Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/J1jUM_3M331D5Dlr1eKcrEp7EhE.roa
File: J1jUM_3M331D5Dlr1eKcrEp7EhE.roa (raw, json)
Hash identifier: 6gzo3Tarl5bVb2tnNUE9b7RC/rgo71Cc7TGPCsy8VzY=
Subject key identifier: 27:58:D4:33:FD:CC:DF:7D:43:E4:39:6B:D5:E2:9C:AC:4A:7B:12:11
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC5012D03A90C4B0A6262878B0594DD97
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/J1jUM_3M331D5Dlr1eKcrEp7EhE.roa
Signing time: Mon 01 Jan 2024 12:30:37 +0000
ROA not before: Mon 01 Jan 2024 12:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211440
IP address blocks: 223.27.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:2d:03:a9:0c:4b:0a:62:62:87:8b:05:94:dd:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2758d433fdccdf7d43e4396bd5e29cac4a7b1211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:04:02:df:90:c2:03:f3:76:08:51:80:8c:e0:
69:e5:a6:74:b4:c3:c5:41:f0:75:e7:b1:c9:61:d6:
be:9d:ec:29:eb:c2:b3:57:4a:3e:a8:cf:71:bd:e5:
04:90:16:6f:9d:2e:4b:d4:dd:da:99:d3:f3:bc:19:
fa:76:8f:25:bf:1a:50:5d:fe:82:8f:43:3f:2e:a4:
3e:71:65:7d:fc:8f:d9:b6:fb:37:61:d9:6d:78:de:
f3:fe:59:cc:4f:77:60:1c:f7:b5:c5:0a:6a:27:86:
9e:7a:a2:26:a3:75:e3:5d:59:03:78:90:07:79:29:
1b:9e:b8:7f:7c:00:09:07:c8:89:8d:ee:1f:e0:f8:
ec:43:6a:a1:ae:87:b0:85:e9:17:4c:2d:35:89:75:
0b:ba:02:38:3c:e3:04:7a:79:7a:44:ba:92:7a:87:
59:9c:e9:d8:a4:34:da:d9:2c:8a:ae:b6:41:b9:16:
2f:6f:4b:7d:06:f5:2d:18:9f:09:a3:58:c3:4a:45:
fc:c4:28:5a:20:f7:59:9e:dd:61:5c:24:0f:a8:b6:
28:a7:be:aa:c5:00:12:2f:23:61:1a:9b:b7:e6:2c:
96:7f:6d:ef:dd:4c:08:5c:42:56:9d:c4:d7:a5:61:
8d:dc:ff:0f:88:b7:21:76:95:cc:b5:6c:a5:ba:11:
0b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:58:D4:33:FD:CC:DF:7D:43:E4:39:6B:D5:E2:9C:AC:4A:7B:12:11
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/J1jUM_3M331D5Dlr1eKcrEp7EhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.27.113.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ef:e8:db:23:f1:34:ba:6e:7b:e0:7c:f8:10:81:94:9f:64:
90:40:10:fb:69:3b:39:9e:a5:6e:7e:5b:48:e3:20:be:82:0f:
bf:c7:27:95:bf:8e:eb:3f:47:61:c6:5b:ef:01:7f:b1:ea:ff:
c9:0a:ec:e0:5a:cf:59:e5:13:9c:ca:09:1c:11:15:e8:66:e1:
16:54:09:dd:70:40:c8:6f:ce:99:d0:77:59:6f:9b:a7:07:0d:
95:20:0a:f2:a8:84:5a:12:75:29:54:dc:fc:b4:14:27:3d:5e:
49:c0:0a:81:26:be:84:24:c9:81:24:3d:c7:2b:4a:d2:ab:55:
41:19:b9:51:d9:48:9c:72:f0:6c:5b:ec:11:f6:63:d1:55:70:
d4:e8:de:f7:72:7a:67:6f:94:bb:5e:fe:c0:0c:8f:2e:c1:5b:
e8:df:f2:d3:97:19:da:7f:27:49:a4:4a:b6:6c:1a:00:08:0b:
4e:4f:b7:65:5f:aa:09:00:5e:74:2c:a3:27:1c:29:99:ab:03:
38:d6:3d:5f:11:1d:14:62:9b:f6:c0:27:60:60:7f:92:6b:a5:
a0:18:c2:cd:54:24:fd:7d:9f:72:91:3b:4e:c2:a1:f7:ec:d2:
24:78:de:07:c2:46:42:3f:02:07:7f:94:8e:d2:6a:31:53:5c:
99:b6:31:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAS0DqQxLCmJih4sFlN2XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjQwMTAxMTIzMDM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzU4ZDQzM2ZkY2NkZjdkNDNlNDM5NmJkNWUyOWNhYzRhN2IxMjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgQC35DCA/N2CFGAjOBp5aZ0tMPF
QfB157HJYda+newp68KzV0o+qM9xveUEkBZvnS5L1N3amdPzvBn6do8lvxpQXf6C
j0M/LqQ+cWV9/I/Ztvs3YdlteN7z/lnMT3dgHPe1xQpqJ4aeeqImo3XjXVkDeJAH
eSkbnrh/fAAJB8iJje4f4PjsQ2qhroewhekXTC01iXULugI4POMEenl6RLqSeodZ
nOnYpDTa2SyKrrZBuRYvb0t9BvUtGJ8Jo1jDSkX8xChaIPdZnt1hXCQPqLYop76q
xQASLyNhGpu35iyWf23v3UwIXEJWncTXpWGN3P8PiLchdpXMtWyluhELLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCdY1DP9zN99Q+Q5a9XinKxKexIRMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvSjFqVU1fM00zMzFENURscjFlS2NyRXA3RWhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3xtxMA0G
CSqGSIb3DQEBCwUAA4IBAQA+7+jbI/E0um574Hz4EIGUn2SQQBD7aTs5nqVufltI
4yC+gg+/xyeVv47rP0dhxlvvAX+x6v/JCuzgWs9Z5ROcygkcERXoZuEWVAndcEDI
b86Z0HdZb5unBw2VIAryqIRaEnUpVNz8tBQnPV5JwAqBJr6EJMmBJD3HK0rSq1VB
GblR2UiccvBsW+wR9mPRVXDU6N73cnpnb5S7Xv7ADI8uwVvo3/LTlxnafydJpEq2
bBoACAtOT7dlX6oJAF50LKMnHCmZqwM41j1fER0UYpv2wCdgYH+Sa6WgGMLNVCT9
fZ9ykTtOwqH37NIkeN4HwkZCPwIHf5SO0moxU1yZtjEy
-----END CERTIFICATE-----
Generated at Sun May 5 20:04:47 2024 by rpki-client on console-ams.rpki-client.org