Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/SvH9t1ym9eqdta5eQKbWU6tC4t0.roa
File: SvH9t1ym9eqdta5eQKbWU6tC4t0.roa (raw, json)
Hash identifier: kY3bApZz73fbbF0it4sVUY0BQoXrkIUjC5yq7d3+KV0=
Subject key identifier: 4A:F1:FD:B7:5C:A6:F5:EA:9D:B5:AE:5E:40:A6:D6:53:AB:42:E2:DD
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 018FD9382A1939E22B56677C5DB75BEB2279
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/SvH9t1ym9eqdta5eQKbWU6tC4t0.roa
Signing time: Sun 02 Jun 2024 13:51:27 +0000
ROA not before: Sun 02 Jun 2024 13:51:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 91.102.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d9:38:2a:19:39:e2:2b:56:67:7c:5d:b7:5b:eb:22:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Jun 2 13:51:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4af1fdb75ca6f5ea9db5ae5e40a6d653ab42e2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ce:19:4f:a9:28:34:52:31:a8:4f:83:ff:39:
d8:2a:7e:21:0e:44:a4:62:6f:ff:f4:2c:29:50:14:
31:f0:d5:02:b2:8b:ad:50:03:07:c5:17:47:f4:71:
10:9d:2e:ea:56:1f:51:12:b5:cd:06:ae:e7:ad:a2:
a1:1f:dd:47:6a:ee:2d:bd:da:50:d6:d6:8d:ab:a3:
75:ea:cc:08:11:bb:4d:96:62:e6:76:96:e6:1c:21:
c0:b5:ee:da:df:bb:de:af:bc:ac:93:f5:f4:0b:5a:
05:60:0e:7e:93:9a:8f:a2:56:38:cb:29:09:ab:cb:
32:b2:04:33:e9:61:70:3c:0f:b4:69:c8:a4:45:0b:
66:97:9e:cc:cc:c0:4f:1a:70:51:f5:28:97:e5:3c:
e1:17:ce:40:2b:97:b0:24:61:8a:5f:c5:52:b5:83:
bf:6c:ae:97:e8:03:f5:cd:2a:8e:2f:94:e2:ed:dc:
7f:46:f9:3f:1a:3a:f3:f6:7c:a4:48:12:32:a6:36:
28:85:3d:33:b2:57:84:b1:95:53:88:62:f2:ec:c2:
8c:a2:66:09:dd:02:17:b9:48:00:95:eb:65:f1:37:
78:e0:75:ad:2b:c8:19:20:d7:47:80:a0:5d:7d:a6:
b7:45:6a:64:77:40:18:28:99:86:eb:40:57:a5:29:
d8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F1:FD:B7:5C:A6:F5:EA:9D:B5:AE:5E:40:A6:D6:53:AB:42:E2:DD
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/SvH9t1ym9eqdta5eQKbWU6tC4t0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.164.0/24
Signature Algorithm: sha256WithRSAEncryption
86:bc:a4:6b:a1:98:4a:fc:55:ad:61:74:c7:30:38:50:96:b2:
f9:9e:7c:50:78:2e:58:e8:2e:fd:de:c5:83:74:fa:a1:17:ff:
52:d9:26:21:c2:df:3f:7d:38:7d:d8:79:5b:99:32:77:9d:29:
3c:11:42:cd:be:a5:86:32:c5:8f:5c:7b:73:79:8b:1d:09:f1:
16:d1:dc:e7:a2:57:24:1a:2a:f3:da:50:83:93:3e:3e:b2:7c:
9b:be:57:7a:7a:34:76:93:db:1f:04:a7:02:6e:12:a6:7a:4d:
9e:69:9f:eb:97:bf:96:39:96:99:38:fe:c9:6d:96:a9:08:7a:
94:88:84:4a:0b:a5:fe:a5:c8:27:6e:74:ee:00:d2:99:a4:d5:
a3:28:c2:95:a8:c8:3b:ed:92:60:cd:81:a4:36:0d:af:21:12:
c8:7e:48:0b:da:73:b8:01:0b:d9:4f:9a:5e:f9:ff:1e:04:07:
b3:dc:f9:46:5e:8e:68:77:ac:47:67:1b:6a:3e:d8:5f:22:25:
1f:64:29:10:d9:0f:c4:85:be:67:a2:93:7c:32:37:4d:f4:e8:
a9:8e:95:c0:aa:98:b8:6d:d7:e6:84:c6:be:c5:d9:36:29:8c:
b1:c7:d4:1a:1f:5d:3a:09:1b:c6:c5:a7:fb:b7:5c:97:97:f0:
08:b4:55:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY/ZOCoZOeIrVmd8Xbdb6yJ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5
ZmMyYzkwHhcNMjQwNjAyMTM1MTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWYxZmRiNzVjYTZmNWVhOWRiNWFlNWU0MGE2ZDY1M2FiNDJlMmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc4ZT6koNFIxqE+D/znYKn4hDkSk
Ym//9CwpUBQx8NUCsoutUAMHxRdH9HEQnS7qVh9RErXNBq7nraKhH91Hau4tvdpQ
1taNq6N16swIEbtNlmLmdpbmHCHAte7a37ver7ysk/X0C1oFYA5+k5qPolY4yykJ
q8sysgQz6WFwPA+0acikRQtml57MzMBPGnBR9SiX5TzhF85AK5ewJGGKX8VStYO/
bK6X6AP1zSqOL5Ti7dx/Rvk/Gjrz9nykSBIypjYohT0zsleEsZVTiGLy7MKMomYJ
3QIXuUgAletl8Td44HWtK8gZINdHgKBdfaa3RWpkd0AYKJmG60BXpSnY1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFErx/bdcpvXqnbWuXkCm1lOrQuLdMB8GA1UdIwQY
MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct
MWM2ZWU0NGUxMWFkLzEvU3ZIOXQxeW05ZXFkdGE1ZVFLYldVNnRDNHQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk
LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2akMA0G
CSqGSIb3DQEBCwUAA4IBAQCGvKRroZhK/FWtYXTHMDhQlrL5nnxQeC5Y6C793sWD
dPqhF/9S2SYhwt8/fTh92HlbmTJ3nSk8EULNvqWGMsWPXHtzeYsdCfEW0dznolck
Girz2lCDkz4+snybvld6ejR2k9sfBKcCbhKmek2eaZ/rl7+WOZaZOP7JbZapCHqU
iIRKC6X+pcgnbnTuANKZpNWjKMKVqMg77ZJgzYGkNg2vIRLIfkgL2nO4AQvZT5pe
+f8eBAez3PlGXo5od6xHZxtqPthfIiUfZCkQ2Q/Ehb5nopN8MjdN9OipjpXAqpi4
bdfmhMa+xdk2KYyxx9QaH106CRvGxaf7t1yXl/AItFVM
-----END CERTIFICATE-----
Generated at Wed Jun 26 12:41:47 2024 by rpki-client on console-ams.rpki-client.org