Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/JDQ_93JM87mkmHZAECyLKF_mwec.roa
File: JDQ_93JM87mkmHZAECyLKF_mwec.roa (raw, json)
Hash identifier: IzRMQR8/LsferuM/cQdkznc585yavt99IYIgWWwLP4Y=
Subject key identifier: 24:34:3F:F7:72:4C:F3:B9:A4:98:76:40:10:2C:8B:28:5F:E6:C1:E7
Certificate issuer: /CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Certificate serial: 018CC348984BAAEE449B0D13BB68893C1779
Authority key identifier: AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/JDQ_93JM87mkmHZAECyLKF_mwec.roa
Signing time: Mon 01 Jan 2024 04:29:23 +0000
ROA not before: Mon 01 Jan 2024 04:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41359
IP address blocks: 185.220.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:98:4b:aa:ee:44:9b:0d:13:bb:68:89:3c:17:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Validity
Not Before: Jan 1 04:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24343ff7724cf3b9a4987640102c8b285fe6c1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c8:d2:fd:13:a0:ee:33:6a:c1:bd:12:e8:80:
4e:16:58:dc:d2:8a:d6:44:84:aa:ad:7a:0c:18:6b:
b1:f4:0d:1f:5a:fe:62:1a:18:5d:d1:3a:25:4f:3d:
7e:2a:d2:05:50:e0:4d:a2:64:04:df:a7:dc:27:2a:
91:63:34:ba:c4:c7:df:fc:ba:1e:81:b3:12:ef:92:
08:00:34:8c:83:39:55:fe:02:6a:98:64:7c:57:1a:
41:98:0a:6a:c9:29:5e:6b:65:17:39:98:14:2c:9f:
c4:dc:79:0a:c8:f3:b9:e9:0d:46:20:11:88:00:41:
9a:c5:d9:eb:66:ba:67:c1:8e:64:ee:09:ae:0c:e4:
65:f9:3c:94:79:00:d4:b1:20:27:9b:12:79:aa:5c:
2c:fd:0c:7b:d5:a3:b3:47:b5:ed:10:fd:2d:55:3b:
ca:67:a4:0e:b2:1d:28:31:69:d8:1a:1c:cc:da:e4:
87:d6:c6:71:68:99:cb:08:16:f4:77:fe:bf:02:37:
da:45:70:d7:f5:ac:df:d0:6b:88:b0:fd:e1:ba:03:
ff:90:3a:67:12:b0:8c:24:2d:f8:98:47:52:62:b9:
39:91:3b:f5:b6:59:8a:eb:fb:50:20:59:7a:e5:17:
ed:62:88:59:33:45:01:c7:60:38:e0:ef:ff:81:49:
bb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:34:3F:F7:72:4C:F3:B9:A4:98:76:40:10:2C:8B:28:5F:E6:C1:E7
X509v3 Authority Key Identifier:
keyid:AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/JDQ_93JM87mkmHZAECyLKF_mwec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.220.0/24
Signature Algorithm: sha256WithRSAEncryption
80:48:4d:8c:55:1b:22:49:d9:5b:3c:57:07:40:1e:9d:a2:6c:
ab:1b:53:32:00:68:05:2e:ed:34:9e:b3:79:94:e1:bf:9e:cd:
59:e8:7b:68:d6:2b:07:a5:e8:ca:98:3d:a7:b1:77:86:92:32:
96:05:3b:92:8f:de:eb:bb:72:fb:67:3e:30:1f:20:80:50:1b:
80:20:ce:49:42:66:eb:34:7c:07:b8:81:8b:e8:0f:ab:b1:0a:
6c:21:90:53:1d:9c:17:68:2a:a4:d2:55:56:19:e0:f2:c9:70:
e0:7d:15:1d:61:c4:54:11:24:27:35:ff:45:46:77:df:fd:56:
e4:52:c2:88:68:fa:8a:2e:b1:51:92:85:be:2a:2a:7f:e4:7e:
76:7f:ea:0e:de:36:12:97:f8:57:57:52:3c:a9:a0:7a:20:6e:
40:e0:75:12:d5:e5:6e:f6:d3:d1:ff:c6:5f:33:a2:4a:52:46:
d7:3a:eb:ea:ba:cc:99:a9:66:0d:8b:71:60:5f:9e:79:a2:d2:
53:ff:39:39:82:97:34:5a:59:14:de:9a:f9:6c:e5:e5:fa:cb:
12:d7:f7:f8:57:54:e1:e0:60:d5:97:7a:49:7f:97:ce:23:76:
7b:c7:0e:49:d4:7f:e2:19:b4:c1:8b:06:35:7f:1d:73:7d:5d:
46:00:87:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSJhLqu5Emw0Tu2iJPBd5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZTZmOGNhZTc0OTJkMDY0ZTAzMDcxYzkxNDczOTJlZWRk
NDViYzcwHhcNMjQwMTAxMDQyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDM0M2ZmNzcyNGNmM2I5YTQ5ODc2NDAxMDJjOGIyODVmZTZjMWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocjS/ROg7jNqwb0S6IBOFljc0orW
RISqrXoMGGux9A0fWv5iGhhd0TolTz1+KtIFUOBNomQE36fcJyqRYzS6xMff/Loe
gbMS75IIADSMgzlV/gJqmGR8VxpBmApqySlea2UXOZgULJ/E3HkKyPO56Q1GIBGI
AEGaxdnrZrpnwY5k7gmuDORl+TyUeQDUsSAnmxJ5qlws/Qx71aOzR7XtEP0tVTvK
Z6QOsh0oMWnYGhzM2uSH1sZxaJnLCBb0d/6/AjfaRXDX9azf0GuIsP3hugP/kDpn
ErCMJC34mEdSYrk5kTv1tlmK6/tQIFl65RftYohZM0UBx2A44O//gUm7iQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCQ0P/dyTPO5pJh2QBAsiyhf5sHnMB8GA1UdIwQY
MBaAFK/m+MrnSS0GTgMHHJFHOS7t1FvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci1iNHl1ZEpMUVpPQXdjY2tVYzVMdTNVVzhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jOTg3YjYtZWYwMC00ZDI4LWE0YWUt
NjU0OWNkNTlhYTRmLzEvSkRRXzkzSk04N21rbUhaQUVDeUxLRl9td2VjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9jOTg3YjYtZWYwMC00ZDI4LWE0YWUtNjU0OWNkNTlhYTRm
LzEvci1iNHl1ZEpMUVpPQXdjY2tVYzVMdTNVVzhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudzcMA0G
CSqGSIb3DQEBCwUAA4IBAQCASE2MVRsiSdlbPFcHQB6domyrG1MyAGgFLu00nrN5
lOG/ns1Z6Hto1isHpejKmD2nsXeGkjKWBTuSj97ru3L7Zz4wHyCAUBuAIM5JQmbr
NHwHuIGL6A+rsQpsIZBTHZwXaCqk0lVWGeDyyXDgfRUdYcRUESQnNf9FRnff/Vbk
UsKIaPqKLrFRkoW+Kip/5H52f+oO3jYSl/hXV1I8qaB6IG5A4HUS1eVu9tPR/8Zf
M6JKUkbXOuvqusyZqWYNi3FgX555otJT/zk5gpc0WlkU3pr5bOXl+ssS1/f4V1Th
4GDVl3pJf5fOI3Z7xw5J1H/iGbTBiwY1fx1zfV1GAIdt
-----END CERTIFICATE-----
Generated at Fri Jun 7 17:52:10 2024 by rpki-client on console-ams.rpki-client.org