Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/JOBetvQ8Y-HNuXp43JnCQShr7HI.roa
File: JOBetvQ8Y-HNuXp43JnCQShr7HI.roa (raw, json)
Hash identifier: B8muOh/HRWTR2HRcfXrxTXZgfTzww1tnmeTeIHgXc+A=
Subject key identifier: 24:E0:5E:B6:F4:3C:63:E1:CD:B9:7A:78:DC:99:C2:41:28:6B:EC:72
Certificate issuer: /CN=b4d8b27aaa55e51a345f6a4519e367955046c30a
Certificate serial: 0191EA8F5912F015C36BA2B5ED2737531BA0
Authority key identifier: B4:D8:B2:7A:AA:55:E5:1A:34:5F:6A:45:19:E3:67:95:50:46:C3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/JOBetvQ8Y-HNuXp43JnCQShr7HI.roa
Signing time: Fri 13 Sep 2024 08:45:48 +0000
ROA not before: Fri 13 Sep 2024 08:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200729
IP address blocks: 5.191.240.0/20 maxlen: 24
185.96.124.0/24 maxlen: 24
185.96.125.0/24 maxlen: 24
185.96.126.0/24 maxlen: 24
185.96.127.0/24 maxlen: 24
185.143.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ea:8f:59:12:f0:15:c3:6b:a2:b5:ed:27:37:53:1b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d8b27aaa55e51a345f6a4519e367955046c30a
Validity
Not Before: Sep 13 08:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24e05eb6f43c63e1cdb97a78dc99c241286bec72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:de:13:a3:a3:d7:a7:b2:0e:19:c2:1c:4c:
0b:73:7d:51:97:b5:52:74:13:d9:cb:07:1b:7d:a1:
e3:b5:89:5c:79:3c:14:6e:42:01:37:8c:10:49:49:
e1:26:45:46:b9:85:54:39:69:7e:fb:6a:1f:0d:c3:
e6:68:08:ae:5e:f3:64:de:0b:9c:94:07:d0:36:cd:
61:9e:37:49:67:ef:5b:a2:e4:4d:16:cd:fb:33:78:
d7:2d:da:42:9b:bb:97:6b:c4:69:50:98:ce:e8:47:
eb:b3:5f:bc:e4:39:0c:a5:e1:e7:71:65:f3:87:39:
f9:51:8e:ca:42:6f:34:96:6f:12:12:e4:4c:3c:50:
f2:ca:e1:5e:ae:fa:86:bc:7b:4b:70:ca:ec:43:35:
46:93:f8:41:77:aa:fd:95:7b:73:70:80:3a:64:06:
4b:d4:2b:18:4f:58:fd:28:81:7c:b6:9a:d6:c1:36:
19:24:a9:be:6f:bc:52:d9:6c:dc:72:09:0b:0e:49:
2c:18:9c:1a:44:60:51:9c:4d:21:8f:3a:ec:1b:fe:
52:2e:55:47:a1:f5:71:16:20:c6:ca:bd:5e:f1:b7:
11:d1:2a:85:82:5e:89:fa:35:7d:2b:80:6e:ca:7d:
12:00:97:61:30:d5:ff:60:13:b6:48:83:29:b2:c3:
9b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E0:5E:B6:F4:3C:63:E1:CD:B9:7A:78:DC:99:C2:41:28:6B:EC:72
X509v3 Authority Key Identifier:
keyid:B4:D8:B2:7A:AA:55:E5:1A:34:5F:6A:45:19:E3:67:95:50:46:C3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/JOBetvQ8Y-HNuXp43JnCQShr7HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.191.240.0/20
185.96.124.0/22
185.143.196.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:65:70:eb:b2:6c:54:6d:88:3e:92:4a:9b:13:91:4e:c9:08:
