Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/jP8H1ojEACltRTZkla3_yetVdVA.roa
File: jP8H1ojEACltRTZkla3_yetVdVA.roa (raw, json)
Hash identifier: bgSYSOPG8ivUYvml8OIwBc5hEMTcp9N+4kpcb1T4Z88=
Subject key identifier: 8C:FF:07:D6:88:C4:00:29:6D:45:36:64:95:AD:FF:C9:EB:55:75:50
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 018CC86EF92F3A2AE30168DDF79326C4DD55
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/jP8H1ojEACltRTZkla3_yetVdVA.roa
Signing time: Tue 02 Jan 2024 04:29:25 +0000
ROA not before: Tue 02 Jan 2024 04:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35280
IP address blocks: 185.6.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:f9:2f:3a:2a:e3:01:68:dd:f7:93:26:c4:dd:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Jan 2 04:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cff07d688c400296d45366495adffc9eb557550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6d:a1:c7:6a:bc:eb:3b:9a:e4:b8:e0:eb:92:
8b:e4:ea:ad:c8:b3:93:1a:1e:a9:41:3f:b5:90:1b:
d7:ff:78:67:e8:2d:48:58:1c:33:10:e0:94:6e:cb:
f8:43:31:5e:3e:3c:4d:7f:8e:bc:01:16:dc:63:c4:
ba:ec:24:18:4e:05:8d:93:b7:78:99:ab:05:c3:ae:
fd:6e:89:2c:b7:40:89:b9:8d:15:67:3c:7a:59:90:
00:67:54:73:99:df:01:1e:9b:fe:45:9a:cc:05:71:
4f:28:5f:71:fa:ab:44:d8:c6:0c:75:68:b2:0d:84:
2c:af:29:ea:52:55:4d:16:1c:d7:c3:d9:43:5f:0d:
44:34:a7:de:64:1a:e5:83:80:73:4e:96:c2:b4:5a:
f6:f7:77:f8:aa:e7:37:bd:f9:bb:fd:17:67:fd:d5:
cc:89:16:92:c6:bc:ee:ec:0e:5a:d4:be:a5:8c:32:
cb:6c:8a:da:de:eb:74:62:db:83:88:cc:41:7d:fe:
fd:ee:5c:a3:92:d2:7a:01:6d:d6:39:7d:c8:24:0b:
61:38:64:89:5b:88:8d:e8:38:d1:48:68:b4:3f:a0:
2e:e4:f1:5e:e9:f7:69:e1:90:d0:9f:a2:10:1a:61:
23:d0:8c:c8:49:8c:ad:bf:6b:55:fb:cb:2f:e0:b2:
95:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FF:07:D6:88:C4:00:29:6D:45:36:64:95:AD:FF:C9:EB:55:75:50
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/jP8H1ojEACltRTZkla3_yetVdVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.60.0/24
Signature Algorithm: sha256WithRSAEncryption
69:1a:b7:7e:df:57:31:cd:d1:7b:99:d8:4d:b7:f9:8c:20:6c:
e0:a0:1d:d3:7c:33:f9:17:33:c9:92:5b:b9:89:24:e7:b0:8f:
ad:27:fb:89:3c:0b:fd:e5:1d:33:1a:fd:9b:14:b1:da:56:72:
ad:10:63:20:fb:3f:50:fa:97:d9:03:57:09:0b:37:19:d8:b5:
70:7f:2a:82:39:94:7c:16:08:14:89:88:f1:02:01:44:52:9b:
7c:2b:5b:7b:7c:73:cc:e3:22:fc:53:55:fe:74:2b:71:37:f3:
5b:89:fc:01:24:3c:21:1e:50:a9:04:63:ae:0a:c2:65:bc:ea:
92:48:e1:36:4f:18:24:50:a0:83:ad:b1:55:47:cf:a8:95:44:
d8:b3:15:85:a8:dc:05:2a:b2:da:98:08:0e:26:6a:84:69:f9:
f6:f6:4f:10:14:37:b4:b0:06:62:48:d6:39:0a:32:07:17:b7:
56:cb:10:df:68:ca:64:fa:54:e5:be:32:f1:44:45:a2:6f:c5:
eb:65:50:4a:df:32:04:46:81:c1:f9:a7:52:14:4f:94:ca:7d:
64:b1:ad:0a:ad:06:93:d7:c0:a6:2f:eb:83:de:4d:8a:6b:c1:
8e:d3:e3:d1:72:3a:af:74:85:80:23:0d:23:e5:96:86:d1:46:
0a:26:7b:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIbvkvOirjAWjd95MmxN1VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZWQ2NGM5M2RkZmRmMmY0OWI3ZWExYzIzZWFhZDA4NzAy
NDlhMzMwHhcNMjQwMTAyMDQyOTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2ZmMDdkNjg4YzQwMDI5NmQ0NTM2NjQ5NWFkZmZjOWViNTU3NTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm2hx2q86zua5Ljg65KL5OqtyLOT
Gh6pQT+1kBvX/3hn6C1IWBwzEOCUbsv4QzFePjxNf468ARbcY8S67CQYTgWNk7d4
masFw679bokst0CJuY0VZzx6WZAAZ1Rzmd8BHpv+RZrMBXFPKF9x+qtE2MYMdWiy
DYQsrynqUlVNFhzXw9lDXw1ENKfeZBrlg4BzTpbCtFr293f4quc3vfm7/Rdn/dXM
iRaSxrzu7A5a1L6ljDLLbIra3ut0YtuDiMxBff797lyjktJ6AW3WOX3IJAthOGSJ
W4iN6DjRSGi0P6Au5PFe6fdp4ZDQn6IQGmEj0IzISYytv2tV+8sv4LKVJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIz/B9aIxAApbUU2ZJWt/8nrVXVQMB8GA1UdIwQY
MBaAFMntZMk9398vSbfqHCPqrQhwJJozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yYTJhYjItMzA5OC00YTBmLTgwOWMt
MzVlZDViNTNkYTA1LzEvalA4SDFvakVBQ2x0UlRaa2xhM195ZXRWZFZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yYTJhYjItMzA5OC00YTBmLTgwOWMtMzVlZDViNTNkYTA1
LzEveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQY8MA0G
CSqGSIb3DQEBCwUAA4IBAQBpGrd+31cxzdF7mdhNt/mMIGzgoB3TfDP5FzPJklu5
iSTnsI+tJ/uJPAv95R0zGv2bFLHaVnKtEGMg+z9Q+pfZA1cJCzcZ2LVwfyqCOZR8
FggUiYjxAgFEUpt8K1t7fHPM4yL8U1X+dCtxN/NbifwBJDwhHlCpBGOuCsJlvOqS
SOE2TxgkUKCDrbFVR8+olUTYsxWFqNwFKrLamAgOJmqEafn29k8QFDe0sAZiSNY5
CjIHF7dWyxDfaMpk+lTlvjLxREWib8XrZVBK3zIERoHB+adSFE+Uyn1ksa0KrQaT
18CmL+uD3k2Ka8GO0+PRcjqvdIWAIw0j5ZaG0UYKJnsX
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:45:27 2024 by rpki-client on console-ams.rpki-client.org