Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/jxiOsdvucmnDVsgs9p5wi2RadOc.roa
File: jxiOsdvucmnDVsgs9p5wi2RadOc.roa (raw, json)
Hash identifier: CHBYHHTtadzNTygafnm1iSDB2OE3JS7L7mpSWf609BI=
Subject key identifier: 8F:18:8E:B1:DB:EE:72:69:C3:56:C8:2C:F6:9E:70:8B:64:5A:74:E7
Certificate issuer: /CN=ba68595997900ded300e9925709da627e93f363a
Certificate serial: 018CC49383F1C16D2D98E0CA7296E27122E2
Authority key identifier: BA:68:59:59:97:90:0D:ED:30:0E:99:25:70:9D:A6:27:E9:3F:36:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/jxiOsdvucmnDVsgs9p5wi2RadOc.roa
Signing time: Mon 01 Jan 2024 10:30:51 +0000
ROA not before: Mon 01 Jan 2024 10:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3215
IP address blocks: 194.5.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:83:f1:c1:6d:2d:98:e0:ca:72:96:e2:71:22:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba68595997900ded300e9925709da627e93f363a
Validity
Not Before: Jan 1 10:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f188eb1dbee7269c356c82cf69e708b645a74e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f0:9e:27:6b:f5:f3:bf:0a:fa:53:31:57:bb:
70:9f:16:16:b0:f1:56:51:dc:b9:27:0c:bb:ba:d5:
6c:ad:cd:3a:ab:90:f7:2c:00:d8:3f:74:0a:85:0d:
7e:77:54:82:24:81:f6:61:09:59:44:7b:38:4d:1c:
b3:73:1a:0e:df:78:f4:ac:a6:9f:ea:4d:6c:f2:b3:
2b:be:e8:b7:eb:5c:59:b4:fc:8d:b6:cb:17:b4:e7:
86:c2:3e:cb:87:3e:cd:f3:75:d9:48:48:15:65:ec:
ea:f9:f0:8e:b0:3b:89:b0:db:e1:fb:c2:aa:13:35:
69:36:33:09:8f:00:11:6d:d3:05:df:51:3e:ca:68:
b9:08:a9:43:a0:cb:af:06:15:32:dc:2e:a3:9b:72:
24:24:43:58:33:11:ca:63:52:57:84:0e:39:fb:bf:
91:ed:76:3f:a4:3c:4a:98:42:cf:6d:14:48:38:ef:
71:69:22:5e:0c:00:21:29:a9:3e:c4:4a:eb:61:1b:
71:cd:d4:36:12:4c:59:26:e4:5e:5f:1d:7e:86:d0:
c9:83:bb:fb:d9:b1:d7:03:6a:a5:44:3a:ea:86:04:
4e:93:13:15:2e:aa:ae:86:3b:5b:bb:ed:cd:b6:77:
f3:c1:53:7d:f5:9d:78:8d:86:fe:95:15:55:72:af:
fc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:18:8E:B1:DB:EE:72:69:C3:56:C8:2C:F6:9E:70:8B:64:5A:74:E7
X509v3 Authority Key Identifier:
keyid:BA:68:59:59:97:90:0D:ED:30:0E:99:25:70:9D:A6:27:E9:3F:36:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/jxiOsdvucmnDVsgs9p5wi2RadOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.189.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:a2:0e:43:f8:f1:68:49:ce:1d:5e:f0:f5:64:af:9a:76:76:
53:85:59:9e:92:4f:1c:f8:f7:e6:fc:29:4c:38:14:03:3c:39:
