Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/JUxqsMg8AcJK9YjeDJQq4hdmx1g.roa
File: JUxqsMg8AcJK9YjeDJQq4hdmx1g.roa (raw, json)
Hash identifier: bokmazk3mO4DHz8md1CqOuJNxFi3g2MA5VC6MIRGXQ0=
Subject key identifier: 25:4C:6A:B0:C8:3C:01:C2:4A:F5:88:DE:0C:94:2A:E2:17:66:C7:58
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 018CC80246B8B2AFC794E7D8A4750C5B000F
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/JUxqsMg8AcJK9YjeDJQq4hdmx1g.roa
Signing time: Tue 02 Jan 2024 02:30:41 +0000
ROA not before: Tue 02 Jan 2024 02:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201639
IP address blocks: 185.86.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:46:b8:b2:af:c7:94:e7:d8:a4:75:0c:5b:00:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Jan 2 02:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=254c6ab0c83c01c24af588de0c942ae21766c758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:9f:50:21:74:c4:3b:3d:80:b0:02:e2:70:
f1:19:80:a5:b7:d0:ab:be:10:43:44:7b:d0:ac:64:
31:b8:8c:c9:dd:08:bd:75:c2:e2:ac:f9:9c:81:cc:
aa:48:f8:09:a5:b5:33:32:7d:5d:f0:e6:a4:69:96:
e4:4d:a5:00:56:2b:aa:46:7e:8e:9a:75:2b:30:ae:
4d:ec:73:ba:38:67:e1:5a:ec:23:22:40:79:fd:08:
55:e9:96:c2:c4:08:92:6c:01:93:f5:5e:13:f8:96:
d9:56:6e:6a:d0:dc:ba:4e:33:2f:e5:1c:f2:17:36:
41:bf:e2:ad:03:1b:80:1b:86:cf:3c:74:97:04:47:
5d:16:16:d9:61:9b:37:3a:ef:ec:c4:ae:cb:78:ed:
e3:8d:f4:83:a8:e5:cd:03:ee:37:88:50:0c:f9:5c:
58:d1:86:79:07:1a:f2:b2:de:99:45:3b:94:f8:99:
c1:28:51:ec:06:7c:10:c3:27:dd:db:fb:ca:d3:66:
e5:a7:7e:60:8f:78:f3:4d:3a:d9:10:af:33:c6:c8:
c4:60:8b:e3:a1:4f:6b:8d:94:97:87:ed:0d:59:14:
f5:a1:16:e2:41:02:85:c9:24:ad:13:3a:14:91:7e:
3c:14:53:a4:85:d9:ee:76:10:a5:eb:97:bf:ea:3a:
a0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4C:6A:B0:C8:3C:01:C2:4A:F5:88:DE:0C:94:2A:E2:17:66:C7:58
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/JUxqsMg8AcJK9YjeDJQq4hdmx1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.192.0/24
Signature Algorithm: sha256WithRSAEncryption
91:ed:ec:65:33:64:ca:1a:3e:3a:e9:89:85:d5:f0:6f:9f:4e:
e5:3a:0a:a2:51:68:c4:dd:79:56:47:41:8c:7c:93:85:4a:6a:
11:d0:66:07:98:a4:38:c1:88:a0:90:af:67:38:26:72:96:f9:
1f:6f:d7:dc:c7:4e:9c:19:4f:47:62:4b:aa:80:b4:82:ec:10:
c2:23:42:b7:4f:10:7b:23:b9:54:15:d9:d5:b3:b4:54:5a:e4:
cf:19:56:34:f1:7d:a3:6a:15:33:4f:37:05:f7:b0:8a:e3:dc:
0f:42:af:43:d6:ac:c1:5e:5f:99:c7:cc:0f:68:b1:14:12:78:
70:e7:4c:8f:d1:1e:c4:ae:6b:eb:8d:fe:c5:5b:cc:2c:a6:a3:
34:21:88:1d:f7:29:31:4b:d9:22:1c:6e:0f:57:ea:1f:08:45:
13:68:e7:d4:ff:7c:84:3b:ba:29:de:a2:04:d9:f8:74:1c:4d:
8b:37:66:1a:8c:1a:5d:8b:d9:c6:14:4a:9f:15:5a:e4:f5:02:
be:4a:44:3b:15:e3:5a:1f:e5:b5:15:6a:a0:04:dd:34:9a:a5:
46:0b:20:ee:3e:ef:9f:fa:da:9d:fb:6a:2c:b5:f7:01:6a:5a:
79:61:8f:ec:bb:67:51:1f:75:fc:10:a7:2d:09:da:05:8d:9a:
7f:f7:50:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAka4sq/HlOfYpHUMWwAPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz
NTI4MTkwHhcNMjQwMTAyMDIzMDQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTRjNmFiMGM4M2MwMWMyNGFmNTg4ZGUwYzk0MmFlMjE3NjZjNzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK+fUCF0xDs9gLAC4nDxGYClt9Cr
vhBDRHvQrGQxuIzJ3Qi9dcLirPmcgcyqSPgJpbUzMn1d8OakaZbkTaUAViuqRn6O
mnUrMK5N7HO6OGfhWuwjIkB5/QhV6ZbCxAiSbAGT9V4T+JbZVm5q0Ny6TjMv5Rzy
FzZBv+KtAxuAG4bPPHSXBEddFhbZYZs3Ou/sxK7LeO3jjfSDqOXNA+43iFAM+VxY
0YZ5Bxryst6ZRTuU+JnBKFHsBnwQwyfd2/vK02blp35gj3jzTTrZEK8zxsjEYIvj
oU9rjZSXh+0NWRT1oRbiQQKFySStEzoUkX48FFOkhdnudhCl65e/6jqg8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCVMarDIPAHCSvWI3gyUKuIXZsdYMB8GA1UdIwQY
MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct
ZTM3OTlhZGU5ZGZlLzEvSlV4cXNNZzhBY0pLOVlqZURKUXE0aGRteDFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl
LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVbAMA0G
CSqGSIb3DQEBCwUAA4IBAQCR7exlM2TKGj466YmF1fBvn07lOgqiUWjE3XlWR0GM
fJOFSmoR0GYHmKQ4wYigkK9nOCZylvkfb9fcx06cGU9HYkuqgLSC7BDCI0K3TxB7
I7lUFdnVs7RUWuTPGVY08X2jahUzTzcF97CK49wPQq9D1qzBXl+Zx8wPaLEUEnhw
50yP0R7Ermvrjf7FW8wspqM0IYgd9ykxS9kiHG4PV+ofCEUTaOfU/3yEO7op3qIE
2fh0HE2LN2YajBpdi9nGFEqfFVrk9QK+SkQ7FeNaH+W1FWqgBN00mqVGCyDuPu+f
+tqd+2ostfcBalp5YY/su2dRH3X8EKctCdoFjZp/91Cw
-----END CERTIFICATE-----
Generated at Sat May 11 13:52:50 2024 by rpki-client on console-ams.rpki-client.org