4d:cf:c4:cd:94:d6:40:66:18:c3:b2:52:d1:38:82:96:63:51:
5c:6b:87:46:91:29:3a:21:ef:49:86:30:75:28:0f:7e:18:1d:
70:4b:b2:be:62:93:d8:6f:03:a3:db:95:92:0c:5e:16:35:6f:
b9:d1:ad:8b:98:32:57:3e:42:73:4a:8d:a2:f5:08:a0:79:0f:
d5:ac:e9:63:e2:f5:20:ec:1f:87:90:86:49:c5:55:a2:28:4a:
f9:92:6c:d7:96:45:b2:4d:74:29:09:62:ef:4e:23:62:65:3b:
42:e9:02:56:e0:15:c6:54:54:fe:e1:39:f2:66:06:20:18:e1:
91:99:bb:12:85:34:2f:fa:ff:60:94:a9:f3:42:65:e3:e2:7c:
ad:e7:4c:22:6c:8c:de:48:a0:1b:08:84:89:1f:3b:9e:16:a7:
c4:a7:4e:7e:74:46:87:7a:48:9c:b1:bd:98:f2:95:53:b0:f9:
1c:91:8d:9a:ba:71:a6:eb:7d:ab:8f:28:28:25:49:0f:3a:ac:
2e:7a:63:e6:ec:b4:98:56:06:6d:2e:56:b0:83:6a:8f:62:e0:
ae:b4:36:f7:20:51:85:5c:ab:1e:71:46:19:e5:27:d8:c6:eb:
c4:cb:42:fb
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZHqj1kS8BXDa6K17Sc3UxugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZDhiMjdhYWE1NWU1MWEzNDVmNmE0NTE5ZTM2Nzk1NTA0
NmMzMGEwHhcNMjQwOTEzMDg0NTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGUwNWViNmY0M2M2M2UxY2RiOTdhNzhkYzk5YzI0MTI4NmJlYzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql/eE6Oj16eyDhnCHEwLc31Rl7VS
dBPZywcbfaHjtYlceTwUbkIBN4wQSUnhJkVGuYVUOWl++2ofDcPmaAiuXvNk3guc
lAfQNs1hnjdJZ+9bouRNFs37M3jXLdpCm7uXa8RpUJjO6Efrs1+85DkMpeHncWXz
hzn5UY7KQm80lm8SEuRMPFDyyuFervqGvHtLcMrsQzVGk/hBd6r9lXtzcIA6ZAZL
1CsYT1j9KIF8tprWwTYZJKm+b7xS2WzccgkLDkksGJwaRGBRnE0hjzrsG/5SLlVH
ofVxFiDGyr1e8bcR0SqFgl6J+jV9K4Buyn0SAJdhMNX/YBO2SIMpssObFwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCTgXrb0PGPhzbl6eNyZwkEoa+xyMB8GA1UdIwQY
MBaAFLTYsnqqVeUaNF9qRRnjZ5VQRsMKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE5peWVxcFY1Um8wWDJwRkdlTm5sVkJHd3dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kM2MxZDUtZTkyMy00ODMxLTgwNGMt
Yzc1ODYyODJmZTEzLzEvSk9CZXR2UThZLUhOdVhwNDNKbkNRU2hyN0hJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9kM2MxZDUtZTkyMy00ODMxLTgwNGMtYzc1ODYyODJmZTEz
LzEvdE5peWVxcFY1Um8wWDJwRkdlTm5sVkJHd3dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEBb/wAwQC
uWB8AwQCuY/EMA0GCSqGSIb3DQEBCwUAA4IBAQBNZXDrsmxUbYg+kkqbE5FOyQhN
z8TNlNZAZhjDslLROIKWY1Fca4dGkSk6Ie9JhjB1KA9+GB1wS7K+YpPYbwOj25WS
DF4WNW+50a2LmDJXPkJzSo2i9QigeQ/VrOlj4vUg7B+HkIZJxVWiKEr5kmzXlkWy
TXQpCWLvTiNiZTtC6QJW4BXGVFT+4TnyZgYgGOGRmbsShTQv+v9glKnzQmXj4nyt
50wibIzeSKAbCISJHzueFqfEp05+dEaHekicsb2Y8pVTsPkckY2aunGm632rjygo
JUkPOqwuemPm7LSYVgZtLlawg2qPYuCutDb3IFGFXKsecUYZ5SfYxuvEy0L7
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:19:18 2024 by rpki-client on console-fra.rpki-client.org