Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/PJiKOR8pRJ-sXFocffBbQX0uV1w.roa
File: PJiKOR8pRJ-sXFocffBbQX0uV1w.roa (raw, json)
Hash identifier: ClFdLbtH9hQj1FqfnCU5QsPoQ7jMD8YcLz0kFY7AApI=
Subject key identifier: 3C:98:8A:39:1F:29:44:9F:AC:5C:5A:1C:7D:F0:5B:41:7D:2E:57:5C
Certificate issuer: /CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Certificate serial: 018CCA99D9E9EBC36C69A7DF360F8EE330D9
Authority key identifier: 79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/PJiKOR8pRJ-sXFocffBbQX0uV1w.roa
Signing time: Tue 02 Jan 2024 14:35:29 +0000
ROA not before: Tue 02 Jan 2024 14:35:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15577
IP address blocks: 194.187.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:d9:e9:eb:c3:6c:69:a7:df:36:0f:8e:e3:30:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Validity
Not Before: Jan 2 14:35:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c988a391f29449fac5c5a1c7df05b417d2e575c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e2:93:5f:d6:1e:b2:34:8f:10:04:ad:7f:79:
03:48:d8:8e:04:ef:92:b2:bf:c0:7d:8d:12:50:50:
a4:45:5b:84:90:50:8d:95:b6:5d:5d:30:f4:0e:eb:
5f:39:07:8d:6e:de:5d:7b:aa:17:85:3a:89:9c:dc:
08:fd:d3:bc:1e:7c:6e:18:31:e1:30:27:e8:68:16:
5b:5d:e1:4a:0c:54:ad:29:a1:c2:cf:23:01:19:e1:
dd:28:a4:c1:4b:af:d6:ae:3f:8e:1d:e2:ff:bc:d3:
e1:e1:9b:f4:df:52:d0:d7:bd:e9:b9:e8:79:66:4a:
57:83:76:d8:4e:94:99:0f:bd:85:47:7f:5a:37:9f:
99:5f:84:aa:64:51:5c:a4:57:bf:83:39:18:24:14:
ba:d2:42:d8:36:49:33:e6:6b:c8:41:df:4e:97:19:
96:12:79:8e:99:54:df:cc:ec:57:42:fd:68:29:ae:
36:82:5c:40:9e:d1:f3:83:a3:08:6d:6d:4f:f5:0e:
05:1a:7b:18:6a:05:40:f0:3a:99:1e:ac:8a:03:d6:
a3:8d:ea:d9:2d:31:2b:0a:e0:77:13:26:37:7c:ba:
01:b0:58:fd:cd:9b:50:a6:9d:02:0e:eb:6c:e2:30:
c3:d1:18:24:9f:8a:24:f8:66:3d:79:c2:fd:9d:f2:
05:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:98:8A:39:1F:29:44:9F:AC:5C:5A:1C:7D:F0:5B:41:7D:2E:57:5C
X509v3 Authority Key Identifier:
keyid:79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/PJiKOR8pRJ-sXFocffBbQX0uV1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.208.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:74:07:a9:aa:ad:55:40:82:aa:f6:58:61:d8:ba:fe:72:79:
57:bb:a0:06:72:4c:a5:14:14:ba:c3:86:a6:6b:f6:63:ef:f0:
10:d4:5b:e3:e4:85:53:ee:26:e3:92:7d:f1:ba:03:96:82:83:
d5:5f:42:ff:86:73:5c:72:c2:e5:a5:62:33:d6:5f:07:79:b3:
c1:d4:27:58:21:9e:27:06:61:bb:4b:9d:56:a9:49:0a:cc:fd:
fa:60:7c:25:4a:de:dd:92:e4:86:36:83:1d:0d:2c:1a:aa:36:
fd:30:b1:60:59:fe:51:54:a1:98:e6:2b:96:24:1e:09:ac:32:
d7:07:2a:aa:63:06:6d:71:4f:c7:b5:e1:bb:46:38:3b:b8:9a:
b6:39:58:ec:dc:2a:38:22:71:aa:98:6d:1b:98:cb:86:73:cd:
8d:37:25:2c:b5:7c:22:7a:b0:db:e6:74:bc:ec:8d:e9:63:a0:
b8:0f:83:fd:e1:3c:cc:cf:33:3c:7e:45:ae:d1:f1:70:9f:40:
70:f1:cf:06:cd:3f:c6:77:52:72:ab:04:fc:33:05:0b:c7:25:
ef:02:e3:40:71:15:5a:26:7b:bd:1a:f9:6e:b9:d8:b9:bc:c7:
13:e3:a3:ad:64:fa:f5:d7:82:e6:6c:59:b8:30:4f:b4:25:37:
b9:1b:fd:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKmdnp68NsaaffNg+O4zDZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTNiMmMzNjIyZGY5ZTg3OTgyZWE4MzUwOTc4YTZjOTg3
NWE3YzgwHhcNMjQwMTAyMTQzNTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzk4OGEzOTFmMjk0NDlmYWM1YzVhMWM3ZGYwNWI0MTdkMmU1NzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeKTX9YesjSPEAStf3kDSNiOBO+S
sr/AfY0SUFCkRVuEkFCNlbZdXTD0DutfOQeNbt5de6oXhTqJnNwI/dO8HnxuGDHh
MCfoaBZbXeFKDFStKaHCzyMBGeHdKKTBS6/Wrj+OHeL/vNPh4Zv031LQ173pueh5
ZkpXg3bYTpSZD72FR39aN5+ZX4SqZFFcpFe/gzkYJBS60kLYNkkz5mvIQd9OlxmW
EnmOmVTfzOxXQv1oKa42glxAntHzg6MIbW1P9Q4FGnsYagVA8DqZHqyKA9ajjerZ
LTErCuB3EyY3fLoBsFj9zZtQpp0CDuts4jDD0Rgkn4ok+GY9ecL9nfIFUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDyYijkfKUSfrFxaHH3wW0F9LldcMB8GA1UdIwQY
MBaAFHmjssNiLfnoeYLqg1CXimyYdafIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFPeXcySXQtZWg1Z3VxRFVKZUtiSmgxcDhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lNTA2OWItMWNhZC00NWE0LWE2MTkt
YzI0ZmY2ODJmN2FkLzEvUEppS09SOHBSSi1zWEZvY2ZmQmJRWDB1VjF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9lNTA2OWItMWNhZC00NWE0LWE2MTktYzI0ZmY2ODJmN2Fk
LzEvZWFPeXcySXQtZWg1Z3VxRFVKZUtiSmgxcDhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwrvQMA0G
CSqGSIb3DQEBCwUAA4IBAQBcdAepqq1VQIKq9lhh2Lr+cnlXu6AGckylFBS6w4am
a/Zj7/AQ1Fvj5IVT7ibjkn3xugOWgoPVX0L/hnNccsLlpWIz1l8HebPB1CdYIZ4n
BmG7S51WqUkKzP36YHwlSt7dkuSGNoMdDSwaqjb9MLFgWf5RVKGY5iuWJB4JrDLX
ByqqYwZtcU/HteG7Rjg7uJq2OVjs3Co4InGqmG0bmMuGc82NNyUstXwierDb5nS8
7I3pY6C4D4P94TzMzzM8fkWu0fFwn0Bw8c8GzT/Gd1JyqwT8MwULxyXvAuNAcRVa
Jnu9Gvluudi5vMcT46OtZPr114LmbFm4ME+0JTe5G/0V
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:57:10 2024 by rpki-client on console-ams.rpki-client.org