Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/sRfKXdv3nPsUjRMXg9Ab2ANqDv0.roa
File: sRfKXdv3nPsUjRMXg9Ab2ANqDv0.roa (raw, json)
Hash identifier: nCccQSHX5icIb1zXqz4uRKXNg2gbGbqTmUojpuGOrec=
Subject key identifier: B1:17:CA:5D:DB:F7:9C:FB:14:8D:13:17:83:D0:1B:D8:03:6A:0E:FD
Certificate issuer: /CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Certificate serial: 018CC56DDEE18AE860471DB7883F2FB2DA1B
Authority key identifier: 36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/sRfKXdv3nPsUjRMXg9Ab2ANqDv0.roa
Signing time: Mon 01 Jan 2024 14:29:21 +0000
ROA not before: Mon 01 Jan 2024 14:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6716
IP address blocks: 194.1.183.0/24 maxlen: 24
91.208.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:de:e1:8a:e8:60:47:1d:b7:88:3f:2f:b2:da:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Validity
Not Before: Jan 1 14:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b117ca5ddbf79cfb148d131783d01bd8036a0efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:18:53:41:0d:3f:91:a7:a9:cb:17:89:f1:39:
22:63:a1:f4:84:01:87:d1:5d:19:27:19:14:23:1a:
2c:5d:ce:48:e0:71:2d:3f:91:e1:57:34:24:3a:42:
56:80:00:b9:10:aa:c1:70:a9:11:72:e1:16:47:dc:
63:e6:43:fb:7c:b6:16:db:a6:9c:37:36:df:e6:f1:
76:5a:a8:db:ce:09:a1:c4:1b:db:fa:c3:e0:79:93:
29:99:c9:58:d9:2f:89:53:d5:e7:4e:18:49:b0:eb:
8f:6b:98:f8:55:66:92:ce:af:89:0b:bf:0b:98:f3:
fe:4a:4b:ad:7c:81:bf:14:34:0b:5a:53:87:42:81:
b2:49:49:fe:5c:37:ea:36:49:aa:88:d2:09:11:81:
ac:cd:6b:ed:62:2a:00:8e:c2:85:5c:2d:36:87:8c:
04:85:df:b4:bd:91:ac:f8:46:5e:e8:14:ba:7d:3f:
b8:48:e7:6e:3a:4c:9b:40:35:05:7b:7c:4e:3b:7a:
3e:ba:50:98:c1:56:23:94:85:20:fc:69:d0:85:15:
90:bb:71:2c:34:0f:2a:f3:e4:9b:8d:c6:eb:14:54:
df:2e:23:38:48:fd:85:b8:91:ea:17:e7:31:e9:ed:
a8:5b:6f:8a:4e:88:24:5b:83:e3:48:39:6e:f8:63:
6e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:17:CA:5D:DB:F7:9C:FB:14:8D:13:17:83:D0:1B:D8:03:6A:0E:FD
X509v3 Authority Key Identifier:
keyid:36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/sRfKXdv3nPsUjRMXg9Ab2ANqDv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.51.0/24
194.1.183.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:d6:ff:7e:6e:b7:df:ab:d0:9e:37:c0:b1:de:fd:a6:62:38:
22:8f:f6:d6:3d:d3:0f:36:dc:71:a1:a6:46:6e:27:5a:4f:0a:
4c:31:f7:98:9e:b4:4b:06:bf:64:0d:c7:42:00:39:10:a5:8a:
d3:05:75:f1:70:08:73:cb:ed:d1:17:ac:36:81:d0:3a:20:73:
8a:ae:f2:98:ce:0d:68:27:36:49:e4:0c:9b:28:12:94:c4:2b:
64:c6:c1:53:49:c3:fd:38:18:17:bc:9b:0d:a8:07:ac:6e:a3:
59:6f:c5:42:11:59:89:4c:f7:4c:93:98:df:41:e7:07:18:16:
71:ad:67:a2:5f:bc:72:69:c4:23:41:b5:42:e9:69:78:30:47:
e2:69:db:c2:89:bc:dd:b5:ba:57:e2:a1:20:24:60:89:39:bb:
fc:7b:df:14:6e:ac:fb:08:b7:0b:9d:ab:fb:b1:a6:6d:f4:50:
58:96:4f:ce:7e:aa:31:4b:63:3c:46:fd:10:b5:03:20:93:e4:
9a:38:bb:44:d5:44:b8:12:b7:a0:a5:40:30:81:ef:65:17:51:
00:05:5c:ab:14:20:63:93:c2:0b:d0:88:44:b0:ff:0a:c2:f8:
87:64:66:e9:35:ca:8c:0f:bc:e2:2e:70:29:89:f9:ed:af:09:
af:17:fe:03
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzFbd7hiuhgRx23iD8vstobMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YjEwMGUxZjZmM2ZmZTZlMzVlOTg3ZTBkMDE5NWI3OTkz
YThkMzMwHhcNMjQwMTAxMTQyOTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTE3Y2E1ZGRiZjc5Y2ZiMTQ4ZDEzMTc4M2QwMWJkODAzNmEwZWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRhTQQ0/kaepyxeJ8TkiY6H0hAGH
0V0ZJxkUIxosXc5I4HEtP5HhVzQkOkJWgAC5EKrBcKkRcuEWR9xj5kP7fLYW26ac
Nzbf5vF2WqjbzgmhxBvb+sPgeZMpmclY2S+JU9XnThhJsOuPa5j4VWaSzq+JC78L
mPP+SkutfIG/FDQLWlOHQoGySUn+XDfqNkmqiNIJEYGszWvtYioAjsKFXC02h4wE
hd+0vZGs+EZe6BS6fT+4SOduOkybQDUFe3xOO3o+ulCYwVYjlIUg/GnQhRWQu3Es
NA8q8+SbjcbrFFTfLiM4SP2FuJHqF+cx6e2oW2+KTogkW4PjSDlu+GNulwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLEXyl3b95z7FI0TF4PQG9gDag79MB8GA1UdIwQY
MBaAFDaxAOH28//m416Yfg0BlbeZOo0zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnJFQTRmYnpfLWJqWHBoLURRR1Z0NWs2alRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83MTMzOGQtZTYwMy00OTI2LWEwZjQt
ZTIyYzZlZDc4NDg1LzEvc1JmS1hkdjNuUHNValJNWGc5QWIyQU5xRHYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83MTMzOGQtZTYwMy00OTI2LWEwZjQtZTIyYzZlZDc4NDg1
LzEvTnJFQTRmYnpfLWJqWHBoLURRR1Z0NWs2alRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9AzAwQA
wgG3MA0GCSqGSIb3DQEBCwUAA4IBAQCO1v9+brffq9CeN8Cx3v2mYjgij/bWPdMP
NtxxoaZGbidaTwpMMfeYnrRLBr9kDcdCADkQpYrTBXXxcAhzy+3RF6w2gdA6IHOK
rvKYzg1oJzZJ5AybKBKUxCtkxsFTScP9OBgXvJsNqAesbqNZb8VCEVmJTPdMk5jf
QecHGBZxrWeiX7xyacQjQbVC6Wl4MEfiadvCibzdtbpX4qEgJGCJObv8e98Ubqz7
CLcLnav7saZt9FBYlk/OfqoxS2M8Rv0QtQMgk+SaOLtE1US4EregpUAwge9lF1EA
BVyrFCBjk8IL0IhEsP8KwviHZGbpNcqMD7ziLnApifntrwmvF/4D
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:45:10 2024 by rpki-client on console-ams.rpki-client.org