Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/jz5vBvgC6HuleZ6VUaz3tzuT9lM.roa
File: jz5vBvgC6HuleZ6VUaz3tzuT9lM.roa (raw, json)
Hash identifier: TWLgCGfAGrYQphka8eJdJMEqxRBpB1E9IE2GJjgf6AI=
Subject key identifier: 8F:3E:6F:06:F8:02:E8:7B:A5:79:9E:95:51:AC:F7:B7:3B:93:F6:53
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 018CC9BC143C7A7CF5A111ACD97515CC8FA6
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/jz5vBvgC6HuleZ6VUaz3tzuT9lM.roa
Signing time: Tue 02 Jan 2024 10:33:15 +0000
ROA not before: Tue 02 Jan 2024 10:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207713
IP address blocks: 193.228.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:14:3c:7a:7c:f5:a1:11:ac:d9:75:15:cc:8f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Jan 2 10:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f3e6f06f802e87ba5799e9551acf7b73b93f653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:72:b8:76:f2:68:aa:0c:0a:98:a0:55:a6:53:
7b:34:6f:d4:9c:e9:87:98:d2:af:50:2f:63:a7:c0:
ca:0e:50:aa:05:cf:b9:8f:6c:ec:86:06:d6:86:ac:
b2:07:16:f7:44:0f:45:6c:84:e4:fd:72:1c:cb:e1:
ef:63:12:06:cb:34:5e:39:f6:94:b1:70:3b:81:cd:
5e:f6:c5:62:b5:22:75:48:f5:6e:d7:9f:d1:18:fa:
1b:b3:00:41:d7:db:5f:db:b2:e8:53:36:96:20:c6:
af:e5:69:99:1d:fd:1e:dc:78:a0:61:25:db:ef:7c:
12:a8:b1:b3:51:b9:d2:93:69:75:79:4e:af:63:84:
2d:4b:d3:fa:75:e4:84:6f:e6:80:4e:b6:b2:c6:50:
50:63:91:82:63:19:1a:6b:c2:f4:3e:a7:d4:9a:f4:
55:e5:01:b5:f1:11:61:15:1c:64:1a:00:65:7e:25:
9d:61:42:41:fa:f5:e7:88:b5:0e:2e:2e:47:f9:74:
c5:39:24:3f:ae:21:f1:eb:c9:56:c9:b2:56:eb:5c:
44:88:e3:7e:3b:2e:27:38:f0:d4:58:16:87:1e:c8:
cb:c5:ca:fd:ba:78:54:de:83:5d:de:76:83:15:8e:
29:82:55:a6:94:93:ff:7a:95:a4:8e:c9:1b:cd:c8:
db:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3E:6F:06:F8:02:E8:7B:A5:79:9E:95:51:AC:F7:B7:3B:93:F6:53
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/jz5vBvgC6HuleZ6VUaz3tzuT9lM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.128.0/24
Signature Algorithm: sha256WithRSAEncryption
14:df:83:f5:0b:97:45:da:68:d8:cd:57:87:a9:31:b4:36:67:
f1:bd:b7:ac:26:6b:06:9b:99:40:2a:be:c3:f8:8e:7a:5f:ee:
1d:d2:d2:bf:11:78:1b:17:0b:c5:fb:0d:10:29:28:91:09:23:
30:6e:ea:95:4a:cc:32:0f:41:5c:c8:b5:38:be:42:a4:38:e2:
b4:30:67:5a:83:bb:01:d6:6c:c6:79:6b:7a:6e:4e:8c:d1:e6:
9d:e5:05:16:09:d5:d9:da:5c:d0:7e:4a:0e:42:c3:7c:b7:2c:
0e:7d:a8:82:18:a8:c3:01:c4:ee:98:2a:8f:8b:10:6b:85:c0:
5d:d0:51:b8:9d:83:cb:9f:9f:0e:86:80:c0:9e:04:50:62:9c:
7d:4d:7b:27:12:f8:26:bf:5f:e5:e5:4b:6b:15:f8:5d:42:52:
f4:6f:6a:99:e6:d4:91:ef:98:a4:e3:59:65:0c:5b:8d:3a:05:
16:6e:a0:5c:50:a1:96:03:cb:30:2e:78:27:83:98:a3:7a:03:
84:79:68:0a:ff:ba:4c:84:cd:81:29:37:b4:8d:ce:44:54:b9:
e3:3f:cd:89:1a:3c:a6:ae:a7:11:02:5f:ad:35:8a:85:de:76:
29:cd:7a:31:10:cf:63:73:65:1b:24:97:ba:2a:f4:f3:8b:09:
66:aa:e9:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvBQ8enz1oRGs2XUVzI+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxN2I3YWIwNjJiYzgyOGIzNDhkMDUzMDZlNjUzNTQ3NDhi
OWQ2ZDYwHhcNMjQwMTAyMTAzMzE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjNlNmYwNmY4MDJlODdiYTU3OTllOTU1MWFjZjdiNzNiOTNmNjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHK4dvJoqgwKmKBVplN7NG/UnOmH
mNKvUC9jp8DKDlCqBc+5j2zshgbWhqyyBxb3RA9FbITk/XIcy+HvYxIGyzReOfaU
sXA7gc1e9sVitSJ1SPVu15/RGPobswBB19tf27LoUzaWIMav5WmZHf0e3HigYSXb
73wSqLGzUbnSk2l1eU6vY4QtS9P6deSEb+aATrayxlBQY5GCYxkaa8L0PqfUmvRV
5QG18RFhFRxkGgBlfiWdYUJB+vXniLUOLi5H+XTFOSQ/riHx68lWybJW61xEiON+
Oy4nOPDUWBaHHsjLxcr9unhU3oNd3naDFY4pglWmlJP/epWkjskbzcjbTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI8+bwb4Auh7pXmelVGs97c7k/ZTMB8GA1UdIwQY
MBaAFCF7erBivIKLNI0FMG5lNUdIudbWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYt
NTViNjU5Y2Q4MmJiLzEvano1dkJ2Z0M2SHVsZVo2VlVhejN0enVUOWxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYtNTViNjU5Y2Q4MmJi
LzEvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweSAMA0G
CSqGSIb3DQEBCwUAA4IBAQAU34P1C5dF2mjYzVeHqTG0NmfxvbesJmsGm5lAKr7D
+I56X+4d0tK/EXgbFwvF+w0QKSiRCSMwbuqVSswyD0FcyLU4vkKkOOK0MGdag7sB
1mzGeWt6bk6M0ead5QUWCdXZ2lzQfkoOQsN8tywOfaiCGKjDAcTumCqPixBrhcBd
0FG4nYPLn58OhoDAngRQYpx9TXsnEvgmv1/l5UtrFfhdQlL0b2qZ5tSR75ik41ll
DFuNOgUWbqBcUKGWA8swLngng5ijegOEeWgK/7pMhM2BKTe0jc5EVLnjP82JGjym
rqcRAl+tNYqF3nYpzXoxEM9jc2UbJJe6KvTziwlmqumy
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:58:22 2024 by rpki-client on console-fra.rpki-client.org