Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/1-oOpyBxBE4BaZVnWjH8whLV2uHA.roa
File: 1-oOpyBxBE4BaZVnWjH8whLV2uHA.roa (raw, json)
Hash identifier: SJSnidgx+Xd19Lndlt3W0TvFZpqS+2o9sZpHSciIF8E=
Subject key identifier: FA:83:A9:C8:1C:41:13:80:5A:65:59:D6:8C:7F:30:84:B5:76:B8:70
Certificate issuer: /CN=b7733e9de9485b44671c8e511da221e4153c711b
Certificate serial: 018EB09451F633925CDA6CA87DDEB7AC3BE3
Authority key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/1-oOpyBxBE4BaZVnWjH8whLV2uHA.roa
Signing time: Fri 05 Apr 2024 23:24:54 +0000
ROA not before: Fri 05 Apr 2024 23:24:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209828
IP address blocks: 91.241.48.0/24 maxlen: 32
91.241.49.0/24 maxlen: 32
91.241.50.0/24 maxlen: 32
91.241.51.0/24 maxlen: 32
194.5.236.0/24 maxlen: 32
194.5.237.0/24 maxlen: 32
2a00:7544::/32 maxlen: 32
2a0c:8dc0::/29 maxlen: 32
2a0c:8dc0::/30 maxlen: 30
2a0c:8dc4::/32 maxlen: 32
2a0c:8dc5::/32 maxlen: 32
2a0c:8dc6::/32 maxlen: 32
2a0c:8dc7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b0:94:51:f6:33:92:5c:da:6c:a8:7d:de:b7:ac:3b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7733e9de9485b44671c8e511da221e4153c711b
Validity
Not Before: Apr 5 23:24:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa83a9c81c4113805a6559d68c7f3084b576b870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:aa:cf:53:1b:35:3c:dd:66:e1:84:f2:35:15:
22:bb:ab:47:a9:68:eb:8c:9e:34:c6:3b:57:b2:41:
a6:21:69:f4:a0:a5:56:3b:d0:40:0f:32:c9:82:4d:
bd:c0:5a:e5:18:17:d1:b5:d2:e2:ff:9b:14:63:6f:
0f:81:37:ad:5b:27:81:0e:ee:cd:9e:c5:c3:26:74:
28:8d:b1:2f:fa:dc:3f:6b:dc:5c:d5:96:fe:1a:df:
d3:e1:23:18:6c:35:fe:7d:fd:c9:04:cc:0b:05:b2:
c2:b6:9e:95:50:d9:8c:3e:1e:32:e2:65:16:bd:8d:
27:d2:01:8b:df:42:61:cf:5a:8c:bb:b8:52:4e:0e:
50:15:28:40:71:ec:cd:d3:0c:1b:3c:50:11:fc:75:
52:35:63:62:2c:f7:87:89:3b:32:51:95:4e:27:c4:
26:7f:d8:8b:d8:e1:8a:d5:35:54:c2:cd:34:8e:33:
ba:15:19:30:10:14:3e:7d:f9:84:6b:a1:bd:bb:da:
72:25:20:1b:d4:3a:49:70:b0:a2:02:2f:74:e8:54:
7f:13:d6:27:68:3b:ed:29:ed:02:cc:e3:ae:63:51:
f3:5a:b9:1d:88:d6:79:b0:13:86:f4:8d:bb:0a:05:
bf:83:2d:3a:46:5d:ab:7c:56:49:4e:d7:61:d9:b6:
00:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:83:A9:C8:1C:41:13:80:5A:65:59:D6:8C:7F:30:84:B5:76:B8:70
X509v3 Authority Key Identifier:
keyid:B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/1-oOpyBxBE4BaZVnWjH8whLV2uHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.48.0/22
194.5.236.0/23
IPv6:
2a00:7544::/32
2a0c:8dc0::/29
Signature Algorithm: sha256WithRSAEncryption
1c:58:9b:9a:d3:48:a2:b4:5f:b8:e3:e5:11:9b:35:89:5e:0f:
