Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/BTs6gjcHcw7okqjlk63lvVIsJ2o.roa
File: BTs6gjcHcw7okqjlk63lvVIsJ2o.roa (raw, json)
Hash identifier: A8J1+c+C+98/k7lwN7BlDSV2auDSWMgbTEfJSA9SjK4=
Subject key identifier: 05:3B:3A:82:37:07:73:0E:E8:92:A8:E5:93:AD:E5:BD:52:2C:27:6A
Certificate issuer: /CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Certificate serial: 018E39788B4CE401D765178CCE3C0DF2995B
Authority key identifier: AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/BTs6gjcHcw7okqjlk63lvVIsJ2o.roa
Signing time: Wed 13 Mar 2024 20:19:44 +0000
ROA not before: Wed 13 Mar 2024 20:19:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 91.108.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:39:78:8b:4c:e4:01:d7:65:17:8c:ce:3c:0d:f2:99:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Validity
Not Before: Mar 13 20:19:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=053b3a823707730ee892a8e593ade5bd522c276a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:80:c9:52:04:b9:20:43:c4:de:d5:80:25:b7:
4c:3c:35:15:bc:26:f3:a7:ab:24:ef:12:c6:3d:b3:
43:aa:e1:c8:25:d3:27:8f:fe:6c:ff:ef:ca:64:17:
a4:fa:99:ab:b2:a4:8f:30:a9:8e:18:0a:1a:3f:de:
2e:da:63:bb:2f:54:32:df:94:07:75:6b:c5:1a:3a:
22:e9:64:75:3d:a0:f1:31:b3:bd:ee:b8:b6:bb:55:
a8:a0:eb:27:ad:01:bb:55:59:65:ee:f8:8f:ef:38:
03:55:fc:97:77:5e:6d:4f:cb:7f:90:3a:2e:26:3d:
b8:20:f7:ad:65:e1:fb:12:a6:a4:bf:da:bc:d3:25:
cb:68:96:a7:0a:0f:c7:33:dc:82:5b:50:19:7c:02:
a7:27:aa:c0:4f:93:70:2f:86:22:3a:12:77:63:27:
35:de:04:be:b2:4e:da:0b:22:dd:cb:48:d6:b5:f9:
6f:5d:4d:fb:e3:49:0f:28:07:15:54:e4:50:92:45:
af:dd:ac:b6:bd:94:ab:27:63:a2:f5:d1:c2:ea:51:
d5:85:fe:2f:71:8a:d8:f1:0c:09:bd:0d:4b:4e:9f:
af:ec:25:05:45:73:43:d3:da:ce:97:4c:81:c7:fc:
33:96:d9:ea:77:d2:d3:03:f1:22:3c:eb:05:b9:6c:
3d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3B:3A:82:37:07:73:0E:E8:92:A8:E5:93:AD:E5:BD:52:2C:27:6A
X509v3 Authority Key Identifier:
keyid:AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/BTs6gjcHcw7okqjlk63lvVIsJ2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.186.0/24
Signature Algorithm: sha256WithRSAEncryption
01:14:a4:9c:08:70:ce:80:f9:83:25:b4:ac:bb:97:15:c2:74:
5d:ac:83:85:ed:cf:2a:04:16:52:2e:18:0b:08:88:ea:32:43:
5c:3d:65:9b:e4:c5:7c:99:da:3d:73:79:6b:27:c9:d9:ee:79:
45:d5:9f:b6:b3:a7:82:8e:d8:5c:a3:54:b2:0c:cf:ab:90:53:
5a:00:bf:e7:da:a8:02:53:e0:ac:9a:15:e8:92:99:d5:77:35:
95:eb:56:5a:ed:a6:87:c6:2d:05:5d:78:87:08:1f:c8:c8:6c:
7b:24:d9:c0:50:67:f7:b8:bf:bf:20:aa:e6:e9:04:46:ab:97:
25:5e:6d:9b:64:bf:58:08:4d:ee:e5:84:28:cf:0f:c6:02:aa:
ed:c3:26:b4:be:d5:e8:94:74:60:dd:cb:16:82:e1:17:b5:bc:
e9:7c:1c:0a:dc:d3:77:c0:d8:de:23:e2:0f:b4:01:8a:85:bb:
a5:6d:9e:2f:84:b1:3e:60:fe:ba:b8:35:d6:98:3d:b5:08:1a:
80:94:0f:be:e3:d8:4f:de:e2:60:fb:88:0f:8a:88:72:19:06:
d8:46:f2:35:5e:1f:9a:db:ae:99:2b:57:cc:94:03:ca:f4:48:
93:f2:83:91:65:2d:d9:31:97:da:e0:b0:61:8b:40:f4:16:cb:
2f:2f:1a:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY45eItM5AHXZReMzjwN8plbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMDg1MmFmNWE4ZTQzNmIyZDRkYTcyZTkyYjY0MTE0ZTFm
NGQxNWYwHhcNMjQwMzEzMjAxOTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTNiM2E4MjM3MDc3MzBlZTg5MmE4ZTU5M2FkZTViZDUyMmMyNzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IDJUgS5IEPE3tWAJbdMPDUVvCbz
p6sk7xLGPbNDquHIJdMnj/5s/+/KZBek+pmrsqSPMKmOGAoaP94u2mO7L1Qy35QH
dWvFGjoi6WR1PaDxMbO97ri2u1WooOsnrQG7VVll7viP7zgDVfyXd15tT8t/kDou
Jj24IPetZeH7Eqakv9q80yXLaJanCg/HM9yCW1AZfAKnJ6rAT5NwL4YiOhJ3Yyc1
3gS+sk7aCyLdy0jWtflvXU3740kPKAcVVORQkkWv3ay2vZSrJ2Oi9dHC6lHVhf4v
cYrY8QwJvQ1LTp+v7CUFRXND09rOl0yBx/wzltnqd9LTA/EiPOsFuWw9GQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAU7OoI3B3MO6JKo5ZOt5b1SLCdqMB8GA1UdIwQY
MBaAFKwIUq9ajkNrLU2nLpK2QRTh9NFfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckFoU3IxcU9RMnN0VGFjdWtyWkJGT0gwMFY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80ZGJjYjItM2E5Ni00ODE3LTk5NzEt
NTAwN2RkZTM1MDQ1LzEvQlRzNmdqY0hjdzdva3FqbGs2M2x2VklzSjJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny80ZGJjYjItM2E5Ni00ODE3LTk5NzEtNTAwN2RkZTM1MDQ1
LzEvckFoU3IxcU9RMnN0VGFjdWtyWkJGT0gwMFY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2y6MA0G
CSqGSIb3DQEBCwUAA4IBAQABFKScCHDOgPmDJbSsu5cVwnRdrIOF7c8qBBZSLhgL
CIjqMkNcPWWb5MV8mdo9c3lrJ8nZ7nlF1Z+2s6eCjthco1SyDM+rkFNaAL/n2qgC
U+CsmhXokpnVdzWV61Za7aaHxi0FXXiHCB/IyGx7JNnAUGf3uL+/IKrm6QRGq5cl
Xm2bZL9YCE3u5YQozw/GAqrtwya0vtXolHRg3csWguEXtbzpfBwK3NN3wNjeI+IP
tAGKhbulbZ4vhLE+YP66uDXWmD21CBqAlA++49hP3uJg+4gPiohyGQbYRvI1Xh+a
266ZK1fMlAPK9EiT8oORZS3ZMZfa4LBhi0D0FssvLxoW
-----END CERTIFICATE-----
Generated at Mon May 6 04:03:14 2024 by rpki-client on console-ams.rpki-client.org