Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22ffcc-592a-4a1c-b515-c1aefed4d8f9/1/P3YtcKwDrmzzPBWnSwXWiYCGZEQ.roa
File: P3YtcKwDrmzzPBWnSwXWiYCGZEQ.roa (raw, json)
Hash identifier: dt2UUChcdCX18tspBVqIaCaZ9yQH1DCzsuCux/0b3RY=
Subject key identifier: 3F:76:2D:70:AC:03:AE:6C:F3:3C:15:A7:4B:05:D6:89:80:86:64:44
Certificate issuer: /CN=2672a1b1a78ea1813599efea9c8e032e9ef42690
Certificate serial: 0190112549CDF37A12CDFF9EFF2B1F7E34B0
Authority key identifier: 26:72:A1:B1:A7:8E:A1:81:35:99:EF:EA:9C:8E:03:2E:9E:F4:26:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnKhsaeOoYE1me_qnI4DLp70JpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22ffcc-592a-4a1c-b515-c1aefed4d8f9/1/P3YtcKwDrmzzPBWnSwXWiYCGZEQ.roa
Signing time: Thu 13 Jun 2024 10:29:34 +0000
ROA not before: Thu 13 Jun 2024 10:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210449
IP address blocks: 91.199.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22ffcc-592a-4a1c-b515-c1aefed4d8f9/1/JnKhsaeOoYE1me_qnI4DLp70JpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22ffcc-592a-4a1c-b515-c1aefed4d8f9/1/JnKhsaeOoYE1me_qnI4DLp70JpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JnKhsaeOoYE1me_qnI4DLp70JpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 13:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:11:25:49:cd:f3:7a:12:cd:ff:9e:ff:2b:1f:7e:34:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2672a1b1a78ea1813599efea9c8e032e9ef42690
Validity
Not Before: Jun 13 10:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f762d70ac03ae6cf33c15a74b05d68980866444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:d6:07:c1:2f:ee:7d:13:f7:24:79:d3:ba:
0e:17:68:c2:e1:24:c2:52:22:a4:8f:52:1e:72:ce:
2b:62:3f:49:f0:64:5b:8b:10:7b:d8:06:09:fb:dd:
90:bf:fd:c1:44:0a:ce:98:25:f1:43:31:70:1e:e9:
bd:f5:b3:69:76:8c:35:a0:f5:7c:cc:16:70:98:50:
89:df:c9:98:0e:9e:57:68:3a:62:dc:06:f0:bb:50:
eb:15:09:8a:01:31:79:68:2c:26:96:c2:0b:50:17:
0d:04:35:51:85:ae:de:f1:f9:7d:5f:c6:01:89:b0:
84:da:4e:be:81:50:03:6a:04:db:95:0e:78:13:f4:
ff:10:75:0d:ff:88:2e:ef:f2:25:87:73:2c:58:cb:
63:1a:a6:47:c4:e0:01:8a:4b:d7:5e:51:8b:8a:f0:
11:e8:d1:a1:11:bb:ec:7b:6d:17:c6:9e:50:c8:a0:
e1:be:43:c8:de:ab:87:d7:6e:2e:5b:3a:ec:03:56:
f8:7f:5f:96:53:ee:47:27:32:e3:ca:8b:34:22:86:
12:cb:31:1a:8f:a9:71:2d:fe:63:97:f0:8a:10:67:
63:02:50:be:d7:82:d1:fe:f2:c1:e8:41:e1:60:e0:
6e:f1:7c:b6:9f:fe:99:a0:20:21:a6:9c:fe:3c:e1:
9d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:76:2D:70:AC:03:AE:6C:F3:3C:15:A7:4B:05:D6:89:80:86:64:44
X509v3 Authority Key Identifier:
keyid:26:72:A1:B1:A7:8E:A1:81:35:99:EF:EA:9C:8E:03:2E:9E:F4:26:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnKhsaeOoYE1me_qnI4DLp70JpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22ffcc-592a-4a1c-b515-c1aefed4d8f9/1/P3YtcKwDrmzzPBWnSwXWiYCGZEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22ffcc-592a-4a1c-b515-c1aefed4d8f9/1/JnKhsaeOoYE1me_qnI4DLp70JpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.40.0/24