2e:56:fc:33:a2:14:b8:72:e1:fa:dd:f6:c3:88:1f:e6:5a:7b:
e0:5a:d0:60:ed:b2:63:dd:68:76:49:de:26:fa:0d:27:ea:d7:
d1:dc:6a:56:c5:91:8d:05:d8:68:55:b2:ce:ed:77:18:7b:50:
6d:8a:90:ec:66:cf:c7:42:f6:ed:08:b2:ee:55:e4:21:6d:ce:
4c:59:b6:05:43:f2:5a:7e:33:9b:f6:ff:93:5d:a7:11:f9:55:
86:a6:14:17:ba:28:bd:df:62:f4:12:cf:c9:0d:78:75:f0:9a:
75:d7:9b:9d:d1:ce:d0:ef:c1:93:65:ae:7f:93:08:6f:94:60:
3d:dc:5d:b0:8f:f0:d9:fa:07:a7:55:ce:bc:7f:57:0b:32:53:
2c:47:7a:54:27:4c:8d:14:2a:ea:67:d6:c0:68:89:d1:a4:d9:
0d:4f:4f:c5:f6:00:8e:7b:e6:80:bb:87:c3:54:82:e2:f3:6b:
67:4d:8f:f4:ac:6f:f8:26:dd:6e:42:58:db:2e:4d:71:fa:80:
13:0f:ed:fe:eb:8f:ec:79:31:83:f4:a8:f6:dc:1e:7f:29:d1:
65:6a:70:63:ed:60:7c:a7:0b:40:02:bf:48:4a:b6:97:b1:64:
a9:a3:d7:db
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAY6wlFH2M5Jc2myofd63rDvjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NzMzZTlkZTk0ODViNDQ2NzFjOGU1MTFkYTIyMWU0MTUz
YzcxMWIwHhcNMjQwNDA1MjMyNDU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTgzYTljODFjNDExMzgwNWE2NTU5ZDY4YzdmMzA4NGI1NzZiODcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKrPUxs1PN1m4YTyNRUiu6tHqWjr
jJ40xjtXskGmIWn0oKVWO9BADzLJgk29wFrlGBfRtdLi/5sUY28PgTetWyeBDu7N
nsXDJnQojbEv+tw/a9xc1Zb+Gt/T4SMYbDX+ff3JBMwLBbLCtp6VUNmMPh4y4mUW
vY0n0gGL30Jhz1qMu7hSTg5QFShAcezN0wwbPFAR/HVSNWNiLPeHiTsyUZVOJ8Qm
f9iL2OGK1TVUws00jjO6FRkwEBQ+ffmEa6G9u9pyJSAb1DpJcLCiAi906FR/E9Yn
aDvtKe0CzOOuY1HzWrkdiNZ5sBOG9I27CgW/gy06Rl2rfFZJTtdh2bYAPwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFPqDqcgcQROAWmVZ1ox/MIS1drhwMB8GA1UdIwQY
MBaAFLdzPp3pSFtEZxyOUR2iIeQVPHEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDNNLW5lbElXMFJuSEk1UkhhSWg1QlU4Y1JzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xN2U0NTAtODgxOC00YTI3LTlmMzUt
NTE4Y2QxNDcxM2ViLzEvMS1vT3B5QnhCRTRCYVpWbldqSDh3aExWMnVIQS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNjEvMTdlNDUwLTg4MTgtNGEyNy05ZjM1LTUxOGNkMTQ3MTNl
Yi8xL3QzTS1uZWxJVzBSbkhJNVJIYUloNUJVOGNScy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA7BggrBgEFBQcBBwEB/wQsMCowEgQCAAEwDAMEAlvxMAME
AcIF7DAUBAIAAjAOAwUAKgB1RAMFAyoMjcAwDQYJKoZIhvcNAQELBQADggEBABxY
m5rTSKK0X7jj5RGbNYleDy5W/DOiFLhy4frd9sOIH+Zae+Ba0GDtsmPdaHZJ3ib6
DSfq19HcalbFkY0F2GhVss7tdxh7UG2KkOxmz8dC9u0Isu5V5CFtzkxZtgVD8lp+
M5v2/5NdpxH5VYamFBe6KL3fYvQSz8kNeHXwmnXXm53RztDvwZNlrn+TCG+UYD3c
XbCP8Nn6B6dVzrx/VwsyUyxHelQnTI0UKupn1sBoidGk2Q1PT8X2AI575oC7h8NU
guLza2dNj/Ssb/gm3W5CWNsuTXH6gBMP7f7rj+x5MYP0qPbcHn8p0WVqcGPtYHyn
C0ACv0hKtpexZKmj19s=
-----END CERTIFICATE-----
Generated at Sat Sep 21 00:28:16 2024 by rpki-client on console-fra.rpki-client.org