Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/_95in7yycvfCk0SQxr4xmRwp_Ss.roa
File: _95in7yycvfCk0SQxr4xmRwp_Ss.roa (raw, json)
Hash identifier: Tg/mNVFU90P+EfwLwUkcMgYJOZf7D7Lov+HQawhhVDs=
Subject key identifier: FF:DE:62:9F:BC:B2:72:F7:C2:93:44:90:C6:BE:31:99:1C:29:FD:2B
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 018CC4245A8A4BBC51D92CFBE56CFC4C5266
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/_95in7yycvfCk0SQxr4xmRwp_Ss.roa
Signing time: Mon 01 Jan 2024 08:29:25 +0000
ROA not before: Mon 01 Jan 2024 08:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204941
IP address blocks: 91.108.34.0/24 maxlen: 24
91.108.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:5a:8a:4b:bc:51:d9:2c:fb:e5:6c:fc:4c:52:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Jan 1 08:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffde629fbcb272f7c2934490c6be31991c29fd2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:64:4f:f3:34:0f:fc:85:9c:1f:85:71:3d:
86:ee:ec:11:0f:f2:4d:81:c9:9d:6e:55:61:78:8e:
ee:b6:4f:00:ae:d5:0a:fe:0c:13:50:01:22:b4:88:
53:49:b3:e5:85:7e:ba:8f:40:9a:e8:de:70:f1:60:
2a:0d:35:de:e8:dc:1e:54:28:29:43:22:45:42:cb:
60:d4:68:9e:f8:c2:b8:7d:9a:76:6a:50:ba:0c:80:
8f:75:2c:50:84:4a:ae:d5:2d:26:d5:cd:d8:24:b3:
55:ae:1b:57:c2:d5:43:d2:e2:6b:e2:79:53:cb:6d:
d4:7b:8d:bc:33:2d:e5:a2:01:78:0f:68:44:2d:de:
aa:ee:06:3a:66:c6:69:92:49:87:c3:27:cc:f4:1a:
56:d0:6c:d8:f5:e8:4c:37:82:cc:46:37:14:37:b5:
7e:8d:77:38:53:4a:bf:9b:9f:41:39:5f:95:c4:e2:
ce:34:31:8a:b4:99:04:98:ea:f3:97:3b:2e:90:b1:
f4:d1:5e:fc:a6:82:fd:10:45:51:f2:1b:85:66:b3:
b5:b3:68:1b:a2:84:e2:65:bf:47:40:0a:83:9b:9e:
23:3a:d8:0a:f2:4a:d2:46:de:76:e6:c2:ba:e0:8f:
71:95:fe:f3:52:19:6a:9a:ee:d8:b5:ff:3d:58:f2:
f2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DE:62:9F:BC:B2:72:F7:C2:93:44:90:C6:BE:31:99:1C:29:FD:2B
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/_95in7yycvfCk0SQxr4xmRwp_Ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.34.0/24
91.108.53.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:2a:55:c4:e4:99:1a:0a:d2:bc:3a:6a:78:69:0c:22:94:77:
c8:b8:15:90:e3:cf:47:c4:86:c4:22:14:45:8f:28:ef:bf:b1:
67:c3:84:f3:92:f5:61:4d:95:13:f6:ab:8d:94:fa:7e:ea:cf:
93:87:85:00:c3:87:2b:69:b6:41:80:98:75:03:34:28:cc:54:
1b:69:b7:23:96:f9:0e:ac:71:33:d0:7c:b7:e3:f6:76:87:be:
c9:a5:34:a7:44:62:e3:2a:ac:8b:34:ed:fb:db:95:67:53:3f:
1d:9b:52:d1:2d:b8:f7:94:14:f8:69:94:78:2b:f6:fc:40:ef:
b2:fc:29:95:28:99:ba:6f:63:b7:19:b4:5e:dd:f2:ed:fd:5a:
9d:58:f4:3e:34:4e:6e:44:62:cb:02:95:07:a2:25:d3:71:59:
b0:15:fb:f9:bd:df:82:54:58:f8:a7:a5:12:09:76:69:b7:ed:
d4:81:ae:d0:e5:bf:84:0b:ab:25:24:84:f9:f2:d3:6d:40:f5:
b6:7d:54:d0:89:87:06:a8:f9:c4:c3:af:06:ed:c7:04:f5:d7:
60:ac:3d:b1:7d:0c:5a:dd:85:18:22:35:d6:af:6e:8d:f9:b1:
38:da:a9:08:77:8c:b9:cc:8b:8c:0f:93:3e:20:e1:7b:a3:e2:
6f:4c:1f:c0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzEJFqKS7xR2Sz75Wz8TFJmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx
YTUxYjgwHhcNMjQwMTAxMDgyOTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmRlNjI5ZmJjYjI3MmY3YzI5MzQ0OTBjNmJlMzE5OTFjMjlmZDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKZkT/M0D/yFnB+FcT2G7uwRD/JN
gcmdblVheI7utk8ArtUK/gwTUAEitIhTSbPlhX66j0Ca6N5w8WAqDTXe6NweVCgp
QyJFQstg1Gie+MK4fZp2alC6DICPdSxQhEqu1S0m1c3YJLNVrhtXwtVD0uJr4nlT
y23Ue428My3logF4D2hELd6q7gY6ZsZpkkmHwyfM9BpW0GzY9ehMN4LMRjcUN7V+
jXc4U0q/m59BOV+VxOLONDGKtJkEmOrzlzsukLH00V78poL9EEVR8huFZrO1s2gb
ooTiZb9HQAqDm54jOtgK8krSRt525sK64I9xlf7zUhlqmu7Ytf89WPLy4wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP/eYp+8snL3wpNEkMa+MZkcKf0rMB8GA1UdIwQY
MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt
NzY3NDE2NTI1MTBkLzEvXzk1aW43eXljdmZDazBTUXhyNHhtUndwX1NzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk
LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW2wiAwQA
W2w1MA0GCSqGSIb3DQEBCwUAA4IBAQCqKlXE5JkaCtK8Omp4aQwilHfIuBWQ489H
xIbEIhRFjyjvv7Fnw4TzkvVhTZUT9quNlPp+6s+Th4UAw4crabZBgJh1AzQozFQb
abcjlvkOrHEz0Hy34/Z2h77JpTSnRGLjKqyLNO3725VnUz8dm1LRLbj3lBT4aZR4
K/b8QO+y/CmVKJm6b2O3GbRe3fLt/VqdWPQ+NE5uRGLLApUHoiXTcVmwFfv5vd+C
VFj4p6USCXZpt+3Uga7Q5b+EC6slJIT58tNtQPW2fVTQiYcGqPnEw68G7ccE9ddg
rD2xfQxa3YUYIjXWr26N+bE42qkId4y5zIuMD5M+IOF7o+JvTB/A
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:02:54 2024 by rpki-client on console-ams.rpki-client.org