Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/hIg9r8OpMfX37QOna-BNx0A6PX8.roa
File: hIg9r8OpMfX37QOna-BNx0A6PX8.roa (raw, json)
Hash identifier: SjB/gXX6frGKBY3Ck3nHx5JYLScdkCtYKv6pD4Am71I=
Subject key identifier: 84:88:3D:AF:C3:A9:31:F5:F7:ED:03:A7:6B:E0:4D:C7:40:3A:3D:7F
Certificate issuer: /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial: 018FF2F8E3B0F9924D68B29EA4350C64F9D4
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/hIg9r8OpMfX37QOna-BNx0A6PX8.roa
Signing time: Fri 07 Jun 2024 13:52:28 +0000
ROA not before: Fri 07 Jun 2024 13:52:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207301
IP address blocks: 91.197.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f2:f8:e3:b0:f9:92:4d:68:b2:9e:a4:35:0c:64:f9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Validity
Not Before: Jun 7 13:52:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84883dafc3a931f5f7ed03a76be04dc7403a3d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ec:30:4f:7d:8c:69:b2:a6:1a:c1:12:5d:e1:
1e:6c:86:8d:ff:0c:d4:03:6a:d1:c8:fe:9f:0a:28:
2b:b0:d5:93:f6:2f:42:49:17:71:63:9f:25:4d:cb:
86:cd:0d:0c:ab:07:3a:3b:a1:db:ee:5f:92:22:54:
af:dc:3a:c2:51:2d:7d:69:b4:c7:a0:30:83:0b:48:
78:ce:f3:a2:72:f4:04:35:f8:ca:91:54:80:82:66:
fe:12:ff:36:f4:83:f5:90:5f:88:e6:ed:2c:f3:23:
52:f3:ed:cd:58:93:9b:b6:cf:e9:47:a7:90:8e:57:
32:ff:89:d3:bc:ae:c6:4e:6a:10:67:51:33:a3:de:
ee:77:32:60:7a:f3:f5:5b:84:1d:2a:29:19:81:97:
38:54:c5:16:da:09:fe:0a:55:53:f0:f5:2b:87:2a:
48:fc:f7:79:11:5e:1e:4c:64:05:96:0f:90:d9:2f:
26:c4:4c:10:76:34:a2:39:7a:2a:3f:51:cd:0e:72:
b4:74:a3:1c:f9:70:33:92:e1:93:4b:f3:21:3c:5d:
7a:7c:04:31:13:c9:5e:fe:96:7a:35:9d:bb:ca:ec:
c7:f8:3b:8b:b7:2b:84:58:83:65:b6:1f:7c:37:53:
52:c6:ce:d9:12:21:3b:58:a8:d6:0b:ac:53:2c:a3:
17:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:88:3D:AF:C3:A9:31:F5:F7:ED:03:A7:6B:E0:4D:C7:40:3A:3D:7F
X509v3 Authority Key Identifier:
keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/hIg9r8OpMfX37QOna-BNx0A6PX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.70.0/24
Signature Algorithm: sha256WithRSAEncryption
21:db:0c:9b:72:cd:87:89:89:7a:57:30:c8:c6:05:0b:f9:35:
c4:8d:af:01:59:55:d5:0e:29:6a:d6:7e:d7:e1:5c:4e:32:63:
ed:2b:35:9a:7e:dd:64:52:42:f0:6a:aa:92:9e:6c:07:96:a7:
24:1d:63:6c:e3:a1:aa:ee:ae:42:40:7c:59:ed:6e:09:89:7b:
f1:3d:c7:4b:88:d0:e9:6e:1e:2e:bc:06:be:69:60:6e:d9:84:
69:6e:05:41:6b:f1:de:3c:b8:89:b9:b5:c5:7a:da:cb:31:e1:
93:09:1f:3c:0c:eb:6d:a7:b5:c4:1a:64:0b:53:29:02:74:43:
4d:f1:13:66:90:b3:be:7e:00:9e:c1:39:46:a3:0e:fe:0c:f4:
d5:e5:d6:c5:d1:1f:34:f0:32:b2:8e:02:dd:fd:3d:be:d1:50:
de:95:77:72:1d:ba:bb:b3:76:81:8d:8d:a0:9c:7c:72:90:93:
e3:c8:4b:0c:ac:8e:82:10:df:5d:ae:87:27:8b:5e:37:3d:f6:
8a:d6:5c:87:ad:55:e0:01:e0:f9:8b:0e:bf:90:29:40:e7:3a:
1f:c7:bf:21:c0:4a:6c:45:56:f1:d3:c1:68:29:96:6f:09:c1:
53:33:9e:cb:6a:dc:21:88:f4:9a:82:55:cb:a8:21:c5:00:17:
95:aa:ba:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY/y+OOw+ZJNaLKepDUMZPnUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYjM5NmRmYTk1MWVjNDE1N2YyMTFlNWVkNzQwZWQ5N2Ux
YjBmM2YwHhcNMjQwNjA3MTM1MjI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDg4M2RhZmMzYTkzMWY1ZjdlZDAzYTc2YmUwNGRjNzQwM2EzZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OwwT32MabKmGsESXeEebIaN/wzU
A2rRyP6fCigrsNWT9i9CSRdxY58lTcuGzQ0Mqwc6O6Hb7l+SIlSv3DrCUS19abTH
oDCDC0h4zvOicvQENfjKkVSAgmb+Ev829IP1kF+I5u0s8yNS8+3NWJObts/pR6eQ
jlcy/4nTvK7GTmoQZ1Ezo97udzJgevP1W4QdKikZgZc4VMUW2gn+ClVT8PUrhypI
/Pd5EV4eTGQFlg+Q2S8mxEwQdjSiOXoqP1HNDnK0dKMc+XAzkuGTS/MhPF16fAQx
E8le/pZ6NZ27yuzH+DuLtyuEWINlth98N1NSxs7ZEiE7WKjWC6xTLKMXpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFISIPa/DqTH19+0Dp2vgTcdAOj1/MB8GA1UdIwQY
MBaAFNuzlt+pUexBV/IR5e10Dtl+Gw8/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjdPVzM2bFI3RUZYOGhIbDdYUU8yWDRiRHo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iMzk4N2EtNDUwNC00NzQ5LTlkNzMt
ZGY1NzJmZTk2NzJhLzEvaElnOXI4T3BNZlgzN1FPbmEtQk54MEE2UFg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9iMzk4N2EtNDUwNC00NzQ5LTlkNzMtZGY1NzJmZTk2NzJh
LzEvMjdPVzM2bFI3RUZYOGhIbDdYUU8yWDRiRHo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8VGMA0G
CSqGSIb3DQEBCwUAA4IBAQAh2wybcs2HiYl6VzDIxgUL+TXEja8BWVXVDilq1n7X
4VxOMmPtKzWaft1kUkLwaqqSnmwHlqckHWNs46Gq7q5CQHxZ7W4JiXvxPcdLiNDp
bh4uvAa+aWBu2YRpbgVBa/HePLiJubXFetrLMeGTCR88DOttp7XEGmQLUykCdENN
8RNmkLO+fgCewTlGow7+DPTV5dbF0R808DKyjgLd/T2+0VDelXdyHbq7s3aBjY2g
nHxykJPjyEsMrI6CEN9drocni143PfaK1lyHrVXgAeD5iw6/kClA5zofx78hwEps
RVbx08FoKZZvCcFTM57LatwhiPSaglXLqCHFABeVqrr9
-----END CERTIFICATE-----
Generated at Mon Jun 24 10:26:00 2024 by rpki-client on console-fra.rpki-client.org