Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/hNXHXMWbQHk7LidMVNW6-S2OdTI.roa
File: hNXHXMWbQHk7LidMVNW6-S2OdTI.roa (raw, json)
Hash identifier: mK87NRKGcPbuRVow/K2/+vRX0V8UKy9G4lrbV82DDfU=
Subject key identifier: 84:D5:C7:5C:C5:9B:40:79:3B:2E:27:4C:54:D5:BA:F9:2D:8E:75:32
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 018F9F64A60BD74C8FBC979397C367B68CD3
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/hNXHXMWbQHk7LidMVNW6-S2OdTI.roa
Signing time: Wed 22 May 2024 08:22:04 +0000
ROA not before: Wed 22 May 2024 08:22:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 91.225.225.0/24 maxlen: 24
91.225.226.0/24 maxlen: 24
91.225.227.0/24 maxlen: 24
188.191.98.0/24 maxlen: 24
188.191.101.0/24 maxlen: 24
188.191.103.0/24 maxlen: 24
188.191.106.0/24 maxlen: 24
188.191.109.0/24 maxlen: 24
188.191.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9f:64:a6:0b:d7:4c:8f:bc:97:93:97:c3:67:b6:8c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: May 22 08:22:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84d5c75cc59b40793b2e274c54d5baf92d8e7532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:df:d7:f0:9c:f0:04:e8:8a:eb:3f:0e:ea:c2:
86:d8:47:f3:0a:53:2e:41:81:91:0e:7c:c2:6f:d3:
5a:5b:59:3f:49:d9:05:93:6f:c4:82:a3:a0:6f:b3:
95:47:95:2c:40:07:20:7b:f0:54:46:84:e9:bd:29:
69:a1:04:e1:5a:0f:ac:32:76:54:ee:e0:42:12:9c:
2d:8e:f2:be:7e:c6:a9:5b:98:ca:09:13:a2:43:39:
52:71:da:24:57:d7:0d:7a:34:3b:99:82:9c:50:a6:
24:8c:5f:d6:56:0d:9e:57:1d:f9:39:3b:a2:fc:70:
1b:3c:20:73:46:fd:f0:fd:53:37:b5:5f:c2:9e:87:
b7:76:94:a5:a0:e9:52:7f:e0:9e:da:16:a3:e1:02:
fe:1a:84:07:83:4f:50:8a:fd:ff:1b:ce:4d:e6:65:
bc:ae:91:51:47:75:32:7a:3b:d8:f7:55:ce:43:95:
0e:84:f8:10:7e:9a:54:c6:7c:86:f6:56:4f:dc:b1:
23:1b:1a:1a:24:34:2d:55:42:c1:e8:65:72:7f:d8:
2f:07:cf:fb:05:46:5f:c3:71:16:20:a7:41:73:74:
fe:02:0e:9a:7b:c9:7e:e7:19:24:05:39:1e:d5:42:
f4:de:fd:5c:4d:c9:29:8e:a6:4d:9f:e7:a3:89:8a:
ec:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D5:C7:5C:C5:9B:40:79:3B:2E:27:4C:54:D5:BA:F9:2D:8E:75:32
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/hNXHXMWbQHk7LidMVNW6-S2OdTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.225.0-91.225.227.255
188.191.98.0/24
188.191.101.0/24
188.191.103.0/24
188.191.106.0/24
188.191.109.0-188.191.110.255
Signature Algorithm: sha256WithRSAEncryption
68:93:7f:81:3c:83:ae:0c:5c:63:30:78:8d:98:60:d3:09:53:
1f:09:a6:c4:ec:63:c7:2e:50:92:d2:31:7f:cb:c4:c9:c6:ea:
35:89:6c:7b:bb:7a:40:4c:56:ea:a6:1c:16:48:b9:dd:a0:24:
75:54:93:33:e8:2a:30:3f:dd:63:ff:ff:fc:97:e0:0a:25:ed:
94:86:94:4a:cf:fd:51:35:71:df:c4:c9:d7:04:7b:56:5c:e3:
d9:3a:b3:c9:e7:5a:a6:6c:f1:f0:36:52:ea:86:4f:4c:87:c7:
ab:d3:4e:eb:bb:60:5c:5d:2f:bb:e2:08:82:e2:1e:ae:ed:c1:
6c:99:31:c1:f5:56:72:35:a3:9c:3b:19:59:c1:f5:05:27:7b:
25:d8:07:ae:bc:40:f2:15:91:5b:49:dd:c4:91:c4:d9:41:d7:
02:af:96:0f:aa:97:25:c3:4c:67:6d:8c:87:cc:f8:37:54:64:
0a:a6:87:c3:47:e1:ae:00:56:fa:5d:1e:a1:4b:79:c2:96:13:
23:a6:66:3e:a9:83:62:a9:77:de:65:cc:f3:c8:c9:3c:d8:52:
ae:31:6a:12:92:0e:70:f1:21:6a:7d:03:3a:c7:f9:66:7f:c5:
7d:9b:ad:9d:e3:09:4f:77:3d:b9:43:58:f2:a4:2a:bc:41:49:
1f:ec:1a:e7
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAY+fZKYL10yPvJeTl8NntozTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl
NGQxZDcwHhcNMjQwNTIyMDgyMjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGQ1Yzc1Y2M1OWI0MDc5M2IyZTI3NGM1NGQ1YmFmOTJkOGU3NTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3d/X8JzwBOiK6z8O6sKG2EfzClMu
QYGRDnzCb9NaW1k/SdkFk2/EgqOgb7OVR5UsQAcge/BURoTpvSlpoQThWg+sMnZU
7uBCEpwtjvK+fsapW5jKCROiQzlScdokV9cNejQ7mYKcUKYkjF/WVg2eVx35OTui
/HAbPCBzRv3w/VM3tV/Cnoe3dpSloOlSf+Ce2haj4QL+GoQHg09Qiv3/G85N5mW8
rpFRR3UyejvY91XOQ5UOhPgQfppUxnyG9lZP3LEjGxoaJDQtVULB6GVyf9gvB8/7
BUZfw3EWIKdBc3T+Ag6ae8l+5xkkBTke1UL03v1cTckpjqZNn+ejiYrsdQIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFITVx1zFm0B5Oy4nTFTVuvktjnUyMB8GA1UdIwQY
MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt
ZGRmNTY3ZWRlZDAzLzEvaE5YSFhNV2JRSGs3TGlkTVZOVzYtUzJPZFRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz
LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0MAwDBABb4eED
BAJb4eADBAC8v2IDBAC8v2UDBAC8v2cDBAC8v2owDAMEALy/bQMEALy/bjANBgkq
hkiG9w0BAQsFAAOCAQEAaJN/gTyDrgxcYzB4jZhg0wlTHwmmxOxjxy5QktIxf8vE
ycbqNYlse7t6QExW6qYcFki53aAkdVSTM+gqMD/dY////JfgCiXtlIaUSs/9UTVx
38TJ1wR7Vlzj2Tqzyedapmzx8DZS6oZPTIfHq9NO67tgXF0vu+IIguIeru3BbJkx
wfVWcjWjnDsZWcH1BSd7JdgHrrxA8hWRW0ndxJHE2UHXAq+WD6qXJcNMZ22Mh8z4
N1RkCqaHw0fhrgBW+l0eoUt5wpYTI6ZmPqmDYql33mXM88jJPNhSrjFqEpIOcPEh
an0DOsf5Zn/FfZutneMJT3c9uUNY8qQqvEFJH+wa5w==
-----END CERTIFICATE-----
Generated at Fri Jun 21 03:36:45 2024 by rpki-client on console-ams.rpki-client.org