Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/qikDR7WRibuSby0yKmtjqknxmMA.roa
File: qikDR7WRibuSby0yKmtjqknxmMA.roa (raw, json)
Hash identifier: +N/uO0QmfxsKHlWPxpBIlisKVUsCAcdJTR0vwwNyniQ=
Subject key identifier: AA:29:03:47:B5:91:89:BB:92:6F:2D:32:2A:6B:63:AA:49:F1:98:C0
Certificate issuer: /CN=5134d1320645644e2eaf3685879d693f72522c76
Certificate serial: 018CC4931094770590D232F902B95775833B
Authority key identifier: 51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/qikDR7WRibuSby0yKmtjqknxmMA.roa
Signing time: Mon 01 Jan 2024 10:30:21 +0000
ROA not before: Mon 01 Jan 2024 10:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208098
IP address blocks: 91.194.24.0/24 maxlen: 24
91.194.24.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:10:94:77:05:90:d2:32:f9:02:b9:57:75:83:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5134d1320645644e2eaf3685879d693f72522c76
Validity
Not Before: Jan 1 10:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa290347b59189bb926f2d322a6b63aa49f198c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:e9:0c:d4:97:fd:75:b3:fe:75:c6:72:60:
ad:37:ed:d9:72:3d:03:a8:93:a7:d5:3c:35:96:f5:
d0:4a:16:58:55:0a:01:59:54:b0:0c:11:9d:dc:f0:
52:52:b5:c5:f1:50:25:f5:45:24:c1:f4:e7:e5:2e:
72:16:58:7d:7f:e9:fb:bb:4c:de:0c:49:70:6f:d3:
0b:2c:86:97:75:5d:8b:e7:6a:f1:5b:15:b1:6b:ed:
e0:4a:55:1d:50:a0:1c:a6:44:96:d7:74:12:4d:a1:
aa:5b:c0:fb:5b:9c:d0:28:05:f5:ce:8d:82:b4:59:
ff:34:2c:e8:ca:01:f0:48:cf:cd:ac:cc:98:69:b1:
4d:d5:b8:eb:8a:27:69:a2:ad:29:95:c3:ac:a9:7a:
a2:92:5f:96:ed:4c:fc:ae:92:38:1f:c5:f9:1b:02:
5f:1e:ff:32:8d:53:9e:e6:d0:bc:6b:80:92:61:36:
49:09:66:0e:ba:94:eb:c6:c5:36:7c:a4:e1:30:da:
fd:ab:ee:17:92:e8:83:e4:13:80:5c:4f:35:62:37:
af:db:5a:44:62:54:6a:39:6b:5a:4c:fe:b6:7d:c0:
a6:60:e4:fe:2e:b2:b9:fe:4b:83:7e:cf:23:f7:fc:
44:c4:2b:bb:03:c8:44:e6:ff:55:25:63:c4:2e:86:
f8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:29:03:47:B5:91:89:BB:92:6F:2D:32:2A:6B:63:AA:49:F1:98:C0
X509v3 Authority Key Identifier:
keyid:51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/qikDR7WRibuSby0yKmtjqknxmMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.24.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:11:8b:23:8b:b9:5c:43:55:2b:3b:a6:8e:5f:f9:2b:78:d4:
38:3b:00:6c:fc:01:c6:3b:50:d9:05:2b:db:26:d2:93:a1:f1:
ef:e2:38:4d:b2:38:bb:d8:79:e8:41:4d:1f:b2:96:cc:dc:82:
fc:31:fd:f9:70:9a:e2:e1:2d:78:00:68:13:70:50:6e:c8:71:
44:9c:69:b8:c9:e7:82:56:66:f1:83:43:a9:3c:da:6e:64:13:
bf:7e:b7:e8:15:69:e9:ad:76:d2:e8:b2:fd:50:a0:ae:40:d3:
d0:4d:72:38:ff:d6:77:78:02:a6:80:96:d5:11:1e:33:ab:0a:
da:3e:ce:a5:64:34:0d:ff:31:d3:45:ef:6c:63:ba:a5:54:8a:
16:95:dd:25:ef:29:bd:91:99:0b:50:26:2a:2e:c9:77:59:02:
40:3b:d4:eb:ec:54:1b:47:d1:42:6a:a8:5d:ae:20:ab:2b:31:
05:59:b5:86:6e:f0:35:56:9d:56:c0:41:12:63:de:90:8a:9f:
ba:c9:e3:3d:aa:04:7f:bc:38:55:2a:95:72:01:5e:0f:c7:3b:
2c:9f:0a:94:21:23:fd:92:fe:ad:b5:42:44:af:9a:a2:90:65:
03:4f:65:30:44:05:16:eb:6e:2c:b8:cc:1e:4b:ae:31:5f:f9:
dd:4e:8f:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkxCUdwWQ0jL5ArlXdYM7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMzRkMTMyMDY0NTY0NGUyZWFmMzY4NTg3OWQ2OTNmNzI1
MjJjNzYwHhcNMjQwMTAxMTAzMDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTI5MDM0N2I1OTE4OWJiOTI2ZjJkMzIyYTZiNjNhYTQ5ZjE5OGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9DpDNSX/XWz/nXGcmCtN+3Zcj0D
qJOn1Tw1lvXQShZYVQoBWVSwDBGd3PBSUrXF8VAl9UUkwfTn5S5yFlh9f+n7u0ze
DElwb9MLLIaXdV2L52rxWxWxa+3gSlUdUKAcpkSW13QSTaGqW8D7W5zQKAX1zo2C
tFn/NCzoygHwSM/NrMyYabFN1bjriidpoq0plcOsqXqikl+W7Uz8rpI4H8X5GwJf
Hv8yjVOe5tC8a4CSYTZJCWYOupTrxsU2fKThMNr9q+4XkuiD5BOAXE81Yjev21pE
YlRqOWtaTP62fcCmYOT+LrK5/kuDfs8j9/xExCu7A8hE5v9VJWPELob4lwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKopA0e1kYm7km8tMiprY6pJ8ZjAMB8GA1UdIwQY
MBaAFFE00TIGRWROLq82hYedaT9yUix2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVRUUk1nWkZaRTR1cnphRmg1MXBQM0pTTEhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS85ZmIxZDctODQyNC00Yzg0LWIwY2It
MmY1MWVjZDFhYTBlLzEvcWlrRFI3V1JpYnVTYnkweUttdGpxa254bU1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS85ZmIxZDctODQyNC00Yzg0LWIwY2ItMmY1MWVjZDFhYTBl
LzEvVVRUUk1nWkZaRTR1cnphRmg1MXBQM0pTTEhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8IYMA0G
CSqGSIb3DQEBCwUAA4IBAQAbEYsji7lcQ1UrO6aOX/kreNQ4OwBs/AHGO1DZBSvb
JtKTofHv4jhNsji72HnoQU0fspbM3IL8Mf35cJri4S14AGgTcFBuyHFEnGm4yeeC
Vmbxg0OpPNpuZBO/frfoFWnprXbS6LL9UKCuQNPQTXI4/9Z3eAKmgJbVER4zqwra
Ps6lZDQN/zHTRe9sY7qlVIoWld0l7ym9kZkLUCYqLsl3WQJAO9Tr7FQbR9FCaqhd
riCrKzEFWbWGbvA1Vp1WwEESY96Qip+6yeM9qgR/vDhVKpVyAV4PxzssnwqUISP9
kv6ttUJEr5qikGUDT2UwRAUW624suMweS64xX/ndTo9r
-----END CERTIFICATE-----
Generated at Sun Jun 2 06:39:38 2024 by rpki-client on console-ams.rpki-client.org