Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/0R3HKPvaLGo5XwxWtv3pb7eMF8k.roa
File: 0R3HKPvaLGo5XwxWtv3pb7eMF8k.roa (raw, json)
Hash identifier: swWV//Z9e4bsvEizHUmsftfoYcEaDm9hxuX8YLMdbTw=
Subject key identifier: D1:1D:C7:28:FB:DA:2C:6A:39:5F:0C:56:B6:FD:E9:6F:B7:8C:17:C9
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 018CC50032411B13309DB75C621F89B7E42B
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/0R3HKPvaLGo5XwxWtv3pb7eMF8k.roa
Signing time: Mon 01 Jan 2024 12:29:33 +0000
ROA not before: Mon 01 Jan 2024 12:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 91.213.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:32:41:1b:13:30:9d:b7:5c:62:1f:89:b7:e4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 1 12:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d11dc728fbda2c6a395f0c56b6fde96fb78c17c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b6:3f:49:01:6b:51:b0:0c:2a:aa:60:d4:e4:
8e:d4:08:18:21:3e:e7:c1:f7:a6:00:3f:32:dd:4f:
5a:eb:a4:5e:40:f5:8a:86:12:72:09:57:9f:67:6c:
40:67:08:93:a0:1d:e8:bf:bd:7c:57:e0:f9:34:5f:
5b:b1:05:df:8f:5b:dc:e6:81:38:f6:6a:b8:1a:88:
18:dc:44:d6:0f:1a:db:e2:ec:69:a3:3e:6c:7e:f6:
6f:ba:e3:7e:fb:74:08:cc:2e:03:f1:67:9a:98:71:
46:95:b3:c3:26:13:52:29:3e:25:c3:b7:a2:62:1f:
fe:93:6f:78:3a:85:dd:5b:8b:37:ce:f0:ce:ad:69:
72:9a:81:61:9f:fc:3f:81:47:55:61:75:2d:9b:3b:
a6:22:32:a8:77:f8:12:8f:55:79:5f:4b:e7:f2:3f:
98:a1:a4:d4:09:d1:4b:c4:b1:54:28:31:14:38:73:
06:7c:91:a3:5d:53:31:2b:43:ef:d0:9d:0a:80:11:
89:c6:7d:9b:08:23:89:73:dd:a8:1f:f8:ec:a7:53:
5b:95:03:b1:43:8f:67:2f:2c:7c:df:4b:5c:b1:ac:
26:cf:99:9c:c4:75:a3:f2:e0:63:0c:b4:45:1a:2f:
92:d5:42:82:5f:52:ad:b7:69:00:12:2f:a8:87:f5:
ee:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1D:C7:28:FB:DA:2C:6A:39:5F:0C:56:B6:FD:E9:6F:B7:8C:17:C9
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/0R3HKPvaLGo5XwxWtv3pb7eMF8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.186.0/24
Signature Algorithm: sha256WithRSAEncryption
36:25:fb:10:7d:d4:b7:40:8b:c7:d1:da:13:3a:54:f9:bd:c2:
2f:76:34:4d:79:34:9a:e5:de:d0:07:94:b1:38:cf:f7:68:d5:
26:53:5b:02:f2:8a:5b:59:5f:c0:a5:17:eb:07:ba:70:2e:61:
b9:2b:9e:3d:b1:6b:e0:59:ce:8c:f1:1a:08:3e:e1:95:aa:42:
3e:d5:82:1e:70:87:cc:bd:64:3f:aa:a6:c7:17:5f:4f:98:75:
7a:9b:b2:48:5d:26:8e:38:f6:e4:8b:26:1f:db:ff:0c:1d:c0:
8c:90:cc:90:1c:23:e0:d0:c9:a8:a6:56:d6:3c:ed:41:87:04:
4f:1d:e7:e8:5b:5f:84:40:17:8a:59:86:20:ed:ce:11:c3:82:
6c:3b:64:2e:ac:a3:cc:3e:06:a4:78:23:cd:ff:a5:2d:86:5b:
82:2c:64:77:5e:54:70:85:77:13:2d:fb:21:b3:52:23:f0:2f:
3c:36:3a:f2:45:7c:a8:31:2e:17:52:cd:c8:45:8c:30:0e:58:
96:ef:df:81:21:5b:49:30:39:9f:23:10:61:b5:65:88:76:26:
32:47:95:5a:ba:a3:3a:e4:46:42:4e:c8:2a:a1:e4:5a:f9:cc:
25:60:15:31:88:ec:3e:83:e5:98:d2:8e:19:6c:61:75:e9:c8:
e6:43:33:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFADJBGxMwnbdcYh+Jt+QrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm
YmM0YTkwHhcNMjQwMTAxMTIyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTFkYzcyOGZiZGEyYzZhMzk1ZjBjNTZiNmZkZTk2ZmI3OGMxN2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLY/SQFrUbAMKqpg1OSO1AgYIT7n
wfemAD8y3U9a66ReQPWKhhJyCVefZ2xAZwiToB3ov718V+D5NF9bsQXfj1vc5oE4
9mq4GogY3ETWDxrb4uxpoz5sfvZvuuN++3QIzC4D8WeamHFGlbPDJhNSKT4lw7ei
Yh/+k294OoXdW4s3zvDOrWlymoFhn/w/gUdVYXUtmzumIjKod/gSj1V5X0vn8j+Y
oaTUCdFLxLFUKDEUOHMGfJGjXVMxK0Pv0J0KgBGJxn2bCCOJc92oH/jsp1NblQOx
Q49nLyx830tcsawmz5mcxHWj8uBjDLRFGi+S1UKCX1Ktt2kAEi+oh/XuIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNEdxyj72ixqOV8MVrb96W+3jBfJMB8GA1UdIwQY
MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt
NmM3ZTU2ODU4OTBjLzEvMFIzSEtQdmFMR281WHd4V3R2M3BiN2VNRjhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj
LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9W6MA0G
CSqGSIb3DQEBCwUAA4IBAQA2JfsQfdS3QIvH0doTOlT5vcIvdjRNeTSa5d7QB5Sx
OM/3aNUmU1sC8opbWV/ApRfrB7pwLmG5K549sWvgWc6M8RoIPuGVqkI+1YIecIfM
vWQ/qqbHF19PmHV6m7JIXSaOOPbkiyYf2/8MHcCMkMyQHCPg0MmoplbWPO1BhwRP
HefoW1+EQBeKWYYg7c4Rw4JsO2QurKPMPgakeCPN/6UthluCLGR3XlRwhXcTLfsh
s1Ij8C88NjryRXyoMS4XUs3IRYwwDliW79+BIVtJMDmfIxBhtWWIdiYyR5VauqM6
5EZCTsgqoeRa+cwlYBUxiOw+g+WY0o4ZbGF16cjmQzOV
-----END CERTIFICATE-----
Generated at Sat May 4 00:16:55 2024 by rpki-client on console-ams.rpki-client.org