ac:aa:80:37:a6:08:73:41:02:64:e3:af:d7:ee:99:7e:89:1d:
ab:ea:53:7f:35:8e:d6:c5:df:04:f2:45:9c:cc:f9:3a:ef:62:
bc:d0:4e:4e:c7:99:3f:39:62:df:19:85:26:bd:d8:44:f7:6f:
14:23:bc:c6:f9:fe:97:dd:17:47:8b:e4:8c:bd:ff:36:0e:f5:
44:fc:2b:6e:97:e8:e8:70:61:61:ac:7b:cf:e7:d8:de:29:ea:
39:16:2b:dc:69:b0:62:35:12:f4:ea:02:d7:14:fe:e6:5a:ff:
59:5b:4b:90:44:cb:82:a8:f6:c0:2a:77:e0:29:07:4e:41:0e:
ce:25:7e:02:13:8e:25:8b:19:1d:50:28:a4:cc:d8:b1:74:66:
29:cd:f2:d5:c1:43:76:5b:98:87:a3:ce:f9:ae:f8:cf:8e:a1:
8f:80:57:d7:19:ba:a2:3b:92:7a:4c:cd:e0:8f:97:38:50:9b:
79:d4:ab:83:6e:e9:84:f6:cb:3f:c9:f4:81:6a:36:08:00:ed:
cc:1d:c6:3b:99:8f:fe:80:0d:eb:c2:ee:6b:e7:40:b4:d2:d3:
72:05:30:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEk4PxwW0tmODKcpbicSLiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNjg1OTU5OTc5MDBkZWQzMDBlOTkyNTcwOWRhNjI3ZTkz
ZjM2M2EwHhcNMjQwMTAxMTAzMDUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjE4OGViMWRiZWU3MjY5YzM1NmM4MmNmNjllNzA4YjY0NWE3NGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvCeJ2v1878K+lMxV7twnxYWsPFW
Udy5Jwy7utVsrc06q5D3LADYP3QKhQ1+d1SCJIH2YQlZRHs4TRyzcxoO33j0rKaf
6k1s8rMrvui361xZtPyNtssXtOeGwj7Lhz7N83XZSEgVZezq+fCOsDuJsNvh+8Kq
EzVpNjMJjwARbdMF31E+ymi5CKlDoMuvBhUy3C6jm3IkJENYMxHKY1JXhA45+7+R
7XY/pDxKmELPbRRIOO9xaSJeDAAhKak+xErrYRtxzdQ2EkxZJuReXx1+htDJg7v7
2bHXA2qlRDrqhgROkxMVLqquhjtbu+3NtnfzwVN99Z14jYb+lRVVcq/85QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI8YjrHb7nJpw1bILPaecItkWnTnMB8GA1UdIwQY
MBaAFLpoWVmXkA3tMA6ZJXCdpifpPzY6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW1oWldaZVFEZTB3RHBrbGNKMm1KLWtfTmpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80NzJhNGQtZmNhZS00NDU0LTk5Njct
MDJkZWQ5YjJlMGM5LzEvanhpT3NkdnVjbW5EVnNnczlwNXdpMlJhZE9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS80NzJhNGQtZmNhZS00NDU0LTk5NjctMDJkZWQ5YjJlMGM5
LzEvdW1oWldaZVFEZTB3RHBrbGNKMm1KLWtfTmpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgW9MA0G
CSqGSIb3DQEBCwUAA4IBAQCbog5D+PFoSc4dXvD1ZK+adnZThVmekk8c+Pfm/ClM
OBQDPDmsqoA3pghzQQJk46/X7pl+iR2r6lN/NY7Wxd8E8kWczPk672K80E5Ox5k/
OWLfGYUmvdhE928UI7zG+f6X3RdHi+SMvf82DvVE/Ctul+jocGFhrHvP59jeKeo5
FivcabBiNRL06gLXFP7mWv9ZW0uQRMuCqPbAKnfgKQdOQQ7OJX4CE44lixkdUCik
zNixdGYpzfLVwUN2W5iHo875rvjPjqGPgFfXGbqiO5J6TM3gj5c4UJt51KuDbumE
9ss/yfSBajYIAO3MHcY7mY/+gA3rwu5r50C00tNyBTD6
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:44:50 2024 by rpki-client on console-fra.rpki-client.org