Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/nPE7Yw-7re5X2G7L1ybZGXM5Crk.roa
File: nPE7Yw-7re5X2G7L1ybZGXM5Crk.roa (raw, json)
Hash identifier: Lf39hUz8Ky/s6OOIJno3wg/zOTnjHto011idvqOYO+A=
Subject key identifier: 9C:F1:3B:63:0F:BB:AD:EE:57:D8:6E:CB:D7:26:D9:19:73:39:0A:B9
Certificate issuer: /CN=ca001b948595bce24913f811aff71e3cce45d656
Certificate serial: 018CC64B63E819A33A82A1BB7921E4A6ED8E
Authority key identifier: CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/nPE7Yw-7re5X2G7L1ybZGXM5Crk.roa
Signing time: Mon 01 Jan 2024 18:31:18 +0000
ROA not before: Mon 01 Jan 2024 18:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198524
IP address blocks: 91.236.1.0/24 maxlen: 24
2001:67c:2730::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:63:e8:19:a3:3a:82:a1:bb:79:21:e4:a6:ed:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca001b948595bce24913f811aff71e3cce45d656
Validity
Not Before: Jan 1 18:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9cf13b630fbbadee57d86ecbd726d91973390ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:99:33:a5:ea:ba:9b:09:c1:65:8a:9c:3f:b0:
b9:20:2c:58:a5:0c:7e:bd:78:a7:cd:40:61:17:ad:
82:fd:a9:75:d2:62:2a:45:da:a6:b5:25:e1:9c:3b:
44:0a:c2:c1:44:48:92:00:5a:35:1d:a2:3b:c9:9d:
34:d1:c9:bb:32:f5:23:c5:b6:6a:ba:30:b4:53:12:
8f:1f:27:9d:36:1f:91:97:79:52:d1:32:73:f5:3d:
f1:70:83:ca:04:0f:88:f8:02:03:73:e6:9a:64:a7:
03:c1:2d:00:47:c9:e9:ef:be:c1:83:c4:8d:2b:e6:
11:5b:d0:af:e1:9a:42:96:55:e5:c6:97:4f:9c:46:
1c:6f:3b:43:96:05:d1:f7:5b:18:8e:98:42:d7:c5:
11:25:4f:6d:fb:0b:fe:59:10:39:12:81:c1:6a:92:
53:39:0a:ff:ac:88:84:b3:ee:84:23:61:30:ba:43:
9a:74:5f:7f:f1:91:08:5a:bc:e0:43:cb:59:61:52:
b8:50:f4:08:6c:24:8b:da:b8:29:2f:97:a7:99:57:
a8:39:ab:6d:f7:fa:64:68:62:15:4c:65:e5:75:02:
6c:f7:16:d3:85:a6:45:53:ff:55:1e:55:8d:87:c8:
5f:73:af:2f:a6:22:cd:80:e6:e8:10:ce:70:7c:48:
2f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F1:3B:63:0F:BB:AD:EE:57:D8:6E:CB:D7:26:D9:19:73:39:0A:B9
X509v3 Authority Key Identifier:
keyid:CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/nPE7Yw-7re5X2G7L1ybZGXM5Crk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.1.0/24
IPv6:
2001:67c:2730::/48
Signature Algorithm: sha256WithRSAEncryption
17:0a:46:7d:c2:e4:ea:e6:4e:86:e1:92:05:eb:e9:34:60:2a:
7a:36:9e:e2:28:b0:aa:b3:a6:49:24:a9:5d:0e:c8:1e:4c:7c:
fa:00:48:28:3a:72:82:84:bf:97:3f:ec:2e:64:ca:61:34:38:
12:91:86:ef:a0:cd:6c:cc:90:44:f8:54:85:8a:a8:9e:c5:cb:
be:bb:9e:6b:5b:6f:3d:9e:e4:05:ec:cb:cf:69:df:f8:47:2c:
10:19:83:6e:97:9f:67:1c:cd:80:5e:b0:e0:2d:e9:ee:87:5a:
d8:5e:5e:48:89:b2:73:ea:0c:d5:69:87:f0:a9:88:05:39:36:
d6:17:16:2e:8d:f2:78:37:23:2a:fb:7f:48:85:0c:f0:36:a0:
dd:86:aa:17:f2:65:bc:d7:cc:1b:a7:f7:02:77:d6:23:a2:b5:
1b:d1:d8:8d:47:b3:96:1e:d4:85:0f:97:4b:2e:03:e8:12:c7:
95:d4:b4:34:05:16:59:d8:24:e0:db:60:2a:ad:85:23:38:76:
cf:1e:ff:dc:0a:2e:62:25:15:af:d2:58:8f:2e:58:69:32:7f:
d6:57:9b:8d:c8:0c:fa:3f:e9:f4:58:1e:f5:b2:22:bb:c1:c1:
6d:cc:1c:ac:83:00:ba:11:b4:a1:84:a9:56:5a:e9:74:0b:2a:
df:6c:a9:a7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzGS2PoGaM6gqG7eSHkpu2OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMDAxYjk0ODU5NWJjZTI0OTEzZjgxMWFmZjcxZTNjY2U0
NWQ2NTYwHhcNMjQwMTAxMTgzMTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2YxM2I2MzBmYmJhZGVlNTdkODZlY2JkNzI2ZDkxOTczMzkwYWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJkzpeq6mwnBZYqcP7C5ICxYpQx+
vXinzUBhF62C/al10mIqRdqmtSXhnDtECsLBREiSAFo1HaI7yZ000cm7MvUjxbZq
ujC0UxKPHyedNh+Rl3lS0TJz9T3xcIPKBA+I+AIDc+aaZKcDwS0AR8np777Bg8SN
K+YRW9Cv4ZpCllXlxpdPnEYcbztDlgXR91sYjphC18URJU9t+wv+WRA5EoHBapJT
OQr/rIiEs+6EI2EwukOadF9/8ZEIWrzgQ8tZYVK4UPQIbCSL2rgpL5enmVeoOatt
9/pkaGIVTGXldQJs9xbThaZFU/9VHlWNh8hfc68vpiLNgOboEM5wfEgvgwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJzxO2MPu63uV9huy9cm2RlzOQq5MB8GA1UdIwQY
MBaAFMoAG5SFlbziSRP4Ea/3HjzORdZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWdBYmxJV1Z2T0pKRV9nUnJfY2VQTTVGMWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mZmQ0Y2EtZTUxZS00NDdiLWJjZDIt
Y2ZjNmFhMDE2NjY5LzEvblBFN1l3LTdyZTVYMkc3TDF5YlpHWE01Q3JrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9mZmQ0Y2EtZTUxZS00NDdiLWJjZDItY2ZjNmFhMDE2NjY5
LzEveWdBYmxJV1Z2T0pKRV9nUnJfY2VQTTVGMWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW+wBMA8E
AgACMAkDBwAgAQZ8JzAwDQYJKoZIhvcNAQELBQADggEBABcKRn3C5OrmTobhkgXr
6TRgKno2nuIosKqzpkkkqV0OyB5MfPoASCg6coKEv5c/7C5kymE0OBKRhu+gzWzM
kET4VIWKqJ7Fy767nmtbbz2e5AXsy89p3/hHLBAZg26Xn2cczYBesOAt6e6HWthe
XkiJsnPqDNVph/CpiAU5NtYXFi6N8ng3Iyr7f0iFDPA2oN2GqhfyZbzXzBun9wJ3
1iOitRvR2I1Hs5Ye1IUPl0suA+gSx5XUtDQFFlnYJODbYCqthSM4ds8e/9wKLmIl
Fa/SWI8uWGkyf9ZXm43IDPo/6fRYHvWyIrvBwW3MHKyDALoRtKGEqVZa6XQLKt9s
qac=
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:55:33 2024 by rpki-client on console-ams.rpki-client.org