Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/jnEtgyNX95yEFDnGCPTYMXhwC1o.roa
File: jnEtgyNX95yEFDnGCPTYMXhwC1o.roa (raw, json)
Hash identifier: Yx7w72i0R8yg9OUI0sx0KMLYG3Wb6+sdhp3bFk5qk3M=
Subject key identifier: 8E:71:2D:83:23:57:F7:9C:84:14:39:C6:08:F4:D8:31:78:70:0B:5A
Certificate issuer: /CN=ca5154158905d1d44c4588dfd25802f324a93d61
Certificate serial: 018FEE3BCD2A9341F9C6D733301A885930BE
Authority key identifier: CA:51:54:15:89:05:D1:D4:4C:45:88:DF:D2:58:02:F3:24:A9:3D:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/jnEtgyNX95yEFDnGCPTYMXhwC1o.roa
Signing time: Thu 06 Jun 2024 15:47:27 +0000
ROA not before: Thu 06 Jun 2024 15:47:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213313
IP address blocks: 152.89.148.0/22 maxlen: 24
2a09:34c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ee:3b:cd:2a:93:41:f9:c6:d7:33:30:1a:88:59:30:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5154158905d1d44c4588dfd25802f324a93d61
Validity
Not Before: Jun 6 15:47:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e712d832357f79c841439c608f4d83178700b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:48:84:e8:4a:56:c1:d6:e3:8a:d6:4e:92:06:
8b:cd:d5:45:1e:87:c1:0b:04:f5:8b:27:34:43:e2:
4d:a4:75:6c:60:5a:f2:df:2c:2d:71:c6:f1:8e:de:
d4:c7:e2:1f:de:d6:d1:00:36:57:6b:a3:f7:5e:3b:
ed:cd:02:5b:ac:9f:fb:aa:c1:77:c1:c2:f2:b0:68:
0a:9e:c1:9b:1a:6b:27:34:9c:8f:07:16:f7:af:01:
f6:b0:a8:89:29:33:4f:19:ef:8d:c4:20:aa:59:e0:
eb:8e:c1:3f:6b:96:04:d7:fe:73:aa:da:ea:18:0e:
3c:2c:e9:11:2d:63:02:ac:2f:2e:5b:8b:18:0e:39:
1d:50:64:6a:66:85:f5:b8:59:7e:5b:28:a4:ac:64:
ab:8b:83:a7:19:45:a1:c4:77:61:af:6b:19:a6:54:
9d:3a:3e:1e:e6:10:00:93:c1:b9:08:6f:f1:4c:14:
09:9e:b8:fa:46:c9:0e:14:97:ec:51:1b:8a:4e:49:
f8:fa:9a:04:0e:fd:c9:50:0e:8e:81:10:a0:ee:a4:
ed:ff:76:6a:72:e3:0b:3e:f6:2f:be:82:1e:75:f6:
80:27:66:5d:47:eb:d9:68:66:2e:cb:c9:a9:53:e1:
7f:6b:4c:79:f5:65:65:91:98:e9:09:b7:84:3c:e1:
9d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:71:2D:83:23:57:F7:9C:84:14:39:C6:08:F4:D8:31:78:70:0B:5A
X509v3 Authority Key Identifier:
keyid:CA:51:54:15:89:05:D1:D4:4C:45:88:DF:D2:58:02:F3:24:A9:3D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/jnEtgyNX95yEFDnGCPTYMXhwC1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.148.0/22
IPv6:
2a09:34c0::/29
Signature Algorithm: sha256WithRSAEncryption
23:b7:9e:2d:4b:63:34:96:e0:5e:b2:ee:03:19:7a:e0:31:55:
b2:9e:22:25:26:d1:34:c0:a3:51:d1:50:09:04:5a:c8:c8:9e:
