Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/9zJSyPBxoMkOTgHZANrrqv1rRgU.roa
File: 9zJSyPBxoMkOTgHZANrrqv1rRgU.roa (raw, json)
Hash identifier: h3bte/nlp6RnQ+qM+djT1y/tp2sGIcFgteT4N0LRpI0=
Subject key identifier: F7:32:52:C8:F0:71:A0:C9:0E:4E:01:D9:00:DA:EB:AA:FD:6B:46:05
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 018CCA29CAED06508CC0D8DA4FD472536169
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/9zJSyPBxoMkOTgHZANrrqv1rRgU.roa
Signing time: Tue 02 Jan 2024 12:33:05 +0000
ROA not before: Tue 02 Jan 2024 12:33:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41801
IP address blocks: 91.102.160.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:ca:ed:06:50:8c:c0:d8:da:4f:d4:72:53:61:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Jan 2 12:33:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f73252c8f071a0c90e4e01d900daebaafd6b4605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:b4:a6:74:41:5d:f6:c2:23:d5:36:82:43:
68:e5:ca:d6:24:cc:c9:35:66:0d:97:04:9f:c1:d4:
e8:09:d5:5e:af:30:65:9d:1b:e2:3d:7b:da:a2:0f:
96:be:6a:9e:32:71:32:00:b7:1d:09:7e:e0:b3:9c:
fa:e5:a6:2d:55:63:7e:e3:51:46:2c:6e:32:74:d9:
1b:82:71:c1:41:9a:d0:da:d3:cc:d1:38:c6:5f:ed:
c7:8c:2e:dc:fe:b4:2f:6a:df:c9:1b:ff:81:37:24:
ce:72:69:1d:f6:e9:eb:19:a8:8f:3b:8c:d6:41:ac:
b6:8f:f1:9f:8c:32:98:b6:aa:79:a7:48:c4:a7:e7:
78:bb:98:a5:d0:5c:e6:3b:48:2a:4f:98:78:ab:00:
8f:94:0a:52:f1:31:73:2a:e1:bc:e8:73:4b:d4:d4:
5a:b1:4d:43:15:74:c5:7b:53:b7:80:8f:99:8c:20:
2a:5a:05:22:c8:be:bb:f1:f7:c5:bf:00:18:94:32:
a9:84:56:df:4e:23:64:68:98:2f:d4:66:2b:ce:27:
b3:e9:7b:8c:e7:4f:86:78:4b:27:53:48:35:b1:0e:
e0:93:0b:3e:59:cb:15:5d:7c:d2:31:ce:87:cd:50:
23:30:88:0e:e3:b2:f7:f8:60:9b:63:09:b4:44:cf:
55:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:32:52:C8:F0:71:A0:C9:0E:4E:01:D9:00:DA:EB:AA:FD:6B:46:05
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/9zJSyPBxoMkOTgHZANrrqv1rRgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.160.0/23
Signature Algorithm: sha256WithRSAEncryption
42:be:85:12:39:10:1e:89:13:dc:95:99:f0:75:93:4f:6c:06:
7d:18:62:d1:12:1d:25:90:08:b7:fa:12:4a:fc:9c:18:bb:66:
f0:a9:7b:fc:63:33:6e:86:55:e7:89:1d:8d:7c:e4:08:b1:0e:
29:b2:e0:bd:90:5b:e9:a8:bc:dd:18:37:5f:64:56:23:9f:7f:
10:98:51:a1:78:07:c9:1a:9f:bc:48:fb:55:63:ea:32:be:9a:
98:92:20:b9:4e:77:d4:2c:37:01:46:91:24:21:a3:56:a8:19:
89:ad:72:56:2f:fb:c0:a4:df:88:12:88:a7:1f:3c:ec:4e:af:
d6:7d:ed:62:05:66:8a:b4:2e:49:cb:fc:88:26:a4:70:85:9c:
8f:d9:c2:35:c1:69:8a:a2:6d:1a:92:7c:30:92:93:03:11:f0:
3f:15:65:08:4a:aa:d7:06:e8:48:13:43:ca:bd:16:c6:fc:c5:
59:66:4d:b9:8d:b2:39:b1:d6:c8:bb:98:a5:3f:e6:48:a8:f2:
4f:92:df:58:2a:ed:6c:0d:af:85:a1:48:0d:4f:76:9f:d0:9a:
5a:66:bd:7f:02:16:9c:f4:1b:28:7b:c1:1e:9c:cd:47:dd:bf:
1b:53:13:c1:c5:f2:a3:cf:a7:43:40:18:d3:bf:ac:ec:9c:dc:
f5:53:0c:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKcrtBlCMwNjaT9RyU2FpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5
ZmMyYzkwHhcNMjQwMTAyMTIzMzA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzMyNTJjOGYwNzFhMGM5MGU0ZTAxZDkwMGRhZWJhYWZkNmI0NjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugG0pnRBXfbCI9U2gkNo5crWJMzJ
NWYNlwSfwdToCdVerzBlnRviPXvaog+WvmqeMnEyALcdCX7gs5z65aYtVWN+41FG
LG4ydNkbgnHBQZrQ2tPM0TjGX+3HjC7c/rQvat/JG/+BNyTOcmkd9unrGaiPO4zW
Qay2j/GfjDKYtqp5p0jEp+d4u5il0FzmO0gqT5h4qwCPlApS8TFzKuG86HNL1NRa
sU1DFXTFe1O3gI+ZjCAqWgUiyL678ffFvwAYlDKphFbfTiNkaJgv1GYrziez6XuM
50+GeEsnU0g1sQ7gkws+WcsVXXzSMc6HzVAjMIgO47L3+GCbYwm0RM9VIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPcyUsjwcaDJDk4B2QDa66r9a0YFMB8GA1UdIwQY
MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct
MWM2ZWU0NGUxMWFkLzEvOXpKU3lQQnhvTWtPVGdIWkFOcnJxdjFyUmdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk
LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW2agMA0G
CSqGSIb3DQEBCwUAA4IBAQBCvoUSORAeiRPclZnwdZNPbAZ9GGLREh0lkAi3+hJK
/JwYu2bwqXv8YzNuhlXniR2NfOQIsQ4psuC9kFvpqLzdGDdfZFYjn38QmFGheAfJ
Gp+8SPtVY+oyvpqYkiC5TnfULDcBRpEkIaNWqBmJrXJWL/vApN+IEoinHzzsTq/W
fe1iBWaKtC5Jy/yIJqRwhZyP2cI1wWmKom0aknwwkpMDEfA/FWUISqrXBuhIE0PK
vRbG/MVZZk25jbI5sdbIu5ilP+ZIqPJPkt9YKu1sDa+FoUgNT3af0JpaZr1/Ahac
9Bsoe8EenM1H3b8bUxPBxfKjz6dDQBjTv6zsnNz1UwyO
-----END CERTIFICATE-----
Generated at Wed Jun 26 12:41:47 2024 by rpki-client on console-ams.rpki-client.org