Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/JAj9CljS7zHkXT3iBvtztkHE5bE.roa
File: JAj9CljS7zHkXT3iBvtztkHE5bE.roa (raw, json)
Hash identifier: XFjXSdac7UTfyBfCKqoUoqv40UtDiRPZ6DMHLBfOe/U=
Subject key identifier: 24:08:FD:0A:58:D2:EF:31:E4:5D:3D:E2:06:FB:73:B6:41:C4:E5:B1
Certificate issuer: /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Certificate serial: 018CC6B7F6ECE8A00336475537CF4F2BC493
Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/JAj9CljS7zHkXT3iBvtztkHE5bE.roa
Signing time: Mon 01 Jan 2024 20:29:54 +0000
ROA not before: Mon 01 Jan 2024 20:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43754
IP address blocks: 212.23.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:f6:ec:e8:a0:03:36:47:55:37:cf:4f:2b:c4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Validity
Not Before: Jan 1 20:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2408fd0a58d2ef31e45d3de206fb73b641c4e5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c2:45:4a:01:fd:cc:13:33:ea:5f:3f:b4:3c:
c7:cb:ad:85:58:13:03:b1:e0:41:0a:26:ae:7d:c0:
36:91:6b:74:81:32:1d:91:b8:9d:52:5b:81:1a:49:
82:a0:4b:b4:3b:5c:f3:61:bb:11:a6:56:65:09:ce:
0f:43:38:4a:78:c7:0a:00:b7:55:ca:e5:ef:db:00:
5c:ff:f1:59:4f:18:ca:a9:ec:31:83:79:29:44:22:
58:fa:72:74:e0:52:39:9d:6b:82:bf:6b:17:cd:ca:
7a:c1:6c:97:b7:2d:c5:85:ac:31:db:26:b8:6e:d3:
2e:9c:9c:00:b9:9c:50:3b:2e:00:fb:d6:d5:3e:37:
2d:09:5c:35:a5:40:6d:98:45:18:a9:81:da:da:23:
d0:60:52:98:63:48:55:e0:c3:3f:5e:6b:5d:99:af:
73:48:76:09:f9:51:19:1a:01:bd:f3:2f:89:d8:3d:
15:b6:44:27:94:4b:aa:82:00:f6:bb:a0:5d:6a:ee:
df:69:5f:81:0c:52:14:2a:21:18:6c:4b:52:b8:7b:
d4:c6:e6:fa:ae:7c:02:71:cf:52:dd:93:fd:ad:ba:
dd:6e:05:5b:18:67:ce:e0:bf:47:43:73:f7:e0:d1:
18:d8:f1:7f:75:22:6d:13:e0:1f:f7:98:bf:59:26:
21:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:08:FD:0A:58:D2:EF:31:E4:5D:3D:E2:06:FB:73:B6:41:C4:E5:B1
X509v3 Authority Key Identifier:
keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/JAj9CljS7zHkXT3iBvtztkHE5bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.216.0/24
Signature Algorithm: sha256WithRSAEncryption
34:0e:2a:1c:7c:7e:5f:25:59:3e:a4:19:97:72:1f:bc:31:04:
7b:44:f4:a0:2c:53:bb:bb:00:c1:dd:27:d0:4e:9b:20:e6:cd:
c1:fd:e9:fc:11:20:4f:a5:b3:ab:32:db:d3:0c:bf:af:53:df:
cb:e7:0a:f3:36:c8:87:34:68:10:9b:17:10:3c:40:10:f8:cc:
a1:3c:74:18:c6:11:f7:6e:79:ff:e8:3d:8a:bc:ef:af:ec:e6:
25:53:9d:4c:ee:c0:ef:47:01:3b:46:82:4d:16:3c:5d:59:24:
13:8a:40:b5:85:80:a1:b5:fc:c2:8b:b2:50:aa:30:60:bc:41:
d8:76:30:bd:b9:52:0a:fa:ee:64:76:e7:ee:7f:68:df:b5:96:
55:ec:e4:03:e7:4c:01:10:d7:9a:04:17:92:5f:85:73:87:e6:
80:1f:a8:d5:03:de:5c:98:c8:79:d6:b0:e1:ad:fd:8f:0e:95:
98:46:ad:04:86:3b:75:ce:b6:0a:48:b2:5d:ef:bb:f1:96:2c:
c1:db:f1:4b:0b:6a:88:15:29:aa:93:38:88:ab:6b:02:ff:af:
e9:fe:17:6e:d0:66:26:d8:dd:cc:77:bc:65:6d:8b:55:65:4e:
70:5b:4d:ca:aa:63:e2:cb:f3:67:b3:bd:c7:a8:99:1e:f5:60:
a2:3c:0a:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGt/bs6KADNkdVN89PK8STMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjkxZGJhZmEzYThkZTA3MGIwNzAyMmRlOWFkZjc0MzQx
ZmI0ZjIwHhcNMjQwMTAxMjAyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDA4ZmQwYTU4ZDJlZjMxZTQ1ZDNkZTIwNmZiNzNiNjQxYzRlNWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sJFSgH9zBMz6l8/tDzHy62FWBMD
seBBCiaufcA2kWt0gTIdkbidUluBGkmCoEu0O1zzYbsRplZlCc4PQzhKeMcKALdV
yuXv2wBc//FZTxjKqewxg3kpRCJY+nJ04FI5nWuCv2sXzcp6wWyXty3Fhawx2ya4
btMunJwAuZxQOy4A+9bVPjctCVw1pUBtmEUYqYHa2iPQYFKYY0hV4MM/Xmtdma9z
SHYJ+VEZGgG98y+J2D0VtkQnlEuqggD2u6Bdau7faV+BDFIUKiEYbEtSuHvUxub6
rnwCcc9S3ZP9rbrdbgVbGGfO4L9HQ3P34NEY2PF/dSJtE+Af95i/WSYhHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCQI/QpY0u8x5F094gb7c7ZBxOWxMB8GA1UdIwQY
MBaAFOBpHbr6Oo3gcLBwIt6a33Q0H7TyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mNzVjN2QtZTViMy00NDJmLWEwODQt
ZmQ0OWViM2YxOWIxLzEvSkFqOUNsalM3ekhrWFQzaUJ2dHp0a0hFNWJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9mNzVjN2QtZTViMy00NDJmLWEwODQtZmQ0OWViM2YxOWIx
LzEvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BfYMA0G
CSqGSIb3DQEBCwUAA4IBAQA0DiocfH5fJVk+pBmXch+8MQR7RPSgLFO7uwDB3SfQ
Tpsg5s3B/en8ESBPpbOrMtvTDL+vU9/L5wrzNsiHNGgQmxcQPEAQ+MyhPHQYxhH3
bnn/6D2KvO+v7OYlU51M7sDvRwE7RoJNFjxdWSQTikC1hYChtfzCi7JQqjBgvEHY
djC9uVIK+u5kdufuf2jftZZV7OQD50wBENeaBBeSX4Vzh+aAH6jVA95cmMh51rDh
rf2PDpWYRq0Ehjt1zrYKSLJd77vxlizB2/FLC2qIFSmqkziIq2sC/6/p/hdu0GYm
2N3Md7xlbYtVZU5wW03KqmPiy/Nns73HqJke9WCiPAqb
-----END CERTIFICATE-----
Generated at Sun May 19 21:57:18 2024 by rpki-client on console-ams.rpki-client.org