Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/kDlFSXdkvICwFNPYM3P_9HHaZoY.roa
File: kDlFSXdkvICwFNPYM3P_9HHaZoY.roa (raw, json)
Hash identifier: iGBtAqxgP8fFZ/+kp4r6lekG9iSmE/DAUWGW2lQPw4g=
Subject key identifier: 90:39:45:49:77:64:BC:80:B0:14:D3:D8:33:73:FF:F4:71:DA:66:86
Certificate issuer: /CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Certificate serial: 019034BBB277473485E631D64C1318F26489
Authority key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/kDlFSXdkvICwFNPYM3P_9HHaZoY.roa
Signing time: Thu 20 Jun 2024 08:20:34 +0000
ROA not before: Thu 20 Jun 2024 08:20:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48964
IP address blocks: 91.204.120.0/22 maxlen: 22
91.204.120.0/24 maxlen: 24
91.204.122.0/24 maxlen: 24
91.204.123.0/24 maxlen: 24
91.212.80.0/24 maxlen: 24
193.19.241.0/24 maxlen: 24
193.19.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:34:bb:b2:77:47:34:85:e6:31:d6:4c:13:18:f2:64:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Validity
Not Before: Jun 20 08:20:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=903945497764bc80b014d3d83373fff471da6686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:be:a1:8d:81:9b:25:4e:e8:7d:fc:75:01:cc:
33:bf:dd:04:c5:fc:d7:c6:a7:14:70:ba:7e:96:1a:
31:96:7f:ba:e5:56:08:af:61:d0:c1:4b:c2:09:15:
f3:80:ec:35:e9:b9:47:6a:35:0d:1b:75:68:89:fa:
26:70:fc:2f:ab:c1:c4:07:fb:e7:94:e1:b9:36:30:
78:c0:f7:3a:a7:38:bc:c1:85:76:46:1f:b0:92:ff:
a1:28:62:40:de:92:cd:4e:8b:19:6b:6e:66:d7:63:
8e:0b:95:d8:cf:5f:15:1f:96:b1:a0:3e:0c:f5:ee:
24:56:cf:97:7a:4c:44:c5:4c:ad:52:ae:5c:d0:2c:
93:04:12:ee:d6:70:97:eb:bb:1d:0c:0b:6e:2a:1e:
1e:28:5f:4b:d1:12:8b:b5:96:0c:6c:ae:41:29:4c:
eb:0e:74:6c:f9:c8:6a:43:68:d8:10:2a:de:32:07:
be:91:c4:9d:f2:c7:f5:3a:49:3a:49:ee:01:75:ae:
d3:fe:ae:4c:b6:18:c8:32:7d:dd:07:a7:56:20:68:
33:80:2b:6b:cc:16:08:5f:49:60:c4:29:7c:52:40:
6a:c8:ec:d9:18:46:3f:5c:5f:08:1a:53:bd:63:c6:
76:44:39:bf:ff:f5:c4:67:8f:87:24:6c:28:f4:8e:
ea:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:39:45:49:77:64:BC:80:B0:14:D3:D8:33:73:FF:F4:71:DA:66:86
X509v3 Authority Key Identifier:
keyid:9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/kDlFSXdkvICwFNPYM3P_9HHaZoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.120.0/22
91.212.80.0/24
193.19.241.0/24
193.19.243.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:b3:9a:fb:2d:6b:69:93:a7:6c:94:6d:bd:8c:5d:a1:87:ea:
bc:ec:51:ac:60:36:93:4d:24:a1:0a:df:4e:eb:f7:7f:15:a7:
