Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/JD9L22PSz0cIeV8NTltOpFKDQhU.roa
File: JD9L22PSz0cIeV8NTltOpFKDQhU.roa (raw, json)
Hash identifier: 6Ibfa9MFEtxkiTfXQK/fzaU7V1v8C0dcNwq68VJF0FI=
Subject key identifier: 24:3F:4B:DB:63:D2:CF:47:08:79:5F:0D:4E:5B:4E:A4:52:83:42:15
Certificate issuer: /CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
Certificate serial: 01919CCBBA39C65A5770B4111DE0DDA6D60C
Authority key identifier: 77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/JD9L22PSz0cIeV8NTltOpFKDQhU.roa
Signing time: Thu 29 Aug 2024 06:21:22 +0000
ROA not before: Thu 29 Aug 2024 06:21:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50448
IP address blocks: 91.219.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9c:cb:ba:39:c6:5a:57:70:b4:11:1d:e0:dd:a6:d6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
Validity
Not Before: Aug 29 06:21:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=243f4bdb63d2cf4708795f0d4e5b4ea452834215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:56:01:f1:b4:e7:12:1f:b4:4a:0e:86:e1:f4:
69:34:40:87:34:ca:88:6f:86:88:17:9a:f1:6e:d8:
e1:dc:44:b3:25:e8:ac:f0:28:8f:91:79:74:30:5d:
e8:97:55:58:56:cb:e5:31:14:8a:ba:7a:b4:37:da:
6d:20:32:9f:1b:89:19:1a:05:9c:cd:91:03:1a:41:
70:57:4b:01:3b:73:12:4a:9b:85:6c:02:4d:3d:56:
1d:cb:45:77:0b:48:2c:d5:84:17:70:65:12:bd:ae:
c3:7f:c4:59:f2:11:dd:cf:ae:b0:35:2a:56:05:26:
c0:15:99:3c:6f:71:33:87:7b:8c:cd:5f:2e:f6:0f:
f2:7d:8c:a4:2d:af:cd:28:d8:da:36:23:3a:be:8e:
2d:8d:af:1d:6d:ab:84:56:37:7d:a5:db:93:92:69:
72:4d:f8:a4:2e:ff:f1:b1:0a:b3:47:eb:77:94:3b:
03:59:bc:1e:c7:91:9d:4a:9e:7e:ac:65:cf:a1:00:
08:6a:17:c3:31:ae:45:6c:74:46:97:57:e9:1e:19:
f2:c5:3f:1e:7a:e6:8d:06:ff:b1:0a:8a:cb:71:31:
2d:d8:a5:5e:ac:10:c3:b5:ed:0c:4a:ed:d4:49:33:
6b:eb:d1:94:c8:02:29:40:d2:dc:e0:09:eb:19:13:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3F:4B:DB:63:D2:CF:47:08:79:5F:0D:4E:5B:4E:A4:52:83:42:15
X509v3 Authority Key Identifier:
keyid:77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/JD9L22PSz0cIeV8NTltOpFKDQhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.24.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:e3:68:92:dd:29:23:d7:e0:35:23:42:23:ef:b7:f2:2d:df:
e5:68:98:6a:b7:23:59:c9:45:56:ac:ff:30:75:e8:4b:84:9f:
ce:c4:1f:83:db:6a:af:d1:d3:34:7f:b4:46:cb:9d:4a:24:1e:
c6:ef:02:96:86:ee:a3:98:0d:61:81:28:7c:88:29:ce:a6:b5:
ad:59:f9:0e:40:10:29:e7:b5:4c:41:29:de:ad:79:4e:f9:25:
34:6f:e8:df:a9:16:0b:30:fd:43:7f:3e:37:c2:71:9d:c7:1b:
87:99:91:3d:32:85:ca:b7:69:78:c9:42:05:54:9d:98:49:d4:
bb:0f:08:a9:d7:d4:b2:1f:a2:44:ca:48:7a:7c:4d:57:c8:b3:
0c:d6:c3:d6:64:5e:b5:f9:3b:d8:67:20:a8:4a:62:6b:8b:91:
43:96:aa:11:ca:6b:f4:ca:4d:c2:d8:a3:69:1d:22:86:7f:4a:
22:ce:06:d2:ce:d1:27:78:0c:35:c7:60:2e:6d:33:b3:7d:ae:
43:db:91:d6:1a:98:ab:cd:7b:67:7e:6a:61:f1:cc:56:17:14:
94:ef:ff:da:3b:3e:82:6b:45:21:f0:22:42:1e:09:3e:3b:cd:
59:99:cd:31:e6:3b:67:de:3a:33:3b:82:c4:6a:31:f6:7b:c8:
1a:70:71:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGcy7o5xlpXcLQRHeDdptYMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YmZmZmQ2N2E0Yjk5NDU0YWM5YTQwMGU3NDc5Yzc2MGQ1
NTQ2Y2MwHhcNMjQwODI5MDYyMTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDNmNGJkYjYzZDJjZjQ3MDg3OTVmMGQ0ZTViNGVhNDUyODM0MjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlYB8bTnEh+0Sg6G4fRpNECHNMqI
b4aIF5rxbtjh3ESzJeis8CiPkXl0MF3ol1VYVsvlMRSKunq0N9ptIDKfG4kZGgWc
zZEDGkFwV0sBO3MSSpuFbAJNPVYdy0V3C0gs1YQXcGUSva7Df8RZ8hHdz66wNSpW
BSbAFZk8b3Ezh3uMzV8u9g/yfYykLa/NKNjaNiM6vo4tja8dbauEVjd9pduTkmly
TfikLv/xsQqzR+t3lDsDWbwex5GdSp5+rGXPoQAIahfDMa5FbHRGl1fpHhnyxT8e
euaNBv+xCorLcTEt2KVerBDDte0MSu3USTNr69GUyAIpQNLc4AnrGRMGSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCQ/S9tj0s9HCHlfDU5bTqRSg0IVMB8GA1UdIwQY
MBaAFHe//9Z6S5lFSsmkAOdHnHYNVUbMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lNzRlNjUtNWM5ZC00NmM3LTk2N2Mt
NDRkMWUyNGI3YjI1LzEvSkQ5TDIyUFN6MGNJZVY4TlRsdE9wRktEUWhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9lNzRlNjUtNWM5ZC00NmM3LTk2N2MtNDRkMWUyNGI3YjI1
LzEvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9sYMA0G
CSqGSIb3DQEBCwUAA4IBAQCt42iS3Skj1+A1I0Ij77fyLd/laJhqtyNZyUVWrP8w
dehLhJ/OxB+D22qv0dM0f7RGy51KJB7G7wKWhu6jmA1hgSh8iCnOprWtWfkOQBAp
57VMQSnerXlO+SU0b+jfqRYLMP1Dfz43wnGdxxuHmZE9MoXKt2l4yUIFVJ2YSdS7
Dwip19SyH6JEykh6fE1XyLMM1sPWZF61+TvYZyCoSmJri5FDlqoRymv0yk3C2KNp
HSKGf0oizgbSztEneAw1x2AubTOzfa5D25HWGpirzXtnfmph8cxWFxSU7//aOz6C
a0Uh8CJCHgk+O81Zmc0x5jtn3jozO4LEajH2e8gacHHt
-----END CERTIFICATE-----
Generated at Mon Nov 25 07:46:58 2024 by rpki-client on console-ams.rpki-client.org