Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Jp31hH1AVsQnz1Z8dvtMrh6fLB4.roa
File: Jp31hH1AVsQnz1Z8dvtMrh6fLB4.roa (raw, json)
Hash identifier: 0z3FvlUT+fOiakW+lxw1FWrk2KzX4r3Eph7miYoMRxA=
Subject key identifier: 26:9D:F5:84:7D:40:56:C4:27:CF:56:7C:76:FB:4C:AE:1E:9F:2C:1E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC80288C1E26F50731D6F025B8B9FCA80
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Jp31hH1AVsQnz1Z8dvtMrh6fLB4.roa
Signing time: Tue 02 Jan 2024 02:30:58 +0000
ROA not before: Tue 02 Jan 2024 02:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200019
IP address blocks: 185.223.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:88:c1:e2:6f:50:73:1d:6f:02:5b:8b:9f:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=269df5847d4056c427cf567c76fb4cae1e9f2c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9b:e0:97:49:0b:82:45:56:71:a6:2f:76:3b:
21:f2:a8:ce:5e:71:e6:ce:4b:01:e1:82:54:24:fa:
4e:af:44:bb:21:eb:e8:f0:ae:11:13:f7:fe:71:14:
5c:07:00:d1:a1:5c:a8:ff:65:3e:b7:86:41:35:9b:
6b:02:d5:71:b0:74:a1:ef:e4:19:3c:1e:5f:c9:1a:
7e:01:55:6d:5e:60:8d:ab:36:7e:7f:ce:92:59:eb:
1e:e5:92:83:fd:b4:08:79:e3:58:4e:34:c3:33:74:
c5:8b:24:01:ad:a1:4e:81:f0:a8:32:fe:41:1d:a8:
66:06:34:f8:ba:ba:35:10:8b:f9:67:44:83:ea:5f:
bc:2c:55:17:9c:5a:fb:79:b4:68:c9:66:14:cc:cf:
e6:91:50:fb:00:de:9d:93:41:79:7a:96:72:9e:42:
5e:79:d4:d5:de:df:9e:b6:9d:b4:4a:0d:a2:b5:1c:
67:9f:3c:d2:58:da:9d:3f:30:60:55:8d:55:fa:e2:
db:3c:ca:42:d1:7a:f8:f8:98:03:bd:6b:c5:89:34:
7f:5f:13:f4:d5:81:5e:c7:df:0c:64:28:d9:86:1c:
03:67:9d:7b:d9:e5:97:7f:ac:2b:39:e6:36:0e:c5:
04:c1:8b:2b:61:6b:83:e4:6c:85:0a:c9:6e:b5:e9:
ac:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9D:F5:84:7D:40:56:C4:27:CF:56:7C:76:FB:4C:AE:1E:9F:2C:1E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Jp31hH1AVsQnz1Z8dvtMrh6fLB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.79.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:11:b6:a8:bd:04:b4:50:16:e7:9c:85:db:f1:40:17:c3:ca:
46:74:9e:11:c4:ad:fb:d6:c2:f8:29:dc:da:50:18:d5:b6:ee:
73:67:4f:17:e9:b5:5b:e5:42:0b:66:3b:94:e7:d1:33:4e:2f:
b2:ec:5c:32:e1:f3:07:8b:09:4a:78:68:6f:dc:ad:6c:21:69:
05:01:cc:04:5e:de:3e:a7:64:8c:ba:c7:0d:14:b0:37:b6:68:
53:6f:e4:0c:59:9e:30:e2:32:fe:36:29:e3:5e:29:5a:87:94:
b5:f8:85:15:c5:62:b8:ed:a4:60:0d:72:89:d4:62:18:8a:aa:
97:7b:fc:9b:a4:be:f6:0c:89:3a:ab:66:71:c6:8e:17:06:1d:
31:df:91:ad:fb:5e:78:03:b9:8e:c6:2f:36:4a:60:1a:33:8f:
84:2b:54:34:a6:96:9e:7a:fe:8a:1b:66:67:30:60:f9:48:b2:
f4:6e:77:a3:4a:c9:31:51:67:75:1e:b9:5e:6f:6c:6b:65:7c:
c2:c6:a0:3c:25:05:c8:ff:66:f0:e7:b5:e3:91:3e:3b:e4:8e:
d0:74:25:93:d4:f4:d2:8a:84:eb:a0:70:57:47:1a:8d:75:94:
db:10:9f:8a:e0:53:9a:eb:1b:61:f4:cc:4d:17:df:81:76:d1:
07:d1:fb:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAojB4m9Qcx1vAluLn8qAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQwMTAyMDIzMDU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjlkZjU4NDdkNDA1NmM0MjdjZjU2N2M3NmZiNGNhZTFlOWYyYzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5vgl0kLgkVWcaYvdjsh8qjOXnHm
zksB4YJUJPpOr0S7Ievo8K4RE/f+cRRcBwDRoVyo/2U+t4ZBNZtrAtVxsHSh7+QZ
PB5fyRp+AVVtXmCNqzZ+f86SWese5ZKD/bQIeeNYTjTDM3TFiyQBraFOgfCoMv5B
HahmBjT4uro1EIv5Z0SD6l+8LFUXnFr7ebRoyWYUzM/mkVD7AN6dk0F5epZynkJe
edTV3t+etp20Sg2itRxnnzzSWNqdPzBgVY1V+uLbPMpC0Xr4+JgDvWvFiTR/XxP0
1YFex98MZCjZhhwDZ5172eWXf6wrOeY2DsUEwYsrYWuD5GyFCslutems4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCad9YR9QFbEJ89WfHb7TK4enyweMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvSnAzMWhIMUFWc1FuejFaOGR2dE1yaDZmTEI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud9PMA0G
CSqGSIb3DQEBCwUAA4IBAQAOEbaovQS0UBbnnIXb8UAXw8pGdJ4RxK371sL4Kdza
UBjVtu5zZ08X6bVb5UILZjuU59EzTi+y7Fwy4fMHiwlKeGhv3K1sIWkFAcwEXt4+
p2SMuscNFLA3tmhTb+QMWZ4w4jL+NinjXilah5S1+IUVxWK47aRgDXKJ1GIYiqqX
e/ybpL72DIk6q2Zxxo4XBh0x35Gt+154A7mOxi82SmAaM4+EK1Q0ppaeev6KG2Zn
MGD5SLL0bnejSskxUWd1Hrleb2xrZXzCxqA8JQXI/2bw57XjkT475I7QdCWT1PTS
ioTroHBXRxqNdZTbEJ+K4FOa6xth9MxNF9+BdtEH0ft/
-----END CERTIFICATE-----
Generated at Sat May 4 12:55:31 2024 by rpki-client on console-fra.rpki-client.org