Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/cTZBoqwNcRZN8TOdixkhZEU3skg.roa
File: cTZBoqwNcRZN8TOdixkhZEU3skg.roa (raw, json)
Hash identifier: h1CkCg0nZ3wscsqq6yg3cywOePkh6t8jXfrttDvQgKo=
Subject key identifier: 71:36:41:A2:AC:0D:71:16:4D:F1:33:9D:8B:19:21:64:45:37:B2:48
Certificate issuer: /CN=30be52bae4d48dddc9cbec2076aba91c953ae12e
Certificate serial: 018CC6B7A398B813E1A83305871E80543C61
Authority key identifier: 30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/cTZBoqwNcRZN8TOdixkhZEU3skg.roa
Signing time: Mon 01 Jan 2024 20:29:32 +0000
ROA not before: Mon 01 Jan 2024 20:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43305
IP address blocks: 91.198.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a3:98:b8:13:e1:a8:33:05:87:1e:80:54:3c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30be52bae4d48dddc9cbec2076aba91c953ae12e
Validity
Not Before: Jan 1 20:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=713641a2ac0d71164df1339d8b1921644537b248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:eb:84:50:f9:1c:a6:b4:89:f3:79:83:91:
2f:eb:81:ce:a9:08:6c:60:dd:92:71:d0:78:af:f7:
e4:6e:da:25:f3:08:c9:b9:d2:51:18:09:33:44:9d:
3a:ce:17:32:5d:0c:98:eb:4a:b6:8f:93:e5:65:75:
af:f1:2d:f5:0f:05:a9:c5:e0:b8:96:a0:37:b0:99:
60:9c:b1:c2:5e:90:ab:8d:74:12:08:51:51:b9:2e:
ca:c3:a2:97:4c:d1:b9:2b:fa:a1:e6:25:c4:2a:3b:
14:9e:78:db:38:34:96:9f:af:32:d7:f3:63:78:6f:
f1:5e:7d:65:21:37:93:e9:0c:95:a8:31:65:61:03:
20:68:32:ec:61:d9:e4:59:0a:eb:a3:0f:de:84:ae:
c9:78:0b:58:74:6e:0d:c8:63:9e:f8:53:8f:89:6d:
35:c9:6a:5c:cd:15:09:75:15:ba:fa:31:4c:14:a3:
7a:24:21:a3:f4:bc:d0:9b:30:5b:eb:70:ba:c1:ee:
c7:48:e5:2a:57:b6:22:85:b0:48:cf:ce:d8:fa:cf:
f3:07:34:53:65:44:4c:6d:18:06:4a:99:e2:ef:93:
ce:67:2e:ae:17:ec:78:17:c1:7a:0c:76:c2:f0:7e:
59:f2:1b:8c:15:77:32:69:f4:3a:81:e6:0d:43:f6:
ae:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:36:41:A2:AC:0D:71:16:4D:F1:33:9D:8B:19:21:64:45:37:B2:48
X509v3 Authority Key Identifier:
keyid:30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/cTZBoqwNcRZN8TOdixkhZEU3skg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.35.0/24
Signature Algorithm: sha256WithRSAEncryption
12:4c:63:d6:b1:f3:f3:3e:21:cb:e4:38:b0:e8:25:fb:2c:e9:
0f:58:23:69:2b:96:1d:9e:cf:38:19:bf:8a:3a:86:53:7e:97:
f5:e9:1d:ee:66:7c:31:7a:66:4c:43:de:56:ba:d3:f5:74:76:
f7:59:16:4b:0f:aa:52:db:1f:6e:d1:58:68:37:89:a7:87:c2:
23:a5:e9:c1:30:4b:d9:a5:57:b7:41:94:54:6f:48:c1:48:27:
e3:2d:70:ff:3a:f8:6b:0e:0e:3f:66:bc:47:1e:d0:6b:b1:80:
1e:a1:49:0c:55:66:c0:3e:ec:8a:20:58:67:a9:81:18:91:9c:
bf:00:ee:00:18:1b:15:b4:f4:35:48:fa:ab:db:b6:1f:3c:4b:
22:ba:e1:09:d9:89:02:41:ad:1a:1b:85:92:a2:8a:2c:8d:96:
05:58:3d:9a:13:47:46:21:28:18:19:1f:ee:68:36:85:cc:48:
16:2d:25:07:3a:7b:27:03:3a:c1:92:a7:a8:d7:83:58:8a:6a:
b4:80:04:a2:e6:bc:88:bb:4d:3c:b4:42:98:f8:ac:82:60:6c:
52:20:71:02:f3:fc:1a:95:9a:09:c7:b6:de:95:8a:44:96:23:
be:d8:84:36:26:30:94:3e:88:17:d7:d8:50:70:fc:9e:48:b1:
e2:b1:79:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGt6OYuBPhqDMFhx6AVDxhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYmU1MmJhZTRkNDhkZGRjOWNiZWMyMDc2YWJhOTFjOTUz
YWUxMmUwHhcNMjQwMTAxMjAyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTM2NDFhMmFjMGQ3MTE2NGRmMTMzOWQ4YjE5MjE2NDQ1MzdiMjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwzrhFD5HKa0ifN5g5Ev64HOqQhs
YN2ScdB4r/fkbtol8wjJudJRGAkzRJ06zhcyXQyY60q2j5PlZXWv8S31DwWpxeC4
lqA3sJlgnLHCXpCrjXQSCFFRuS7Kw6KXTNG5K/qh5iXEKjsUnnjbODSWn68y1/Nj
eG/xXn1lITeT6QyVqDFlYQMgaDLsYdnkWQrrow/ehK7JeAtYdG4NyGOe+FOPiW01
yWpczRUJdRW6+jFMFKN6JCGj9LzQmzBb63C6we7HSOUqV7YihbBIz87Y+s/zBzRT
ZURMbRgGSpni75POZy6uF+x4F8F6DHbC8H5Z8huMFXcyafQ6geYNQ/auTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHE2QaKsDXEWTfEznYsZIWRFN7JIMB8GA1UdIwQY
MBaAFDC+Urrk1I3dycvsIHarqRyVOuEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUw1U3V1VFVqZDNKeS13Z2RxdXBISlU2NFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81ZjU3NWYtOTkyYy00OGU5LTkxNTgt
ZDgwZjVlYTYyZDQ0LzEvY1RaQm9xd05jUlpOOFRPZGl4a2haRVUzc2tnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC81ZjU3NWYtOTkyYy00OGU5LTkxNTgtZDgwZjVlYTYyZDQ0
LzEvTUw1U3V1VFVqZDNKeS13Z2RxdXBISlU2NFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8YjMA0G
CSqGSIb3DQEBCwUAA4IBAQASTGPWsfPzPiHL5Diw6CX7LOkPWCNpK5Ydns84Gb+K
OoZTfpf16R3uZnwxemZMQ95WutP1dHb3WRZLD6pS2x9u0VhoN4mnh8IjpenBMEvZ
pVe3QZRUb0jBSCfjLXD/OvhrDg4/ZrxHHtBrsYAeoUkMVWbAPuyKIFhnqYEYkZy/
AO4AGBsVtPQ1SPqr27YfPEsiuuEJ2YkCQa0aG4WSooosjZYFWD2aE0dGISgYGR/u
aDaFzEgWLSUHOnsnAzrBkqeo14NYimq0gASi5ryIu008tEKY+KyCYGxSIHEC8/wa
lZoJx7belYpEliO+2IQ2JjCUPogX19hQcPyeSLHisXlB
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:37:42 2024 by rpki-client on console-fra.rpki-client.org