f9:15:d1:4c:d2:ac:79:e4:a9:f3:9c:3d:0c:76:26:1f:62:97:
74:9e:7b:69:2e:12:25:46:ec:c8:79:01:dd:37:16:54:0a:07:
a9:f0:50:d1:af:30:cb:0f:47:64:19:1e:84:76:60:82:f9:e9:
01:e8:27:6a:fa:54:82:20:58:ec:7d:c3:29:01:d1:44:f5:67:
70:1f:8c:3b:73:c7:9d:44:03:a9:90:7c:56:61:b2:e0:63:ad:
a5:79:da:25:eb:a7:dd:c0:83:1a:75:f6:b0:45:09:cd:42:27:
68:07:67:8d:55:73:61:27:9e:28:b6:6b:2b:91:32:69:f8:52:
1e:6d:cf:84:c9:e0:cd:e2:4a:18:b0:a3:71:8e:94:35:5d:48:
58:c1:a4:f3:d3:c4:b9:42:d5:e6:a9:d3:1e:9b:1d:86:ee:4c:
80:52:60:7b:75:dc:54:44:77:56:8e:47:ff:28:02:6e:18:4e:
c6:01:67:86:56:07:d9:1d:e8:4d:65:7c:ae:ae:a3:ee:a6:da:
ac:12:0e:da:dd:1a:b7:43:4d:a1:53:ae:8b:e4:c3:04:60:f6:
de:bc:dd:cf
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZA0u7J3RzSF5jHWTBMY8mSJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZDUwNDg2MGE3YzkyNGU3MjFjYmZhZWE1ZjQ5YTcyYzgy
OTZjMzUwHhcNMjQwNjIwMDgyMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDM5NDU0OTc3NjRiYzgwYjAxNGQzZDgzMzczZmZmNDcxZGE2Njg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr6hjYGbJU7offx1Acwzv90ExfzX
xqcUcLp+lhoxln+65VYIr2HQwUvCCRXzgOw16blHajUNG3VoifomcPwvq8HEB/vn
lOG5NjB4wPc6pzi8wYV2Rh+wkv+hKGJA3pLNTosZa25m12OOC5XYz18VH5axoD4M
9e4kVs+XekxExUytUq5c0CyTBBLu1nCX67sdDAtuKh4eKF9L0RKLtZYMbK5BKUzr
DnRs+chqQ2jYECreMge+kcSd8sf1Okk6Se4Bda7T/q5MthjIMn3dB6dWIGgzgCtr
zBYIX0lgxCl8UkBqyOzZGEY/XF8IGlO9Y8Z2RDm///XEZ4+HJGwo9I7qqwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJA5RUl3ZLyAsBTT2DNz//Rx2maGMB8GA1UdIwQY
MBaAFJ3VBIYKfJJOchy/rqX0mnLIKWw1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmRVRWhncDhrazV5SEwtdXBmU2Fjc2dwYkRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80OTYyMzItZDE4Yi00NTU0LTlhNDMt
NDMyZjVjMWY0MWY3LzEva0RsRlNYZGt2SUN3Rk5QWU0zUF85SEhhWm9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80OTYyMzItZDE4Yi00NTU0LTlhNDMtNDMyZjVjMWY0MWY3
LzEvbmRVRWhncDhrazV5SEwtdXBmU2Fjc2dwYkRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCW8x4AwQA
W9RQAwQAwRPxAwQAwRPzMA0GCSqGSIb3DQEBCwUAA4IBAQAPs5r7LWtpk6dslG29
jF2hh+q87FGsYDaTTSShCt9O6/d/Faf5FdFM0qx55KnznD0MdiYfYpd0nntpLhIl
RuzIeQHdNxZUCgep8FDRrzDLD0dkGR6EdmCC+ekB6Cdq+lSCIFjsfcMpAdFE9Wdw
H4w7c8edRAOpkHxWYbLgY62ledol66fdwIMadfawRQnNQidoB2eNVXNhJ54otmsr
kTJp+FIebc+EyeDN4koYsKNxjpQ1XUhYwaTz08S5QtXmqdMemx2G7kyAUmB7ddxU
RHdWjkf/KAJuGE7GAWeGVgfZHehNZXyurqPuptqsEg7a3Rq3Q02hU66L5MMEYPbe
vN3P
-----END CERTIFICATE-----
Generated at Sat Sep 28 12:43:23 2024 by rpki-client on console-ams.rpki-client.org