Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dvY_LuYU3ShxCXzzytOTm890EFc.roa
File: dvY_LuYU3ShxCXzzytOTm890EFc.roa (raw, json)
Hash identifier: XGSRYeLDNvWCTPbkItOoZJwBcMVCT+fS0kyl+4aeVYk=
Subject key identifier: 76:F6:3F:2E:E6:14:DD:28:71:09:7C:F3:CA:D3:93:9B:CF:74:10:57
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD0637F09DB97435B29F52C51C703A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dvY_LuYU3ShxCXzzytOTm890EFc.roa
Signing time: Tue 02 Jan 2024 06:29:37 +0000
ROA not before: Tue 02 Jan 2024 06:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206505
IP address blocks: 83.219.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:06:37:f0:9d:b9:74:35:b2:9f:52:c5:1c:70:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76f63f2ee614dd2871097cf3cad3939bcf741057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:28:cf:75:25:fb:60:3f:2b:fe:da:6e:3b:8f:
cd:f4:21:06:a2:b2:15:1a:65:df:dc:c4:8a:d8:b8:
ec:a6:c7:a0:4f:e8:62:42:e2:4c:20:27:c9:13:7f:
4c:db:b7:cf:bd:ea:71:62:06:1c:8a:55:8e:cf:54:
65:cd:03:87:53:c9:20:93:d4:46:91:da:c6:d3:9d:
b0:2a:28:ee:8e:bb:64:75:4d:cd:ff:f1:d0:45:fa:
ad:48:ce:35:ca:ff:dc:2d:eb:cf:20:e7:bf:13:43:
0a:c0:83:00:18:b9:d1:f1:36:05:87:7e:04:09:b0:
54:c0:81:d4:da:64:2e:f5:eb:67:fd:20:aa:bf:90:
82:2a:41:cc:b1:38:38:fb:64:71:ef:1c:2e:f4:63:
ff:cd:78:f1:cb:aa:26:d6:f8:d4:0b:dd:e6:9f:f0:
a9:39:45:96:1e:c6:ef:6c:49:9e:f2:8e:de:64:fb:
f2:cf:0e:df:2a:a3:fc:8d:bd:6c:77:cc:fe:28:62:
e8:a3:47:3f:26:7f:3a:07:56:55:c9:4e:c2:e2:35:
68:8d:e7:2d:ce:4d:31:88:72:ae:73:e7:79:f0:d1:
98:54:c8:ba:0c:03:97:f1:bc:7e:5d:e9:0f:0b:f6:
90:a0:9e:be:68:a5:6a:66:40:d9:a3:23:d4:4c:e0:
81:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F6:3F:2E:E6:14:DD:28:71:09:7C:F3:CA:D3:93:9B:CF:74:10:57
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dvY_LuYU3ShxCXzzytOTm890EFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.98.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:31:a4:ec:af:07:36:8a:42:e5:de:d4:69:96:ae:49:6d:7f:
3e:12:11:fe:36:be:24:65:66:36:87:16:8c:a8:c4:17:49:fb:
71:7f:13:e8:cd:24:a3:82:7a:a6:a7:42:41:21:b1:b1:0d:43:
8f:9d:71:5a:48:a8:db:1f:bc:ca:7b:b8:30:b7:42:89:b9:0d:
84:a7:c9:7a:a8:b7:7b:d7:8f:90:1b:69:79:23:2f:f7:17:8f:
36:51:35:0a:a6:34:66:5f:11:6a:4c:c4:25:ea:b6:82:63:98:
34:0e:58:e6:4b:16:18:b0:77:ca:2e:7f:52:e1:0c:04:4f:52:
66:59:4b:19:ec:a4:10:bc:a3:0c:1a:d6:fe:52:7c:30:9b:38:
21:35:1b:61:65:52:42:6c:a4:e5:f1:2e:35:47:6d:36:10:8a:
8f:4e:79:51:72:8d:39:3c:27:55:67:ba:95:db:8c:e9:4e:70:
b8:b4:4a:87:4e:24:7a:13:5d:68:1f:74:f2:55:29:92:32:14:
55:d0:63:45:c1:32:84:b8:45:e0:3d:58:ab:b1:cf:fb:92:0a:
65:67:eb:87:4a:21:23:1c:d5:db:e2:39:e6:a4:7b:ae:6e:5a:
73:9b:eb:a9:88:95:0e:90:a6:2d:1a:43:a8:8e:2f:92:00:ce:
d2:de:87:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3QY38J25dDWyn1LFHHA6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTAyMDYyOTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmY2M2YyZWU2MTRkZDI4NzEwOTdjZjNjYWQzOTM5YmNmNzQxMDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSjPdSX7YD8r/tpuO4/N9CEGorIV
GmXf3MSK2LjspsegT+hiQuJMICfJE39M27fPvepxYgYcilWOz1RlzQOHU8kgk9RG
kdrG052wKijujrtkdU3N//HQRfqtSM41yv/cLevPIOe/E0MKwIMAGLnR8TYFh34E
CbBUwIHU2mQu9etn/SCqv5CCKkHMsTg4+2Rx7xwu9GP/zXjxy6om1vjUC93mn/Cp
OUWWHsbvbEme8o7eZPvyzw7fKqP8jb1sd8z+KGLoo0c/Jn86B1ZVyU7C4jVoject
zk0xiHKuc+d58NGYVMi6DAOX8bx+XekPC/aQoJ6+aKVqZkDZoyPUTOCBJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHb2Py7mFN0ocQl888rTk5vPdBBXMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvZHZZX0x1WVUzU2h4Q1h6enl0T1RtODkwRUZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU9tiMA0G
CSqGSIb3DQEBCwUAA4IBAQCoMaTsrwc2ikLl3tRplq5JbX8+EhH+Nr4kZWY2hxaM
qMQXSftxfxPozSSjgnqmp0JBIbGxDUOPnXFaSKjbH7zKe7gwt0KJuQ2Ep8l6qLd7
14+QG2l5Iy/3F482UTUKpjRmXxFqTMQl6raCY5g0DljmSxYYsHfKLn9S4QwET1Jm
WUsZ7KQQvKMMGtb+UnwwmzghNRthZVJCbKTl8S41R202EIqPTnlRco05PCdVZ7qV
24zpTnC4tEqHTiR6E11oH3TyVSmSMhRV0GNFwTKEuEXgPVirsc/7kgplZ+uHSiEj
HNXb4jnmpHuublpzm+upiJUOkKYtGkOoji+SAM7S3oc1
-----END CERTIFICATE-----
Generated at Sun Apr 28 14:36:15 2024 by rpki-client on console-ams.rpki-client.org