Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/jIJBM_kDYo7AN0_cqm5tVLLvAjs.roa
File: jIJBM_kDYo7AN0_cqm5tVLLvAjs.roa (raw, json)
Hash identifier: +cyliIGOSfIr4eWf/s+WxyJ72SnCOl2eMc0eZFqJ6E8=
Subject key identifier: 8C:82:41:33:F9:03:62:8E:C0:37:4F:DC:AA:6E:6D:54:B2:EF:02:3B
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 018CC72764B5423A9422FBB0C0CD64C72967
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/jIJBM_kDYo7AN0_cqm5tVLLvAjs.roa
Signing time: Mon 01 Jan 2024 22:31:36 +0000
ROA not before: Mon 01 Jan 2024 22:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41464
IP address blocks: 78.133.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:64:b5:42:3a:94:22:fb:b0:c0:cd:64:c7:29:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 22:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c824133f903628ec0374fdcaa6e6d54b2ef023b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fd:84:b6:c3:07:9e:e9:8d:7a:7a:90:17:58:
9d:11:cc:e4:39:f2:50:ec:4b:4f:4f:a2:68:ea:98:
35:10:cb:86:4d:43:8f:10:31:10:a3:12:da:08:5e:
7e:9c:7b:6c:64:d5:41:8c:c2:84:44:96:13:0b:19:
e6:e1:ee:d2:7b:e3:bb:5a:d0:ad:ec:11:6e:69:34:
81:ac:b1:ab:63:2e:7e:c9:f1:f3:30:19:f1:e5:58:
cd:d8:40:25:e9:0a:a8:6a:d8:9e:cf:e3:25:77:f9:
9e:95:7c:d7:9f:f0:6c:69:7e:68:b7:08:35:8f:62:
56:16:fb:c5:ef:89:e7:84:38:ef:67:c8:06:6b:05:
30:9c:8c:aa:fb:f1:62:91:7a:95:b2:63:00:3d:9b:
97:c4:fb:84:7c:58:91:49:1e:8a:dd:61:10:5c:05:
cd:af:b8:75:55:3c:2c:9e:f6:52:c3:a2:16:28:4b:
47:f3:79:fc:35:02:d2:4d:1b:5e:eb:5f:eb:cd:6e:
7b:cc:6d:e9:58:15:ca:22:b8:fd:52:f0:88:4f:f8:
dc:af:7a:e2:cf:67:72:f6:70:28:eb:b1:df:87:52:
c6:1a:6c:ae:b6:79:b8:a1:3d:71:13:44:f5:82:97:
56:8a:5f:91:23:a4:d9:de:d0:7e:22:33:0a:53:1d:
45:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:82:41:33:F9:03:62:8E:C0:37:4F:DC:AA:6E:6D:54:B2:EF:02:3B
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/jIJBM_kDYo7AN0_cqm5tVLLvAjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.133.168.0/24
Signature Algorithm: sha256WithRSAEncryption
45:92:23:4b:43:17:8d:52:7d:75:b8:20:35:8b:cb:45:e6:ca:
ad:70:f8:5a:32:47:6b:2a:ba:f2:df:17:30:a4:e4:b0:8f:3e:
3a:0b:6e:4c:ef:32:34:d5:47:fe:1f:48:e2:fb:d6:74:21:e8:
1a:8e:3c:bb:c8:0b:54:eb:08:36:34:ac:03:4d:f0:35:b0:5c:
99:e8:a5:6b:a8:da:2f:fc:72:36:76:76:e6:a2:32:65:f4:fa:
2c:5f:bf:b3:5d:a4:e5:89:23:70:13:17:30:ec:d8:28:0b:e6:
41:ad:9c:fb:33:bf:62:40:f6:62:39:02:95:70:5f:60:a8:1f:
f4:93:69:3e:6e:cc:58:cb:01:6a:9b:cd:81:10:32:bf:a4:f9:
63:56:28:3e:0f:67:f0:9f:c1:c9:99:70:40:89:d3:40:99:d8:
9b:64:5b:b8:29:fe:49:73:86:1c:10:01:49:a0:ff:bb:d3:e0:
3e:1f:97:8d:9a:ff:d6:98:76:52:be:b8:0a:4d:f2:76:00:49:
93:bd:11:a3:af:d5:df:84:ce:b2:86:d9:e5:62:ea:cc:e2:f8:
27:42:06:d0:ee:85:93:82:06:30:b3:e1:90:50:cb:c8:d2:ef:
9a:fc:48:87:a9:68:84:0a:9b:3b:b6:ef:47:46:2f:c8:0e:0e:
a5:2d:a2:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJ2S1QjqUIvuwwM1kxylnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj
ZWY5MzMwHhcNMjQwMTAxMjIzMTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzgyNDEzM2Y5MDM2MjhlYzAzNzRmZGNhYTZlNmQ1NGIyZWYwMjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP2EtsMHnumNenqQF1idEczkOfJQ
7EtPT6Jo6pg1EMuGTUOPEDEQoxLaCF5+nHtsZNVBjMKERJYTCxnm4e7Se+O7WtCt
7BFuaTSBrLGrYy5+yfHzMBnx5VjN2EAl6Qqoatiez+Mld/melXzXn/BsaX5otwg1
j2JWFvvF74nnhDjvZ8gGawUwnIyq+/FikXqVsmMAPZuXxPuEfFiRSR6K3WEQXAXN
r7h1VTwsnvZSw6IWKEtH83n8NQLSTRte61/rzW57zG3pWBXKIrj9UvCIT/jcr3ri
z2dy9nAo67Hfh1LGGmyutnm4oT1xE0T1gpdWil+RI6TZ3tB+IjMKUx1F4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIyCQTP5A2KOwDdP3KpubVSy7wI7MB8GA1UdIwQY
MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt
OTFlMzE4NGJiMGFiLzEvaklKQk1fa0RZbzdBTjBfY3FtNXRWTEx2QWpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi
LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAToWoMA0G
CSqGSIb3DQEBCwUAA4IBAQBFkiNLQxeNUn11uCA1i8tF5sqtcPhaMkdrKrry3xcw
pOSwjz46C25M7zI01Uf+H0ji+9Z0Iegajjy7yAtU6wg2NKwDTfA1sFyZ6KVrqNov
/HI2dnbmojJl9PosX7+zXaTliSNwExcw7NgoC+ZBrZz7M79iQPZiOQKVcF9gqB/0
k2k+bsxYywFqm82BEDK/pPljVig+D2fwn8HJmXBAidNAmdibZFu4Kf5Jc4YcEAFJ
oP+70+A+H5eNmv/WmHZSvrgKTfJ2AEmTvRGjr9XfhM6yhtnlYurM4vgnQgbQ7oWT
ggYws+GQUMvI0u+a/EiHqWiECps7tu9HRi/IDg6lLaJo
-----END CERTIFICATE-----
Generated at Sun May 19 00:48:27 2024 by rpki-client on console-ams.rpki-client.org