Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/tWv_Dy-dpe-FPhnps4fdB01c_qQ.roa
File: tWv_Dy-dpe-FPhnps4fdB01c_qQ.roa (raw, json)
Hash identifier: QTzWsaE+NPpjFGRx5mslmfO+4pExuD0nqTAwy03QqfM=
Subject key identifier: B5:6B:FF:0F:2F:9D:A5:EF:85:3E:19:E9:B3:87:DD:07:4D:5C:FE:A4
Certificate issuer: /CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
Certificate serial: 018CC5010C43999A43208A688BAFA073F9A9
Authority key identifier: 9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/tWv_Dy-dpe-FPhnps4fdB01c_qQ.roa
Signing time: Mon 01 Jan 2024 12:30:29 +0000
ROA not before: Mon 01 Jan 2024 12:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197642
IP address blocks: 91.223.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:0c:43:99:9a:43:20:8a:68:8b:af:a0:73:f9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
Validity
Not Before: Jan 1 12:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b56bff0f2f9da5ef853e19e9b387dd074d5cfea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:39:df:28:55:e6:5f:63:6d:1f:d7:b0:36:
20:fd:f9:b7:a2:03:1b:b1:72:7b:ca:ff:04:19:63:
ff:01:17:e5:f4:1c:b5:d4:ab:77:f6:81:27:f3:e4:
fd:0d:61:72:64:75:6c:9f:16:4b:0c:b2:ab:ec:8c:
7a:ce:15:08:6d:bc:e9:62:43:7b:4b:59:ba:39:74:
66:3e:62:5d:70:eb:8f:9a:a4:be:f6:ad:0c:0d:79:
0c:ae:37:72:55:3b:42:c6:39:1c:e8:0b:d4:10:9e:
0d:c1:45:be:ae:94:4c:0b:95:5b:46:7b:6c:17:fc:
40:2a:25:5b:db:4a:7f:18:c3:0b:75:4f:bf:78:d8:
21:f1:4d:b5:37:ce:7a:94:46:fb:3f:2b:56:9b:90:
a5:f7:b3:0c:20:c5:d5:22:5c:ce:c5:1c:e2:72:f7:
1a:03:5c:4d:e3:1d:88:62:93:cc:62:55:bf:1b:ca:
00:89:92:97:b7:f7:9e:36:a2:bb:a3:db:8e:d2:da:
44:30:fc:02:87:b4:e3:77:0a:a7:9a:d0:39:75:fb:
a5:26:c3:69:e6:5a:7f:79:93:8e:74:55:e5:44:88:
92:3c:4c:c8:c4:6b:6f:d0:2d:7a:15:58:a1:f8:6d:
e0:03:39:a7:b9:8a:3c:9b:c8:0e:da:cb:81:96:33:
1c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6B:FF:0F:2F:9D:A5:EF:85:3E:19:E9:B3:87:DD:07:4D:5C:FE:A4
X509v3 Authority Key Identifier:
keyid:9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/tWv_Dy-dpe-FPhnps4fdB01c_qQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.209.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:7a:3d:21:35:56:e5:25:62:c7:ba:b3:89:17:a3:b2:7c:1d:
0a:0e:a7:cb:35:78:4b:50:23:3d:f2:81:f3:7d:f6:23:46:94:
44:98:56:db:ca:50:19:5d:b5:48:07:f9:a8:76:35:63:9b:d7:
9a:72:fb:03:d2:38:76:cb:61:6d:9b:5e:ad:9f:bd:8c:98:d8:
37:df:4d:cc:6f:05:e7:68:0a:ef:d8:84:5a:18:dc:14:ca:5e:
92:dc:de:82:ec:f6:bf:9e:62:1d:33:04:a9:63:99:46:e0:73:
39:33:b2:ac:50:1c:1d:97:ef:5c:c1:dc:07:b6:17:1d:72:fa:
3f:57:bd:2f:02:78:72:45:04:90:65:9e:28:6f:8a:d9:dd:9e:
9c:ca:a4:c7:ea:b9:96:5f:c3:e0:4d:d6:e8:35:3c:bf:a1:e4:
30:d7:94:75:da:d9:02:8e:07:a3:cd:f7:46:4d:2c:e4:6c:f1:
7a:73:62:24:41:5e:37:98:e1:ef:61:c0:ef:63:94:d5:b8:da:
f2:bf:03:2a:83:86:e7:af:71:f5:f8:02:f8:a2:2d:63:fd:76:
79:c4:3e:6c:31:99:4f:2d:c0:2b:65:11:0f:5e:e9:ed:bc:74:
ac:51:d3:b6:54:e4:00:ad:a8:5d:41:0e:17:4e:4c:d9:6e:d1:
4a:0c:9e:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAQxDmZpDIIpoi6+gc/mpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNTY0NmY3ZDhhZmMwYTkzM2ZiMzMzMzNmMzcwMTNkODNh
MDRkMDAwHhcNMjQwMTAxMTIzMDI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTZiZmYwZjJmOWRhNWVmODUzZTE5ZTliMzg3ZGQwNzRkNWNmZWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbs53yhV5l9jbR/XsDYg/fm3ogMb
sXJ7yv8EGWP/ARfl9By11Kt39oEn8+T9DWFyZHVsnxZLDLKr7Ix6zhUIbbzpYkN7
S1m6OXRmPmJdcOuPmqS+9q0MDXkMrjdyVTtCxjkc6AvUEJ4NwUW+rpRMC5VbRnts
F/xAKiVb20p/GMMLdU+/eNgh8U21N856lEb7PytWm5Cl97MMIMXVIlzOxRzicvca
A1xN4x2IYpPMYlW/G8oAiZKXt/eeNqK7o9uO0tpEMPwCh7TjdwqnmtA5dfulJsNp
5lp/eZOOdFXlRIiSPEzIxGtv0C16FVih+G3gAzmnuYo8m8gO2suBljMclQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLVr/w8vnaXvhT4Z6bOH3QdNXP6kMB8GA1UdIwQY
MBaAFJ9WRvfYr8CpM/szMz83AT2DoE0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjFaRzk5aXZ3S2t6LXpNelB6Y0JQWU9nVFFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi85MTY5MTctODhjNS00ZTdiLTgxMWUt
N2QzMmNhMDY1YjY2LzEvdFd2X0R5LWRwZS1GUGhucHM0ZmRCMDFjX3FRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi85MTY5MTctODhjNS00ZTdiLTgxMWUtN2QzMmNhMDY1YjY2
LzEvbjFaRzk5aXZ3S2t6LXpNelB6Y0JQWU9nVFFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9/RMA0G
CSqGSIb3DQEBCwUAA4IBAQCpej0hNVblJWLHurOJF6OyfB0KDqfLNXhLUCM98oHz
ffYjRpREmFbbylAZXbVIB/modjVjm9eacvsD0jh2y2Ftm16tn72MmNg3303MbwXn
aArv2IRaGNwUyl6S3N6C7Pa/nmIdMwSpY5lG4HM5M7KsUBwdl+9cwdwHthcdcvo/
V70vAnhyRQSQZZ4ob4rZ3Z6cyqTH6rmWX8PgTdboNTy/oeQw15R12tkCjgejzfdG
TSzkbPF6c2IkQV43mOHvYcDvY5TVuNryvwMqg4bnr3H1+AL4oi1j/XZ5xD5sMZlP
LcArZREPXuntvHSsUdO2VOQArahdQQ4XTkzZbtFKDJ6M
-----END CERTIFICATE-----
Generated at Fri Jun 7 22:10:27 2024 by rpki-client on console-ams.rpki-client.org