Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/jez1LczhEKyCYSFAAc8tUdaRsy0.roa
File: jez1LczhEKyCYSFAAc8tUdaRsy0.roa (raw, json)
Hash identifier: Qqk6pgoDZUaj56NSR+yJk9nZ5BhvnO3rGiOo/ipEcmQ=
Subject key identifier: 8D:EC:F5:2D:CC:E1:10:AC:82:61:21:40:01:CF:2D:51:D6:91:B3:2D
Certificate issuer: /CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Certificate serial: 018CC80131A8A557085BDC0DE9CA81DB9313
Authority key identifier: 96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/jez1LczhEKyCYSFAAc8tUdaRsy0.roa
Signing time: Tue 02 Jan 2024 02:29:30 +0000
ROA not before: Tue 02 Jan 2024 02:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213081
IP address blocks: 148.222.248.0/22 maxlen: 24
91.194.139.0/24 maxlen: 24
147.78.194.0/23 maxlen: 24
185.203.114.0/23 maxlen: 23
2a0a:e5c0::/29 maxlen: 48
2a09:2940::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:31:a8:a5:57:08:5b:dc:0d:e9:ca:81:db:93:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Validity
Not Before: Jan 2 02:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8decf52dcce110ac8261214001cf2d51d691b32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:06:ea:77:4c:98:87:5d:de:ea:ab:01:b2:ad:
96:c1:bc:3d:fa:dd:61:8b:42:7f:c9:a5:de:96:48:
cf:76:3e:d6:56:74:db:6d:82:20:db:63:58:37:36:
f8:c3:c3:ff:5c:3b:0b:28:29:eb:55:36:84:1d:da:
b0:e0:de:9d:6d:c1:12:7a:69:86:59:b0:0c:68:c3:
ab:28:91:c6:b4:f2:47:23:30:6a:3c:e0:c1:c3:f6:
26:c5:bb:a9:4a:6f:0c:97:56:17:1d:63:5a:4d:74:
03:da:76:9f:4d:dc:c5:ba:8b:af:8d:3d:28:3f:2a:
03:7e:3b:91:59:fa:cc:d5:58:74:c7:ba:79:73:f3:
44:e9:0d:90:87:9d:8c:b0:50:52:ef:91:8d:6f:53:
50:bb:a3:5a:e4:fd:6c:f1:e1:c8:df:7f:3f:34:f7:
ec:77:3a:b6:cf:5e:fa:e3:3e:ad:66:8b:7c:ba:68:
3d:e3:9a:d1:67:e0:51:d8:6f:6d:58:af:58:69:72:
c1:77:f8:cb:7d:5f:cd:15:a7:ba:52:b9:62:1a:ab:
63:77:7b:37:8c:c4:2f:10:4a:67:de:50:b6:80:89:
55:03:06:fe:79:de:fe:71:98:f8:ce:d1:28:5b:c8:
82:96:e4:39:e6:e8:56:71:ef:0c:bb:74:f2:7b:a0:
c0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EC:F5:2D:CC:E1:10:AC:82:61:21:40:01:CF:2D:51:D6:91:B3:2D
X509v3 Authority Key Identifier:
keyid:96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/jez1LczhEKyCYSFAAc8tUdaRsy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.139.0/24
147.78.194.0/23
148.222.248.0/22
185.203.114.0/23
IPv6:
2a09:2940::/29
2a0a:e5c0::/29
Signature Algorithm: sha256WithRSAEncryption
76:c7:53:73:fc:5f:1e:f8:2b:5b:64:31:17:f3:9f:a5:8f:47:
1a:52:34:e1:bb:6e:f0:b5:7b:f7:8c:e5:4c:d8:1a:10:f0:c5:
38:98:d9:3b:ff:ef:26:97:ab:3c:b1:f8:c9:b4:69:f2:2d:7d:
9d:28:3d:0a:c7:c5:1c:48:bf:58:f9:1d:61:00:1f:c0:4b:14:
ae:2d:34:7d:2c:dd:d5:e7:c1:49:7f:ff:c0:e0:83:3c:46:dc:
9e:00:18:ef:ba:d4:5e:b6:c6:d1:8f:8d:0f:98:bb:fc:d4:04:
31:e2:48:d7:f4:79:a4:ac:f1:62:7f:f5:46:79:c9:3a:07:77:
9f:3b:11:29:a1:a8:33:79:56:18:05:1b:b3:7e:a7:24:a0:68:
d0:ae:80:75:c8:c8:c7:b2:4a:80:c6:8d:d3:70:b7:3f:58:40:
2e:a9:38:0a:f9:c0:77:b3:68:41:23:0f:94:1e:ba:99:53:a7:
19:e4:15:94:ca:b2:12:a6:16:fd:d1:76:9f:80:71:3e:39:7e:
a9:65:f1:9d:62:e9:74:bb:6e:0c:14:d1:37:7c:c7:37:63:67:
7f:b7:1a:da:8c:88:20:5c:f0:75:10:64:4c:72:17:69:20:26:
f9:33:dd:1b:a9:2b:ab:1c:da:70:39:f0:30:fa:79:9f:43:3e:
02:70:68:44
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAYzIATGopVcIW9wN6cqB25MTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YmZjNWExNzI2NTRkZDYwMDlkYjFkODJkOTJmZmFmNzEy
MzQxMjAwHhcNMjQwMTAyMDIyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGVjZjUyZGNjZTExMGFjODI2MTIxNDAwMWNmMmQ1MWQ2OTFiMzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Abqd0yYh13e6qsBsq2Wwbw9+t1h
i0J/yaXelkjPdj7WVnTbbYIg22NYNzb4w8P/XDsLKCnrVTaEHdqw4N6dbcESemmG
WbAMaMOrKJHGtPJHIzBqPODBw/YmxbupSm8Ml1YXHWNaTXQD2nafTdzFuouvjT0o
PyoDfjuRWfrM1Vh0x7p5c/NE6Q2Qh52MsFBS75GNb1NQu6Na5P1s8eHI338/NPfs
dzq2z1764z6tZot8umg945rRZ+BR2G9tWK9YaXLBd/jLfV/NFae6UrliGqtjd3s3
jMQvEEpn3lC2gIlVAwb+ed7+cZj4ztEoW8iCluQ55uhWce8Mu3Tye6DAFwIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFI3s9S3M4RCsgmEhQAHPLVHWkbMtMB8GA1UdIwQY
MBaAFJa/xaFyZU3WAJ2x2C2S/69xI0EgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHJfRm9YSmxUZFlBbmJIWUxaTF9yM0VqUVNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zNjMwY2ItZWJlYy00ZDg2LWIxMmIt
YmZmYjc1N2MzMTM0LzEvamV6MUxjemhFS3lDWVNGQUFjOHRVZGFSc3kwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zNjMwY2ItZWJlYy00ZDg2LWIxMmItYmZmYjc1N2MzMTM0
LzEvbHJfRm9YSmxUZFlBbmJIWUxaTF9yM0VqUVNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQAW8KLAwQB
k07CAwQClN74AwQBuctyMBQEAgACMA4DBQMqCSlAAwUDKgrlwDANBgkqhkiG9w0B
AQsFAAOCAQEAdsdTc/xfHvgrW2QxF/OfpY9HGlI04btu8LV794zlTNgaEPDFOJjZ
O//vJperPLH4ybRp8i19nSg9CsfFHEi/WPkdYQAfwEsUri00fSzd1efBSX//wOCD
PEbcngAY77rUXrbG0Y+ND5i7/NQEMeJI1/R5pKzxYn/1RnnJOgd3nzsRKaGoM3lW
GAUbs36nJKBo0K6AdcjIx7JKgMaN03C3P1hALqk4CvnAd7NoQSMPlB66mVOnGeQV
lMqyEqYW/dF2n4BxPjl+qWXxnWLpdLtuDBTRN3zHN2Nnf7ca2oyIIFzwdRBkTHIX
aSAm+TPdG6krqxzacDnwMPp5n0M+AnBoRA==
-----END CERTIFICATE-----
Generated at Fri Jun 7 20:38:38 2024 by rpki-client on console-ams.rpki-client.org