Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/06lBf6eCb_YiUokSZGBKGW6XyCU.roa
File: 06lBf6eCb_YiUokSZGBKGW6XyCU.roa (raw, json)
Hash identifier: dTUeSqK/nOA3qCd6y/9E7v2aujggQW+n6OCv4RhgGkM=
Subject key identifier: D3:A9:41:7F:A7:82:6F:F6:22:52:89:12:64:60:4A:19:6E:97:C8:25
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 018CC86F366590F95BD9496AA21C7659834B
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/06lBf6eCb_YiUokSZGBKGW6XyCU.roa
Signing time: Tue 02 Jan 2024 04:29:40 +0000
ROA not before: Tue 02 Jan 2024 04:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 91.221.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:36:65:90:f9:5b:d9:49:6a:a2:1c:76:59:83:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jan 2 04:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3a9417fa7826ff62252891264604a196e97c825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:21:87:58:bb:d6:c9:3f:87:62:0e:f7:f5:47:
53:89:06:68:63:da:04:ee:b1:2d:39:b3:79:38:61:
7e:ee:95:9c:81:8c:e9:16:bd:06:c1:a3:81:55:d0:
b6:2e:87:53:68:81:b2:e9:5c:64:59:78:b8:7d:70:
16:8e:61:f6:7d:2c:2a:0d:d3:84:ac:67:a9:f4:af:
7b:20:93:0a:6b:7f:ac:70:0a:c6:ca:65:1f:21:f1:
e2:97:22:5f:5d:c9:9b:24:ce:1f:26:59:52:1d:ef:
0f:b7:15:9c:c5:1c:84:bb:ff:2f:f2:34:65:2d:89:
f0:1c:82:5d:16:8d:de:63:1c:ae:26:4d:82:b1:89:
ca:2b:10:39:93:98:51:c8:d8:21:c6:2b:cf:13:86:
62:18:8e:3c:03:1e:3d:76:45:31:16:2f:8a:f4:e7:
f8:ad:12:0f:06:8a:38:c6:77:c9:83:f0:12:5d:aa:
97:a2:9c:e5:ef:30:46:bb:ac:35:1a:23:5b:aa:4a:
7d:98:43:22:32:3a:f4:55:63:e4:d5:c7:07:11:a5:
b5:35:67:e8:2e:89:89:b1:1d:c1:32:6a:f2:d1:c4:
00:fa:fd:68:03:e8:e2:31:48:96:2f:01:4b:0c:2e:
10:a0:b7:cf:56:a2:f8:59:69:d3:f7:c7:2e:74:40:
c7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A9:41:7F:A7:82:6F:F6:22:52:89:12:64:60:4A:19:6E:97:C8:25
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/06lBf6eCb_YiUokSZGBKGW6XyCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.116.0/23
Signature Algorithm: sha256WithRSAEncryption
32:17:a5:d5:ff:19:59:37:9c:89:82:6b:5a:50:80:f7:1e:73:
e0:a2:e6:a0:fd:61:1c:77:2b:d4:83:c8:69:c8:72:50:20:f4:
b1:bf:f1:1d:98:b4:8a:09:e2:a0:04:ad:0e:21:07:90:52:21:
3d:6a:52:e6:19:32:a2:1d:ab:fc:75:60:07:19:60:f4:e2:bc:
62:6c:bc:c1:20:25:67:a8:39:b1:8d:bb:a0:df:03:4d:e5:21:
c7:56:a9:09:44:51:1b:44:fa:a9:bb:41:61:30:76:0d:d3:d3:
1b:57:27:b3:41:e0:72:52:b5:38:fe:a8:ec:55:95:5b:91:85:
90:7d:33:4e:5e:07:43:0f:be:8f:ed:50:0d:17:c3:db:1c:0d:
96:8c:a3:f9:8d:d0:c0:85:0a:a8:8b:f0:e8:74:a7:38:80:00:
fb:e3:1a:c0:d7:20:74:e1:b4:f7:8a:e7:00:87:6f:1b:c8:34:
29:73:ab:f1:d5:a2:9d:7b:91:51:32:2b:31:91:7d:58:05:f9:
28:dc:3e:cd:7b:c1:64:73:b5:72:90:e2:8c:4d:94:8f:36:a0:
26:1a:ca:1f:40:ea:50:68:d6:97:8b:12:36:65:6f:93:4e:ec:
5a:9c:71:b9:15:02:91:d0:5d:af:36:b6:9d:bd:d2:d7:c2:53:
0b:3c:32:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIbzZlkPlb2Ulqohx2WYNLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl
MmExY2EwHhcNMjQwMTAyMDQyOTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2E5NDE3ZmE3ODI2ZmY2MjI1Mjg5MTI2NDYwNGExOTZlOTdjODI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyGHWLvWyT+HYg739UdTiQZoY9oE
7rEtObN5OGF+7pWcgYzpFr0GwaOBVdC2LodTaIGy6VxkWXi4fXAWjmH2fSwqDdOE
rGep9K97IJMKa3+scArGymUfIfHilyJfXcmbJM4fJllSHe8PtxWcxRyEu/8v8jRl
LYnwHIJdFo3eYxyuJk2CsYnKKxA5k5hRyNghxivPE4ZiGI48Ax49dkUxFi+K9Of4
rRIPBoo4xnfJg/ASXaqXopzl7zBGu6w1GiNbqkp9mEMiMjr0VWPk1ccHEaW1NWfo
LomJsR3BMmry0cQA+v1oA+jiMUiWLwFLDC4QoLfPVqL4WWnT98cudEDHYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNOpQX+ngm/2IlKJEmRgShlul8glMB8GA1UdIwQY
MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt
YTZjYTQ1NGRiMmQ3LzEvMDZsQmY2ZUNiX1lpVW9rU1pHQktHVzZYeUNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3
LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW910MA0G
CSqGSIb3DQEBCwUAA4IBAQAyF6XV/xlZN5yJgmtaUID3HnPgouag/WEcdyvUg8hp
yHJQIPSxv/EdmLSKCeKgBK0OIQeQUiE9alLmGTKiHav8dWAHGWD04rxibLzBICVn
qDmxjbug3wNN5SHHVqkJRFEbRPqpu0FhMHYN09MbVyezQeByUrU4/qjsVZVbkYWQ
fTNOXgdDD76P7VANF8PbHA2WjKP5jdDAhQqoi/DodKc4gAD74xrA1yB04bT3iucA
h28byDQpc6vx1aKde5FRMisxkX1YBfko3D7Ne8Fkc7VykOKMTZSPNqAmGsofQOpQ
aNaXixI2ZW+TTuxanHG5FQKR0F2vNradvdLXwlMLPDJ0
-----END CERTIFICATE-----
Generated at Sat May 4 11:21:32 2024 by rpki-client on console-ams.rpki-client.org