Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/rJl1ysKRUsk87pyYIdz0obOzEEs.roa
File: rJl1ysKRUsk87pyYIdz0obOzEEs.roa (raw, json)
Hash identifier: d70nQewH4XHNQQ9uMpQZ088NXWDDIU6wA7BRfhr6ZwQ=
Subject key identifier: AC:99:75:CA:C2:91:52:C9:3C:EE:9C:98:21:DC:F4:A1:B3:B3:10:4B
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 018CC7933CB6BC097B08EB91BBA8E69F1561
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/rJl1ysKRUsk87pyYIdz0obOzEEs.roa
Signing time: Tue 02 Jan 2024 00:29:24 +0000
ROA not before: Tue 02 Jan 2024 00:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18530
IP address blocks: 84.39.202.0/23 maxlen: 23
84.39.200.0/23 maxlen: 23
92.246.68.0/23 maxlen: 23
92.246.70.0/23 maxlen: 23
193.31.32.0/23 maxlen: 23
193.31.34.0/23 maxlen: 23
2.56.22.0/23 maxlen: 23
2.56.20.0/23 maxlen: 23
195.38.0.0/23 maxlen: 23
195.38.2.0/23 maxlen: 23
194.93.52.0/23 maxlen: 23
194.93.54.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:3c:b6:bc:09:7b:08:eb:91:bb:a8:e6:9f:15:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 2 00:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac9975cac29152c93cee9c9821dcf4a1b3b3104b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1f:cd:fe:63:85:f1:d7:da:15:8e:c1:11:88:
8c:2f:c6:92:f7:74:26:b9:11:11:ec:99:73:f4:e4:
6c:0b:af:a3:f2:19:50:78:d5:9f:6b:82:ae:65:49:
f4:b9:68:a6:ba:10:29:b4:aa:1c:53:82:b7:82:c6:
10:c5:f4:cf:ff:61:f6:40:b8:1f:c1:84:96:17:2d:
93:5c:ca:bb:24:18:ad:be:1a:3c:b1:89:e5:42:db:
25:9a:cf:4a:6c:f0:95:ab:70:d3:22:37:4e:56:a3:
58:3a:ed:0e:d9:08:a0:a6:9e:d4:cc:84:ba:a3:51:
78:11:c9:88:ed:85:ed:47:dd:68:45:55:41:97:8f:
58:b6:02:ca:3c:87:de:1e:48:e4:f3:07:af:4f:09:
f8:b3:7b:dc:b5:48:94:1b:6b:50:eb:01:1e:d8:94:
17:b5:2d:25:38:f3:18:6b:23:cc:51:fc:56:22:e1:
0d:13:68:fe:27:25:ba:11:4b:e5:a8:dc:50:7a:a0:
7f:98:dd:97:49:21:94:7a:8e:c9:2f:f1:56:55:84:
4c:c1:a6:f8:eb:e9:6d:19:f7:2c:da:36:ca:13:90:
81:77:76:62:bb:8b:5a:ab:d9:e4:0d:a1:a0:be:56:
57:f4:7a:74:22:cf:8e:10:77:13:57:21:a8:d4:cb:
ba:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:99:75:CA:C2:91:52:C9:3C:EE:9C:98:21:DC:F4:A1:B3:B3:10:4B
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/rJl1ysKRUsk87pyYIdz0obOzEEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.20.0/22
84.39.200.0/22
92.246.68.0/22
193.31.32.0/22
194.93.52.0/22
195.38.0.0/22
Signature Algorithm: sha256WithRSAEncryption
60:85:f0:22:3c:bb:90:e5:0b:1d:8c:2e:7c:fb:0a:07:01:8f:
72:01:83:04:65:fb:1c:22:f6:e8:39:51:03:75:66:ce:cf:22:
a2:3f:43:22:5b:a1:07:d6:64:53:06:66:58:1b:e8:81:a2:f7:
d4:ed:d5:e5:dd:23:cd:b7:18:7f:48:66:8b:1f:d5:1d:f6:c6:
79:23:ff:ad:1b:93:a3:87:16:dc:26:82:4b:2a:d0:d0:44:21:
16:18:db:d8:a4:d6:ed:02:91:0c:05:c8:5f:cd:b9:34:50:44:
45:a7:ec:cc:de:04:7f:04:be:f0:94:d7:db:8c:1a:f7:95:19:
e5:4b:36:dd:59:81:e2:60:70:36:62:0e:37:19:24:e0:4f:db:
20:64:4c:5d:3f:a1:0a:b4:1b:1e:1b:0d:c3:0d:9c:39:1d:98:
2b:0d:54:64:94:74:f5:d0:51:5b:0e:e0:e6:6b:38:a6:48:14:
7c:63:7e:26:44:0d:4b:19:e7:a6:28:3a:ea:a0:11:81:5f:50:
94:18:fb:2c:c8:8a:01:1e:23:04:44:52:98:ae:71:ae:b8:cb:
8e:79:c7:fd:ef:26:e0:e7:b8:6d:8f:de:e5:c7:07:fa:63:fe:
d2:91:d2:48:63:3f:63:e0:9b:f7:0b:65:8f:df:ca:31:47:3f:
3e:ed:86:2b
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYzHkzy2vAl7COuRu6jmnxVhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj
YjUzZDYwHhcNMjQwMTAyMDAyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzk5NzVjYWMyOTE1MmM5M2NlZTljOTgyMWRjZjRhMWIzYjMxMDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgB/N/mOF8dfaFY7BEYiML8aS93Qm
uRER7Jlz9ORsC6+j8hlQeNWfa4KuZUn0uWimuhAptKocU4K3gsYQxfTP/2H2QLgf
wYSWFy2TXMq7JBitvho8sYnlQtslms9KbPCVq3DTIjdOVqNYOu0O2Qigpp7UzIS6
o1F4EcmI7YXtR91oRVVBl49YtgLKPIfeHkjk8wevTwn4s3vctUiUG2tQ6wEe2JQX
tS0lOPMYayPMUfxWIuENE2j+JyW6EUvlqNxQeqB/mN2XSSGUeo7JL/FWVYRMwab4
6+ltGfcs2jbKE5CBd3Ziu4taq9nkDaGgvlZX9Hp0Is+OEHcTVyGo1Mu6sQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFKyZdcrCkVLJPO6cmCHc9KGzsxBLMB8GA1UdIwQY
MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt
NDY5MGEwMDcxNDFmLzEvckpsMXlzS1JVc2s4N3B5WUlkejBvYk96RUVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm
LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCAjgUAwQC
VCfIAwQCXPZEAwQCwR8gAwQCwl00AwQCwyYAMA0GCSqGSIb3DQEBCwUAA4IBAQBg
hfAiPLuQ5QsdjC58+woHAY9yAYMEZfscIvboOVEDdWbOzyKiP0MiW6EH1mRTBmZY
G+iBovfU7dXl3SPNtxh/SGaLH9Ud9sZ5I/+tG5OjhxbcJoJLKtDQRCEWGNvYpNbt
ApEMBchfzbk0UERFp+zM3gR/BL7wlNfbjBr3lRnlSzbdWYHiYHA2Yg43GSTgT9sg
ZExdP6EKtBseGw3DDZw5HZgrDVRklHT10FFbDuDmazimSBR8Y34mRA1LGeemKDrq
oBGBX1CUGPssyIoBHiMERFKYrnGuuMuOecf97ybg57htj97lxwf6Y/7SkdJIYz9j
4Jv3C2WP38oxRz8+7YYr
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:09:52 2024 by rpki-client on console-fra.rpki-client.org