Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/6TuDDihtdyW25uHQOPgx-JmC7gE.roa
File: 6TuDDihtdyW25uHQOPgx-JmC7gE.roa (raw, json)
Hash identifier: vD7BSMDciYHggxg8Z/YewReuU7WLWS5R5vvvnkfnE0Q=
Subject key identifier: E9:3B:83:0E:28:6D:77:25:B6:E6:E1:D0:38:F8:31:F8:99:82:EE:01
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CCA2A706420E4758DCE11EA469B3106C7
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/6TuDDihtdyW25uHQOPgx-JmC7gE.roa
Signing time: Tue 02 Jan 2024 12:33:47 +0000
ROA not before: Tue 02 Jan 2024 12:33:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 91.132.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:70:64:20:e4:75:8d:ce:11:ea:46:9b:31:06:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:33:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e93b830e286d7725b6e6e1d038f831f89982ee01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:df:ec:59:d7:55:91:16:82:50:df:72:45:db:
0f:d5:a6:ff:d4:df:fe:91:1a:96:b1:af:97:42:82:
e9:b4:9e:09:8f:ee:70:18:e4:ab:7f:17:9a:26:bf:
80:32:14:18:d0:10:97:ba:cc:3d:28:24:ac:45:6a:
8e:4c:b2:06:f6:af:d4:87:0b:a2:44:ef:9d:58:be:
2f:41:4f:61:ed:e6:3c:1b:5e:8c:dc:21:a4:64:93:
76:03:00:13:ab:9d:98:54:c2:3c:02:23:ed:b0:d2:
aa:75:a6:c1:8b:0a:82:fc:ef:80:17:03:3e:ef:89:
40:1a:f5:ff:39:5b:b0:9e:f6:31:d5:60:fa:e2:61:
7b:2f:63:e4:67:a9:76:20:c1:e5:ff:d7:8e:de:6c:
b9:8c:c6:fe:cf:c5:43:4e:d9:99:15:68:b0:8c:f2:
ce:bf:e0:ef:17:71:56:e7:7e:39:33:c5:5e:d1:69:
bb:54:60:f3:55:af:71:cb:ef:0c:04:50:6f:a2:e8:
dc:e0:e6:8d:46:3c:8e:a5:71:42:3b:d7:03:f3:03:
4e:43:a7:d6:b1:64:aa:fe:ef:fe:3c:1d:71:5f:54:
ce:4b:7c:e3:e8:68:dd:5a:4d:41:b4:f3:40:be:53:
cf:f0:9e:1e:c3:b5:df:cb:d0:d5:f8:f6:7a:7a:42:
bc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3B:83:0E:28:6D:77:25:B6:E6:E1:D0:38:F8:31:F8:99:82:EE:01
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/6TuDDihtdyW25uHQOPgx-JmC7gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.59.0/24
Signature Algorithm: sha256WithRSAEncryption
34:c1:b9:f0:8a:6f:6e:62:84:37:67:68:a1:d9:a1:1b:d9:d0:
80:76:29:88:7d:45:42:b1:31:9e:25:07:ea:1f:db:76:b6:ba:
52:8e:6d:ef:99:82:67:c8:d8:73:f5:fb:5e:e7:d6:35:eb:40:
5b:c6:56:6f:d1:75:fa:5e:75:8d:51:c1:16:35:a2:5d:07:a9:
3e:9e:90:ce:f8:f7:e9:82:61:4a:82:af:e0:3d:6f:76:b5:3b:
d8:65:7b:72:12:fa:f8:25:4e:68:f6:47:e6:1c:06:2f:73:7d:
10:ea:c6:51:d5:9f:53:d2:c4:a8:66:a8:96:a4:e1:55:06:e1:
f7:cd:eb:b6:9b:23:4b:0f:d8:78:e8:eb:15:0a:f0:34:5f:14:
a0:6c:b4:77:4d:ac:58:69:ac:ea:7b:98:27:6b:6a:10:5f:59:
9d:ab:e9:9c:b3:79:8c:05:cc:55:20:37:9b:a6:49:ca:f5:f6:
95:e9:40:5a:20:f2:25:cd:a8:3d:11:c7:71:85:8f:03:ab:ee:
8f:99:46:12:9a:e1:4b:ea:18:99:28:d4:ab:35:b6:bf:9d:db:
d5:a9:18:ea:5a:14:85:a6:7a:a3:3f:e8:5f:6d:5e:79:6d:42:
79:17:c6:09:00:1c:e0:92:80:5b:46:b6:3f:3c:8c:9c:f8:9f:
aa:ec:95:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKnBkIOR1jc4R6kabMQbHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjQwMTAyMTIzMzQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTNiODMwZTI4NmQ3NzI1YjZlNmUxZDAzOGY4MzFmODk5ODJlZTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod/sWddVkRaCUN9yRdsP1ab/1N/+
kRqWsa+XQoLptJ4Jj+5wGOSrfxeaJr+AMhQY0BCXusw9KCSsRWqOTLIG9q/Uhwui
RO+dWL4vQU9h7eY8G16M3CGkZJN2AwATq52YVMI8AiPtsNKqdabBiwqC/O+AFwM+
74lAGvX/OVuwnvYx1WD64mF7L2PkZ6l2IMHl/9eO3my5jMb+z8VDTtmZFWiwjPLO
v+DvF3FW5345M8Ve0Wm7VGDzVa9xy+8MBFBvoujc4OaNRjyOpXFCO9cD8wNOQ6fW
sWSq/u/+PB1xX1TOS3zj6GjdWk1BtPNAvlPP8J4ew7Xfy9DV+PZ6ekK8IQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOk7gw4obXcltubh0Dj4MfiZgu4BMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvNlR1RERpaHRkeVcyNXVIUU9QZ3gtSm1DN2dFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW4Q7MA0G
CSqGSIb3DQEBCwUAA4IBAQA0wbnwim9uYoQ3Z2ih2aEb2dCAdimIfUVCsTGeJQfq
H9t2trpSjm3vmYJnyNhz9fte59Y160BbxlZv0XX6XnWNUcEWNaJdB6k+npDO+Pfp
gmFKgq/gPW92tTvYZXtyEvr4JU5o9kfmHAYvc30Q6sZR1Z9T0sSoZqiWpOFVBuH3
zeu2myNLD9h46OsVCvA0XxSgbLR3TaxYaazqe5gna2oQX1mdq+mcs3mMBcxVIDeb
pknK9faV6UBaIPIlzag9EcdxhY8Dq+6PmUYSmuFL6hiZKNSrNba/ndvVqRjqWhSF
pnqjP+hfbV55bUJ5F8YJABzgkoBbRrY/PIyc+J+q7JXh
-----END CERTIFICATE-----
Generated at Sat May 4 18:09:13 2024 by rpki-client on console-ams.rpki-client.org