Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/3JaGeENdafuZqGvLAgZOdokPb_U.roa
File: 3JaGeENdafuZqGvLAgZOdokPb_U.roa (raw, json)
Hash identifier: Wdgb2ICtVwilOJprtrkF6DYcQfWiAFordo6srMxutpI=
Subject key identifier: DC:96:86:78:43:5D:69:FB:99:A8:6B:CB:02:06:4E:76:89:0F:6F:F5
Certificate issuer: /CN=6a211643187ef9258a1325cdfc1d1bf7383be85b
Certificate serial: 018CC86F2FBA82AD72BF7B826F10D8A5F012
Authority key identifier: 6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/3JaGeENdafuZqGvLAgZOdokPb_U.roa
Signing time: Tue 02 Jan 2024 04:29:39 +0000
ROA not before: Tue 02 Jan 2024 04:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15471
IP address blocks: 194.153.232.0/24 maxlen: 24
88.158.0.0/16 maxlen: 24
2a03:fa80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:2f:ba:82:ad:72:bf:7b:82:6f:10:d8:a5:f0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a211643187ef9258a1325cdfc1d1bf7383be85b
Validity
Not Before: Jan 2 04:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc968678435d69fb99a86bcb02064e76890f6ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c7:66:85:58:46:8a:36:27:ac:29:d1:fc:18:
88:a3:83:49:5c:25:6f:11:b5:eb:23:87:d7:a1:e0:
8c:c9:c0:d7:6b:49:d3:6b:cc:7e:5d:2e:ee:ce:eb:
ab:3a:69:d2:31:ae:e2:05:46:ba:35:ec:3d:bd:03:
5b:b5:6f:ff:06:bf:37:75:38:1d:f9:3b:ac:2f:70:
1f:e7:76:d8:1c:1e:02:95:38:93:8e:24:fc:1c:f4:
99:a6:e7:8f:48:db:61:10:e1:f1:53:e0:c4:aa:ea:
b1:8c:7e:5c:3b:45:99:80:50:bd:dc:52:ef:58:0d:
ca:8f:47:7f:55:c9:4b:5d:a1:99:ed:2b:62:81:29:
89:86:f2:f2:3d:bc:17:0d:65:49:17:fd:82:70:bc:
6d:cb:ee:4b:67:9b:1d:38:3e:d3:74:f8:3d:cc:cb:
57:d1:7d:7f:71:b1:0f:9f:8f:91:99:e1:12:37:22:
7d:cf:5d:7a:be:e6:48:5c:ee:c6:a3:c8:07:1d:71:
37:eb:4e:3d:f3:09:ac:e1:ec:34:17:19:ed:ea:6d:
8f:f0:21:75:61:fc:58:e6:5e:c4:0a:41:03:5a:a0:
b8:8d:db:c8:29:e4:2e:68:aa:2d:34:ef:56:52:5e:
f7:f4:7f:8e:21:9a:ab:8d:b1:57:ce:5d:56:46:cd:
93:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:96:86:78:43:5D:69:FB:99:A8:6B:CB:02:06:4E:76:89:0F:6F:F5
X509v3 Authority Key Identifier:
keyid:6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/3JaGeENdafuZqGvLAgZOdokPb_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.158.0.0/16
194.153.232.0/24
IPv6:
2a03:fa80::/32
Signature Algorithm: sha256WithRSAEncryption
78:7b:66:e7:ec:12:4c:82:f5:a8:38:89:6e:8c:3b:ff:2b:cc:
43:d8:e2:23:fd:47:fe:e7:67:83:46:ef:ee:7a:f8:1d:70:ff:
65:5f:21:1b:b2:87:99:37:71:5d:57:e2:f4:63:a4:81:59:90:
77:d4:0e:ce:4f:f3:d8:54:0f:72:00:14:72:ac:b7:c3:ea:0d:
e8:0f:97:c6:a6:7e:d6:65:2f:30:e5:73:86:a8:21:ad:4c:95:
0d:a8:dd:70:dc:37:7a:9e:19:13:d6:a9:92:c7:04:12:a1:8a:
5f:ef:ae:69:0b:26:e4:43:89:84:99:f1:20:13:fd:24:2c:38:
99:39:c1:ee:6e:9a:ca:81:19:83:e2:2e:cb:ff:39:b3:65:36:
fe:84:5f:65:be:c8:fb:44:68:82:69:44:9f:8d:5d:82:d1:a9:
65:98:6d:00:29:f6:ae:3e:0e:fd:ef:48:b4:0f:74:8d:83:3b:
1c:2f:fc:ab:1d:1d:5b:6f:2a:71:e7:a0:50:50:f6:00:0c:cc:
a2:04:d6:cf:d0:5f:74:a3:c9:4d:17:08:33:20:cd:ee:51:64:
be:df:de:75:af:6e:4d:44:0f:13:9b:5a:89:90:97:99:64:af:
bb:75:3a:69:81:f1:37:e7:e1:ba:8c:a2:44:83:ba:ee:1c:38:
29:c5:f6:a7
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYzIby+6gq1yv3uCbxDYpfASMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMjExNjQzMTg3ZWY5MjU4YTEzMjVjZGZjMWQxYmY3Mzgz
YmU4NWIwHhcNMjQwMTAyMDQyOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzk2ODY3ODQzNWQ2OWZiOTlhODZiY2IwMjA2NGU3Njg5MGY2ZmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sdmhVhGijYnrCnR/BiIo4NJXCVv
EbXrI4fXoeCMycDXa0nTa8x+XS7uzuurOmnSMa7iBUa6New9vQNbtW//Br83dTgd
+TusL3Af53bYHB4ClTiTjiT8HPSZpuePSNthEOHxU+DEquqxjH5cO0WZgFC93FLv
WA3Kj0d/VclLXaGZ7StigSmJhvLyPbwXDWVJF/2CcLxty+5LZ5sdOD7TdPg9zMtX
0X1/cbEPn4+RmeESNyJ9z116vuZIXO7Go8gHHXE360498wms4ew0Fxnt6m2P8CF1
YfxY5l7ECkEDWqC4jdvIKeQuaKotNO9WUl739H+OIZqrjbFXzl1WRs2T4wIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFNyWhnhDXWn7mahrywIGTnaJD2/1MB8GA1UdIwQY
MBaAFGohFkMYfvklihMlzfwdG/c4O+hbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWlFV1F4aC0tU1dLRXlYTl9CMGI5emc3NkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iNmExY2QtNjVhMC00OWQzLTljNWYt
ZjA2ZmM0OGM4ZTRjLzEvM0phR2VFTmRhZnVacUd2TEFnWk9kb2tQYl9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9iNmExY2QtNjVhMC00OWQzLTljNWYtZjA2ZmM0OGM4ZTRj
LzEvYWlFV1F4aC0tU1dLRXlYTl9CMGI5emc3NkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwMAWJ4DBADC
megwDQQCAAIwBwMFACoD+oAwDQYJKoZIhvcNAQELBQADggEBAHh7ZufsEkyC9ag4
iW6MO/8rzEPY4iP9R/7nZ4NG7+56+B1w/2VfIRuyh5k3cV1X4vRjpIFZkHfUDs5P
89hUD3IAFHKst8PqDegPl8amftZlLzDlc4aoIa1MlQ2o3XDcN3qeGRPWqZLHBBKh
il/vrmkLJuRDiYSZ8SAT/SQsOJk5we5umsqBGYPiLsv/ObNlNv6EX2W+yPtEaIJp
RJ+NXYLRqWWYbQAp9q4+Dv3vSLQPdI2DOxwv/KsdHVtvKnHnoFBQ9gAMzKIE1s/Q
X3SjyU0XCDMgze5RZL7f3nWvbk1EDxObWomQl5lkr7t1OmmB8Tfn4bqMokSDuu4c
OCnF9qc=
-----END CERTIFICATE-----
Generated at Wed Jun 26 04:48:56 2024 by rpki-client on console-fra.rpki-client.org