Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/h61vszfCOlv0kwCgstvP7eRP7GA.roa
File: h61vszfCOlv0kwCgstvP7eRP7GA.roa (raw, json)
Hash identifier: jLGrkaLc3TOBpC5O/TVK3qF+vA7iToxJO3TN3oz+EpE=
Subject key identifier: 87:AD:6F:B3:37:C2:3A:5B:F4:93:00:A0:B2:DB:CF:ED:E4:4F:EC:60
Certificate issuer: /CN=8e50d9b83f3f015ad88bf6b7c52848674ae5cb6e
Certificate serial: 018CC26D55F326DE3C57D22E088D25B18B21
Authority key identifier: 8E:50:D9:B8:3F:3F:01:5A:D8:8B:F6:B7:C5:28:48:67:4A:E5:CB:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlDZuD8_AVrYi_a3xShIZ0rly24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/h61vszfCOlv0kwCgstvP7eRP7GA.roa
Signing time: Mon 01 Jan 2024 00:29:54 +0000
ROA not before: Mon 01 Jan 2024 00:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56430
IP address blocks: 91.193.53.0/24 maxlen: 24
2a12:ec40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlDZuD8_AVrYi_a3xShIZ0rly24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:55:f3:26:de:3c:57:d2:2e:08:8d:25:b1:8b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e50d9b83f3f015ad88bf6b7c52848674ae5cb6e
Validity
Not Before: Jan 1 00:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87ad6fb337c23a5bf49300a0b2dbcfede44fec60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6a:70:8b:27:7c:5a:f2:5d:b1:f1:5b:29:1b:
65:0c:5d:9a:ba:b5:80:ec:11:6d:e9:de:d4:73:4b:
4e:78:75:b7:98:f6:ba:b9:71:b2:a4:4f:b1:3c:1a:
b9:5b:54:6f:56:66:bf:f7:f4:f3:39:5e:28:80:cf:
2e:99:fa:36:fc:b2:14:4b:b4:9e:b3:74:44:19:2f:
bb:ab:ed:9c:26:84:d8:6a:4f:db:4b:78:08:b3:19:
5a:60:5a:2f:9b:76:36:5d:9b:ee:39:1a:a5:a9:3e:
38:aa:90:bf:2c:f4:0c:a2:0b:cf:15:cb:0e:42:5b:
eb:46:2f:74:75:b1:8e:ba:f7:f4:dc:1d:df:5f:43:
2d:38:ea:90:f8:7d:a8:09:6e:07:6f:b5:d9:cb:4f:
cd:58:e9:b5:0e:d5:ae:19:3c:60:cd:3d:da:fa:4f:
a6:6a:d4:56:88:ae:a4:c2:61:74:5c:f9:a7:af:64:
61:5d:88:93:7c:c4:68:ac:c9:52:b1:b6:78:80:3c:
1c:4f:2e:84:8f:95:ed:6d:97:86:74:2a:8e:a9:6b:
78:b5:ed:44:d8:45:c2:2f:d6:1d:24:bb:02:82:f6:
78:d4:cb:e7:f8:33:41:29:e3:a0:f0:35:68:5e:96:
1e:a7:3f:52:02:49:c3:8f:7e:83:4f:2e:c9:df:f2:
6a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AD:6F:B3:37:C2:3A:5B:F4:93:00:A0:B2:DB:CF:ED:E4:4F:EC:60
X509v3 Authority Key Identifier:
keyid:8E:50:D9:B8:3F:3F:01:5A:D8:8B:F6:B7:C5:28:48:67:4A:E5:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlDZuD8_AVrYi_a3xShIZ0rly24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/h61vszfCOlv0kwCgstvP7eRP7GA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.53.0/24
IPv6:
2a12:ec40::/29
Signature Algorithm: sha256WithRSAEncryption
