E:97:E3:87:B5:31:83:BB:22:70:8F:5B:8A:91:80:8C:F1:48:D4
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/Jn6X44e1MYO7InCPW4qRgIzxSNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.251.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:05:01:1c:0e:40:fb:77:15:f0:ef:13:e5:ff:b5:ee:eb:37:
1e:13:eb:18:fe:56:5b:12:87:ee:b1:f4:de:dc:8a:22:c4:27:
0d:fa:c2:00:b1:97:2a:53:e3:f2:91:01:b9:f2:72:ba:60:45:
1e:10:eb:d3:7d:d8:78:11:85:db:b2:40:c0:c3:50:b7:9e:63:
a8:e5:23:af:da:4e:34:1f:01:a2:6a:62:23:04:bb:59:a9:41:
e4:87:22:58:ab:77:fa:37:b5:e7:10:3d:31:d7:cf:08:6e:06:
be:25:32:27:a2:a5:86:ed:1d:1d:41:d3:93:34:01:3e:98:b5:
8e:7c:d2:d7:93:f8:d1:ea:73:af:67:3d:57:cf:c4:1e:f9:a9:
5e:c6:71:8d:21:2b:ac:ba:3e:a4:c5:1c:07:9e:ca:cd:66:25:
e7:63:d5:6f:96:de:49:d1:db:71:7d:81:f5:08:2d:53:49:60:
ca:79:c5:45:cc:ca:7e:de:f7:b5:55:7e:a5:ce:ab:7f:f2:bf:
49:3a:e9:35:a3:7b:a2:09:ff:95:92:d5:60:14:50:be:bc:19:
3f:78:a4:e4:4f:c0:dc:eb:df:21:d0:e1:95:ad:45:b2:9c:1a:
06:b8:fe:6f:a9:85:55:4b:42:2e:a0:d6:30:ca:52:66:71:68:
86:ec:76:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb48hpsMugmxTs+rnQDHqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl
NjE0OTEwHhcNMjQwMTAyMDQzMDAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjdlOTdlMzg3YjUzMTgzYmIyMjcwOGY1YjhhOTE4MDhjZjE0OGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0caSrTtJXuzRkiRkfTXKqPnpNdc
ozuKpfyEPpve+4V56KmVFc7tIkaorP1JxJfIalx4xj+cSl7+GXe8X4JpOp/Z+iLK
dTfVXLowAfbj8gbYGdzpK2A2X30n7QFu7UWJM1UaIkQOruCCce6iZwLgelXEEudJ
O0/WNmmrBPGivUej2CvOQ8H2o0ERa9cx2Ap/VLv2cjCIT3+VzVAxibUb//YeL8XL
kWVwEbj31Euy/Vi+lyST22KYjpkvm5/pacq6qZCG9tWVgjRYdd9vcWCBabVRCIdI
GR7H8QWFOLMQ2FAC0MvGkAYk2mP+TZLhXuJ2rsLRRkwopwVba+e2GpMGWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCZ+l+OHtTGDuyJwj1uKkYCM8UjUMB8GA1UdIwQY
MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt
ZDRlZTFkMzg5ZTBkLzEvSm42WDQ0ZTFNWU83SW5DUFc0cVJnSXp4U05RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk
LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUOn7MA0G
CSqGSIb3DQEBCwUAA4IBAQDDBQEcDkD7dxXw7xPl/7Xu6zceE+sY/lZbEofusfTe
3IoixCcN+sIAsZcqU+PykQG58nK6YEUeEOvTfdh4EYXbskDAw1C3nmOo5SOv2k40
HwGiamIjBLtZqUHkhyJYq3f6N7XnED0x188Ibga+JTInoqWG7R0dQdOTNAE+mLWO
fNLXk/jR6nOvZz1Xz8Qe+alexnGNISusuj6kxRwHnsrNZiXnY9Vvlt5J0dtxfYH1
CC1TSWDKecVFzMp+3ve1VX6lzqt/8r9JOuk1o3uiCf+VktVgFFC+vBk/eKTkT8Dc
698h0OGVrUWynBoGuP5vqYVVS0IuoNYwylJmcWiG7HaY
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:24:49 2024 by rpki-client on console-ams.rpki-client.org