Signature Algorithm: sha256WithRSAEncryption
77:50:a8:b5:cc:0d:6e:51:99:bf:c7:21:34:99:69:71:8a:89:
8b:23:7b:f0:66:75:73:28:20:a6:10:25:10:a8:94:1e:c0:00:
c4:c1:77:2c:b7:d2:8f:2a:3f:08:1e:c3:e4:f7:a7:1c:af:6d:
c9:94:69:85:d8:9d:24:f5:26:b7:5c:48:27:5f:35:25:5e:f6:
26:aa:94:92:c9:5f:31:14:c4:46:ff:5f:89:9c:6f:f7:3e:4e:
c7:58:6e:a1:df:99:cd:6b:46:60:59:56:60:ad:cf:3e:bb:9c:
42:22:4f:84:74:df:ff:28:90:8f:a0:73:ed:17:c9:0c:12:38:
99:09:d2:f4:ea:c9:4a:1f:03:00:52:56:f9:49:a7:f1:3d:8c:
0b:e4:33:8d:d7:a0:76:51:cf:10:e9:c9:b5:c5:d4:6c:f7:55:
fe:5a:5f:d8:6c:02:82:02:ca:05:3b:d4:a8:dc:a9:b2:f1:54:
76:ee:98:e4:7f:3d:6f:00:c0:55:04:00:83:fc:9b:68:df:76:
70:f8:ec:9a:9b:5c:68:ba:8f:f6:48:fd:7b:0f:fc:aa:6a:61:
46:37:b0:af:cb:c6:fc:fa:ff:f2:a3:41:8f:5a:80:47:a9:13:
4c:59:52:ae:03:e5:8c:08:c7:13:02:d9:3c:0a:80:62:b7:ea:
5a:2d:c8:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZARJUnN83oSzf+e/ysffjSwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NzJhMWIxYTc4ZWExODEzNTk5ZWZlYTljOGUwMzJlOWVm
NDI2OTAwHhcNMjQwNjEzMTAyOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjc2MmQ3MGFjMDNhZTZjZjMzYzE1YTc0YjA1ZDY4OTgwODY2NDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumDWB8Ev7n0T9yR507oOF2jC4STC
UiKkj1Iecs4rYj9J8GRbixB72AYJ+92Qv/3BRArOmCXxQzFwHum99bNpdow1oPV8
zBZwmFCJ38mYDp5XaDpi3Abwu1DrFQmKATF5aCwmlsILUBcNBDVRha7e8fl9X8YB
ibCE2k6+gVADagTblQ54E/T/EHUN/4gu7/Ilh3MsWMtjGqZHxOABikvXXlGLivAR
6NGhEbvse20Xxp5QyKDhvkPI3quH124uWzrsA1b4f1+WU+5HJzLjyos0IoYSyzEa
j6lxLf5jl/CKEGdjAlC+14LR/vLB6EHhYOBu8Xy2n/6ZoCAhppz+POGdCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD92LXCsA65s8zwVp0sF1omAhmREMB8GA1UdIwQY
MBaAFCZyobGnjqGBNZnv6pyOAy6e9CaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm5LaHNhZU9vWUUxbWVfcW5JNERMcDcwSnBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmZmY2MtNTkyYS00YTFjLWI1MTUt
YzFhZWZlZDRkOGY5LzEvUDNZdGNLd0RybXp6UEJXblN3WFdpWUNHWkVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yMmZmY2MtNTkyYS00YTFjLWI1MTUtYzFhZWZlZDRkOGY5
LzEvSm5LaHNhZU9vWUUxbWVfcW5JNERMcDcwSnBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8coMA0G
CSqGSIb3DQEBCwUAA4IBAQB3UKi1zA1uUZm/xyE0mWlxiomLI3vwZnVzKCCmECUQ
qJQewADEwXcst9KPKj8IHsPk96ccr23JlGmF2J0k9Sa3XEgnXzUlXvYmqpSSyV8x
FMRG/1+JnG/3Pk7HWG6h35nNa0ZgWVZgrc8+u5xCIk+EdN//KJCPoHPtF8kMEjiZ
CdL06slKHwMAUlb5SafxPYwL5DON16B2Uc8Q6cm1xdRs91X+Wl/YbAKCAsoFO9So
3Kmy8VR27pjkfz1vAMBVBACD/Jto33Zw+Oyam1xouo/2SP17D/yqamFGN7Cvy8b8
+v/yo0GPWoBHqRNMWVKuA+WMCMcTAtk8CoBit+paLcjo
-----END CERTIFICATE-----
Generated at Mon Jul 1 18:01:24 2024 by rpki-client on console-ams.rpki-client.org