7a:4a:d6:5e:70:e4:24:b4:9f:73:2f:eb:1d:c3:74:22:b2:3a:
0a:de:e6:06:f9:96:d2:86:db:80:5b:c3:18:33:fa:48:cc:05:
6a:e2:e1:87:4f:24:29:bf:bc:ff:28:cd:ab:85:c8:cc:ac:58:
1a:88:e2:a3:47:48:0c:0a:9f:2d:6e:c8:fb:1f:00:7f:9a:30:
29:44:3a:3c:46:9d:ab:b0:d6:03:e7:ef:7c:fc:94:0e:bf:3b:
fb:0c:97:01:0c:5b:83:9d:ce:16:7e:58:1c:41:4c:c0:e7:a7:
18:2c:78:29:35:59:c6:b0:fe:20:62:b8:a2:9b:af:d3:29:26:
77:6b:01:0d:cc:a1:ec:40:fa:38:b7:b6:61:88:40:35:c1:ca:
85:fd:6b:e9:19:c7:8c:25:bc:f6:09:26:9f:d3:b3:9b:04:75:
4d:ee:c4:5c:0f:af:3a:81:f4:43:03:41:2b:40:7d:37:1f:9d:
43:63:dc:0e:62:f4:7c:77:b5:ad:5e:52:ca:b8:3a:15:2a:76:
ea:b1:39:e2:8f:e6:4a:86:09:1e:80:28:9a:6a:2a:62:17:d9:
e6:b0:38:e6:37:08:79:84:e7:e6:cc:98:d8:41:6a:63:a2:fd:
4a:b4:41:36:ae:c2:65:c8:53:63:2a:f5:0e:34:0c:30:63:c0:
13:44:f0:e2
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzCbVXzJt48V9IuCI0lsYshMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNTBkOWI4M2YzZjAxNWFkODhiZjZiN2M1Mjg0ODY3NGFl
NWNiNmUwHhcNMjQwMTAxMDAyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2FkNmZiMzM3YzIzYTViZjQ5MzAwYTBiMmRiY2ZlZGU0NGZlYzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGpwiyd8WvJdsfFbKRtlDF2aurWA
7BFt6d7Uc0tOeHW3mPa6uXGypE+xPBq5W1RvVma/9/TzOV4ogM8umfo2/LIUS7Se
s3REGS+7q+2cJoTYak/bS3gIsxlaYFovm3Y2XZvuORqlqT44qpC/LPQMogvPFcsO
QlvrRi90dbGOuvf03B3fX0MtOOqQ+H2oCW4Hb7XZy0/NWOm1DtWuGTxgzT3a+k+m
atRWiK6kwmF0XPmnr2RhXYiTfMRorMlSsbZ4gDwcTy6Ej5XtbZeGdCqOqWt4te1E
2EXCL9YdJLsCgvZ41Mvn+DNBKeOg8DVoXpYepz9SAknDj36DTy7J3/JqKQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIetb7M3wjpb9JMAoLLbz+3kT+xgMB8GA1UdIwQY
MBaAFI5Q2bg/PwFa2Iv2t8UoSGdK5ctuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamxEWnVEOF9BVnJZaV9hM3hTaElaMHJseTI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8yOGI1Y2QtNzNiMC00MDk3LTk1NWYt
M2ZlNTE4ZWE1YmE2LzEvaDYxdnN6ZkNPbHYwa3dDZ3N0dlA3ZVJQN0dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8yOGI1Y2QtNzNiMC00MDk3LTk1NWYtM2ZlNTE4ZWE1YmE2
LzEvamxEWnVEOF9BVnJZaV9hM3hTaElaMHJseTI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW8E1MA0E
AgACMAcDBQMqEuxAMA0GCSqGSIb3DQEBCwUAA4IBAQB6StZecOQktJ9zL+sdw3Qi
sjoK3uYG+ZbShtuAW8MYM/pIzAVq4uGHTyQpv7z/KM2rhcjMrFgaiOKjR0gMCp8t
bsj7HwB/mjApRDo8Rp2rsNYD5+98/JQOvzv7DJcBDFuDnc4WflgcQUzA56cYLHgp
NVnGsP4gYriim6/TKSZ3awENzKHsQPo4t7ZhiEA1wcqF/WvpGceMJbz2CSaf07Ob
BHVN7sRcD686gfRDA0ErQH03H51DY9wOYvR8d7WtXlLKuDoVKnbqsTnij+ZKhgke
gCiaaipiF9nmsDjmNwh5hOfmzJjYQWpjov1KtEE2rsJlyFNjKvUONAwwY8ATRPDi
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:12:57 2024 by rpki-client on console-fra.rpki-client.org