Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/1-NNVnzedfvs7sIZEUWfVZmIl5us.roa
File: 1-NNVnzedfvs7sIZEUWfVZmIl5us.roa (raw, json)
Hash identifier: LgSIcmyC9E2mxxly5GQP7YrXtfXiQi3Lp1GzZ6jipcM=
Subject key identifier: F8:D3:55:9F:37:9D:7E:FB:3B:B0:86:44:51:67:D5:66:62:25:E6:EB
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B84930C47EE4E1E81683E368FC72C
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/1-NNVnzedfvs7sIZEUWfVZmIl5us.roa
Signing time: Mon 01 Jan 2024 18:31:27 +0000
ROA not before: Mon 01 Jan 2024 18:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42401
IP address blocks: 91.192.88.0/22 maxlen: 22
91.192.89.0/24 maxlen: 24
91.192.90.0/24 maxlen: 24
91.192.91.0/24 maxlen: 24
91.192.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:84:93:0c:47:ee:4e:1e:81:68:3e:36:8f:c7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8d3559f379d7efb3bb086445167d5666225e6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:08:23:05:47:fa:b0:cf:3c:85:8b:9d:e7:5a:
71:95:ac:c7:45:32:52:4c:d7:d2:2a:2d:28:ca:06:
d8:cb:d4:39:34:77:b2:09:3d:6b:47:71:a7:16:24:
22:aa:0e:e3:68:be:6f:06:b1:d0:48:c6:a6:01:72:
9d:54:07:a7:28:31:62:9a:c5:6e:bd:4a:e1:ac:40:
f0:16:90:ee:02:0b:b7:36:db:35:32:61:59:1e:12:
06:d5:62:59:d9:bc:63:02:37:ef:ea:d0:2b:ad:39:
82:20:04:d7:8f:ee:af:7a:b4:60:8b:e8:25:66:2f:
61:53:09:2b:39:f4:f2:5e:23:47:c6:be:eb:13:ab:
31:a9:16:b0:cb:38:43:7c:0d:ba:f0:d4:33:5a:94:
1f:aa:8a:98:a5:aa:82:7b:28:7c:5d:27:42:04:c2:
30:9b:31:12:55:6e:4b:0b:78:aa:f5:7b:8b:e9:d1:
af:56:0a:ff:34:18:a8:1c:fc:22:a5:1b:d9:b6:e6:
62:f9:d9:99:ce:fb:5b:d4:b9:52:fa:6f:90:7f:d3:
20:32:3d:74:18:e5:28:24:73:1d:11:57:11:cb:0a:
cd:83:bf:3a:54:74:3b:3c:7e:e9:6b:d5:d8:3a:73:
30:ed:12:3d:cb:c8:b8:07:e7:32:ba:bb:6e:37:88:
2f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D3:55:9F:37:9D:7E:FB:3B:B0:86:44:51:67:D5:66:62:25:E6:EB
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/1-NNVnzedfvs7sIZEUWfVZmIl5us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.88.0/22
Signature Algorithm: sha256WithRSAEncryption
91:fa:7f:9a:9a:c3:d5:b4:e1:51:60:05:e0:08:50:ce:b7:0b:
23:47:8a:8f:30:9f:b2:ce:5c:2c:3b:17:8b:0f:33:a7:2d:e2:
b3:97:bf:9b:c5:0a:a9:b0:7a:c9:16:96:03:78:89:59:cc:b0:
c5:04:8a:c7:5d:16:ad:79:b7:76:07:59:0f:0a:4c:f7:78:75:
6d:d7:67:35:8e:fe:21:50:fd:40:cf:c1:33:5f:d3:84:16:99:
46:9d:1e:99:68:a4:c3:bd:61:0d:d2:0f:2e:f1:97:e6:92:11:
d2:30:38:0d:ca:56:f4:bb:ce:18:f9:43:99:b0:0d:9e:45:96:
d1:2c:64:ae:7a:20:8d:d1:88:a9:38:f8:19:90:e4:9f:fe:dd:
71:09:a5:fa:db:0a:1b:2a:55:96:36:32:fc:1d:06:a9:12:3f:
54:4a:6d:6c:ac:e9:26:c2:de:ad:ad:26:14:83:8d:9f:8d:a4:
f0:1c:8b:34:a5:7a:0b:9e:a9:0e:60:15:ae:ac:02:f7:35:f6:
31:51:a0:0f:5f:77:ed:82:fc:5d:d8:01:28:ed:68:19:d7:8b:
d0:2d:bc:45:0a:27:76:68:45:43:c3:47:99:eb:03:cf:5b:15:
02:aa:2c:e4:85:22:b9:a7:2d:15:1e:e9:e4:06:9f:be:74:6f:
08:4a:8d:20
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzGS4STDEfuTh6BaD42j8csMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjQwMTAxMTgzMTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGQzNTU5ZjM3OWQ3ZWZiM2JiMDg2NDQ1MTY3ZDU2NjYyMjVlNmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowgjBUf6sM88hYud51pxlazHRTJS
TNfSKi0oygbYy9Q5NHeyCT1rR3GnFiQiqg7jaL5vBrHQSMamAXKdVAenKDFimsVu
vUrhrEDwFpDuAgu3Nts1MmFZHhIG1WJZ2bxjAjfv6tArrTmCIATXj+6verRgi+gl
Zi9hUwkrOfTyXiNHxr7rE6sxqRawyzhDfA268NQzWpQfqoqYpaqCeyh8XSdCBMIw
mzESVW5LC3iq9XuL6dGvVgr/NBioHPwipRvZtuZi+dmZzvtb1LlS+m+Qf9MgMj10
GOUoJHMdEVcRywrNg786VHQ7PH7pa9XYOnMw7RI9y8i4B+cyurtuN4gvbQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPjTVZ83nX77O7CGRFFn1WZiJebrMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvMS1OTlZuemVkZnZzN3NJWkVVV2ZWWm1JbDV1cy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDcvNzg4ODAzLWJlMTItNDMzZi1hOGQwLTAyNGIxNjU1YzI0
Ny8xL3VaVkVtWmR5ZUtkVmNMTkFQMDA2b0FzYk51Zy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlvAWDAN
BgkqhkiG9w0BAQsFAAOCAQEAkfp/mprD1bThUWAF4AhQzrcLI0eKjzCfss5cLDsX
iw8zpy3is5e/m8UKqbB6yRaWA3iJWcywxQSKx10WrXm3dgdZDwpM93h1bddnNY7+
IVD9QM/BM1/ThBaZRp0emWikw71hDdIPLvGX5pIR0jA4DcpW9LvOGPlDmbANnkWW
0SxkrnogjdGIqTj4GZDkn/7dcQml+tsKGypVljYy/B0GqRI/VEptbKzpJsLera0m
FIONn42k8ByLNKV6C56pDmAVrqwC9zX2MVGgD1937YL8XdgBKO1oGdeL0C28RQon
dmhFQ8NHmesDz1sVAqos5IUiuactFR7p5AafvnRvCEqNIA==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:26:06 2024 by rpki-client on console-ams.rpki-client.org