Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/7JGLMJvOQV4BCEl1Xx9cTQ2ogpE.roa
File: 7JGLMJvOQV4BCEl1Xx9cTQ2ogpE.roa (raw, json)
Hash identifier: 43zXcDmNz4YBNXaJUmAUgPGOfaCNR/jtltw7UpnbCd8=
Subject key identifier: EC:91:8B:30:9B:CE:41:5E:01:08:49:75:5F:1F:5C:4D:0D:A8:82:91
Certificate issuer: /CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Certificate serial: 018CC9BBFCBC5F09EBB67941BE97CAD6ABE8
Authority key identifier: 0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/7JGLMJvOQV4BCEl1Xx9cTQ2ogpE.roa
Signing time: Tue 02 Jan 2024 10:33:09 +0000
ROA not before: Tue 02 Jan 2024 10:33:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212122
IP address blocks: 195.7.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:fc:bc:5f:09:eb:b6:79:41:be:97:ca:d6:ab:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Validity
Not Before: Jan 2 10:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec918b309bce415e010849755f1f5c4d0da88291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3a:29:21:1c:a9:c9:29:34:c0:2f:f2:1d:d0:
07:cb:b2:aa:6d:01:30:97:76:29:02:60:17:08:1d:
7c:61:c4:dc:d0:8e:65:c2:da:6e:09:a0:91:69:2f:
0e:fc:50:6f:6c:ac:98:e2:bd:f0:34:81:39:b4:b6:
c3:4e:60:6d:bb:86:4d:74:18:fa:ca:d3:c5:31:43:
fd:47:67:c8:5a:60:91:e3:f3:29:d4:17:61:92:44:
26:7b:ad:78:c8:87:7a:11:93:17:58:ea:30:ea:81:
d8:7c:ec:ef:4a:da:82:af:15:43:a9:38:40:a3:f0:
9f:09:df:1e:51:59:26:d5:0a:79:b0:63:0b:da:27:
d9:2a:5e:c8:e4:40:cd:b1:11:1a:3f:ef:42:c8:d4:
69:1f:97:42:57:94:c4:4c:d6:43:41:3a:97:f4:9c:
31:da:41:64:b5:be:41:76:0e:8e:e7:a1:1f:f1:7c:
c8:cc:d6:18:0d:e0:48:32:fd:1f:67:09:13:11:49:
d9:c7:e2:5e:30:d3:13:b0:e4:72:79:9f:f4:bc:8e:
c6:e9:80:ee:cb:47:5d:6d:7f:fe:b4:a7:ae:d2:f1:
7e:5c:b9:91:08:58:51:28:79:16:3e:75:1e:24:c2:
8e:95:d2:3e:ce:e7:9a:90:9b:c3:06:2d:28:db:0d:
bc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:91:8B:30:9B:CE:41:5E:01:08:49:75:5F:1F:5C:4D:0D:A8:82:91
X509v3 Authority Key Identifier:
keyid:0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/7JGLMJvOQV4BCEl1Xx9cTQ2ogpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.7.10.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:7f:5a:25:fb:4d:81:3a:41:e0:58:5e:78:8c:d0:2d:0d:f4:
90:6a:75:8d:bb:75:8e:51:51:02:e4:67:b1:70:b7:3f:c3:90:
29:21:8e:45:70:85:1f:20:10:b1:5f:f7:e1:34:64:ff:59:88:
99:f2:ea:74:4b:7a:69:2d:f0:da:56:40:87:79:c0:87:32:75:
46:74:58:0a:6b:27:73:30:cb:21:c6:d8:63:a7:da:5e:cb:ef:
21:53:1c:36:16:c8:5d:02:3f:34:ab:4c:95:66:ad:73:65:79:
52:8e:15:59:c2:d2:a6:df:55:a6:97:54:6a:42:56:4a:69:17:
36:f9:bd:71:75:d5:ad:08:c8:c4:32:38:58:df:ac:c5:38:74:
1b:c0:bb:d4:5d:23:f2:cc:20:50:44:8f:10:49:2d:4b:ad:40:
4f:b8:1f:43:f0:25:f6:28:12:30:90:98:06:f4:9c:9b:ec:07:
24:60:8e:c5:7c:c5:13:df:c2:07:6e:8c:20:2e:13:c5:46:60:
c4:26:b7:4d:83:94:d1:ec:b3:2b:cd:67:20:bb:84:4f:91:80:
69:1f:82:4d:6e:83:ce:99:47:13:ac:0f:77:b4:69:87:ad:f2:
a7:ad:a8:cd:42:fd:48:46:8a:9c:0e:7b:88:d1:09:f4:db:d1:
c5:c8:fd:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJu/y8XwnrtnlBvpfK1qvoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNzE2MWU2MjJmNjNjMGRiODU2OGQ4Y2I0YzRkN2MwZDk4
MDgzNDYwHhcNMjQwMTAyMTAzMzA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzkxOGIzMDliY2U0MTVlMDEwODQ5NzU1ZjFmNWM0ZDBkYTg4MjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDopIRypySk0wC/yHdAHy7KqbQEw
l3YpAmAXCB18YcTc0I5lwtpuCaCRaS8O/FBvbKyY4r3wNIE5tLbDTmBtu4ZNdBj6
ytPFMUP9R2fIWmCR4/Mp1BdhkkQme614yId6EZMXWOow6oHYfOzvStqCrxVDqThA
o/CfCd8eUVkm1Qp5sGML2ifZKl7I5EDNsREaP+9CyNRpH5dCV5TETNZDQTqX9Jwx
2kFktb5Bdg6O56Ef8XzIzNYYDeBIMv0fZwkTEUnZx+JeMNMTsORyeZ/0vI7G6YDu
y0ddbX/+tKeu0vF+XLmRCFhRKHkWPnUeJMKOldI+zueakJvDBi0o2w28WwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOyRizCbzkFeAQhJdV8fXE0NqIKRMB8GA1UdIwQY
MBaAFAxxYeYi9jwNuFaNjLTE18DZgINGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREhGaDVpTDJQQTI0Vm8yTXRNVFh3Tm1BZzBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMWYwOGMtMDY1ZS00YWMxLThlODAt
YjE1ZTNmMDllMDFiLzEvN0pHTE1Kdk9RVjRCQ0VsMVh4OWNUUTJvZ3BFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wMWYwOGMtMDY1ZS00YWMxLThlODAtYjE1ZTNmMDllMDFi
LzEvREhGaDVpTDJQQTI0Vm8yTXRNVFh3Tm1BZzBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwcKMA0G
CSqGSIb3DQEBCwUAA4IBAQClf1ol+02BOkHgWF54jNAtDfSQanWNu3WOUVEC5Gex
cLc/w5ApIY5FcIUfIBCxX/fhNGT/WYiZ8up0S3ppLfDaVkCHecCHMnVGdFgKaydz
MMshxthjp9pey+8hUxw2FshdAj80q0yVZq1zZXlSjhVZwtKm31Wml1RqQlZKaRc2
+b1xddWtCMjEMjhY36zFOHQbwLvUXSPyzCBQRI8QSS1LrUBPuB9D8CX2KBIwkJgG
9Jyb7AckYI7FfMUT38IHbowgLhPFRmDEJrdNg5TR7LMrzWcgu4RPkYBpH4JNboPO
mUcTrA93tGmHrfKnrajNQv1IRoqcDnuI0Qn029HFyP2v
-----END CERTIFICATE-----
Generated at Sat Jun 1 09:54:17 2024 by rpki-client on console-ams.rpki-client.org