f6:c2:f7:06:8c:06:98:1e:09:77:f9:d0:22:13:d3:fa:a9:3d:
65:55:a4:ff:76:cb:9d:43:d3:5c:a3:30:e7:0d:76:c4:84:e2:
1d:6f:3c:cb:8a:c6:9f:72:f2:60:55:4e:ab:b7:ef:5e:85:a8:
e0:da:7a:9e:0e:03:3e:d2:f0:3b:c8:4e:b7:79:0c:e0:10:5d:
ab:7c:c7:cb:c3:ef:34:48:74:cd:d4:7d:03:1d:f6:80:4b:ec:
a7:37:13:46:04:bb:fd:61:95:7f:8c:f4:53:4e:95:53:a8:51:
40:5a:f1:32:4c:8a:f2:3c:d3:19:0f:ad:7d:fb:8d:65:8f:ed:
69:c2:07:d2:30:36:43:43:a7:4d:bf:c6:3d:71:e4:ea:72:94:
58:70:2e:5e:d9:7a:5f:c0:17:d4:05:56:cd:f5:82:e4:42:9d:
e6:01:8f:da:86:75:5d:f3:35:08:6c:c0:3c:57:9b:25:29:3d:
41:62:f3:01:6f:6c:8a:a1:99:1e:a6:dc:eb:e6:a7:ea:5a:f4:
aa:ba:28:e7:5f:17:35:79:5e:3b:41:f7:a7:cc:53:43:e7:0c:
fd:a2:77:96
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAY/uO80qk0H5xtczMBqIWTC+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNTE1NDE1ODkwNWQxZDQ0YzQ1ODhkZmQyNTgwMmYzMjRh
OTNkNjEwHhcNMjQwNjA2MTU0NzI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTcxMmQ4MzIzNTdmNzljODQxNDM5YzYwOGY0ZDgzMTc4NzAwYjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUiE6EpWwdbjitZOkgaLzdVFHofB
CwT1iyc0Q+JNpHVsYFry3ywtccbxjt7Ux+If3tbRADZXa6P3XjvtzQJbrJ/7qsF3
wcLysGgKnsGbGmsnNJyPBxb3rwH2sKiJKTNPGe+NxCCqWeDrjsE/a5YE1/5zqtrq
GA48LOkRLWMCrC8uW4sYDjkdUGRqZoX1uFl+WyikrGSri4OnGUWhxHdhr2sZplSd
Oj4e5hAAk8G5CG/xTBQJnrj6RskOFJfsURuKTkn4+poEDv3JUA6OgRCg7qTt/3Zq
cuMLPvYvvoIedfaAJ2ZdR+vZaGYuy8mpU+F/a0x59WVlkZjpCbeEPOGdrQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFI5xLYMjV/echBQ5xgj02DF4cAtaMB8GA1UdIwQY
MBaAFMpRVBWJBdHUTEWI39JYAvMkqT1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWxGVUZZa0YwZFJNUllqZjBsZ0M4eVNwUFdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9mNTU4YWEtNTVlZi00NTBmLThiOTct
MTAwOTBkMWU3ZDk0LzEvam5FdGd5Tlg5NXlFRkRuR0NQVFlNWGh3QzFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9mNTU4YWEtNTVlZi00NTBmLThiOTctMTAwOTBkMWU3ZDk0
LzEveWxGVUZZa0YwZFJNUllqZjBsZ0M4eVNwUFdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCmFmUMA0E
AgACMAcDBQMqCTTAMA0GCSqGSIb3DQEBCwUAA4IBAQAjt54tS2M0luBesu4DGXrg
MVWyniIlJtE0wKNR0VAJBFrIyJ72wvcGjAaYHgl3+dAiE9P6qT1lVaT/dsudQ9Nc
ozDnDXbEhOIdbzzLisafcvJgVU6rt+9ehajg2nqeDgM+0vA7yE63eQzgEF2rfMfL
w+80SHTN1H0DHfaAS+ynNxNGBLv9YZV/jPRTTpVTqFFAWvEyTIryPNMZD619+41l
j+1pwgfSMDZDQ6dNv8Y9ceTqcpRYcC5e2XpfwBfUBVbN9YLkQp3mAY/ahnVd8zUI
bMA8V5slKT1BYvMBb2yKoZkeptzr5qfqWvSquijnXxc1eV47QfenzFND5wz9oneW
-----END CERTIFICATE-----
Generated at Wed Sep 18 23:56:35 2024 by rpki-client on console-fra.rpki-client.org