Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/y37F9BpnYyXscRjkxLLo614_xG4.roa
File: y37F9BpnYyXscRjkxLLo614_xG4.roa (raw, json)
Hash identifier: tg0hYBmVJzkBkcbQ8YbRHRIxuSppwX0pxush736VMoM=
Subject key identifier: CB:7E:C5:F4:1A:67:63:25:EC:71:18:E4:C4:B2:E8:EB:5E:3F:C4:6E
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 018CC6B9378CEF98E2E18D7394A73AD8C6BB
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/y37F9BpnYyXscRjkxLLo614_xG4.roa
Signing time: Mon 01 Jan 2024 20:31:16 +0000
ROA not before: Mon 01 Jan 2024 20:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 91.201.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:37:8c:ef:98:e2:e1:8d:73:94:a7:3a:d8:c6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Jan 1 20:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb7ec5f41a676325ec7118e4c4b2e8eb5e3fc46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a3:bc:2e:33:d9:79:e7:c7:62:22:70:f1:ea:
e0:ac:b9:6c:57:5c:6e:5e:db:52:4b:cf:fd:40:10:
0d:cd:22:7b:82:ac:83:f0:b6:1c:8a:96:bf:ea:ab:
cb:d7:f0:d6:67:06:c6:16:00:84:51:89:1f:7c:82:
c6:82:bc:9f:a7:46:e8:cd:f7:49:02:93:fc:3b:5b:
b6:7c:e4:d7:bd:52:1d:77:9d:09:91:05:34:0a:77:
9e:f0:67:8f:41:37:3c:b6:75:da:9a:61:47:77:f2:
99:15:93:97:12:e6:87:57:42:8c:b9:9f:08:47:f1:
68:18:e9:3b:c4:c6:50:da:43:4f:a4:05:03:22:36:
b5:ff:0a:7c:cf:f8:d4:75:7b:fa:26:8e:bd:0e:f6:
fa:22:ac:8f:3c:1d:30:8a:f2:9e:80:67:c2:fa:e8:
3d:5c:5e:77:46:18:b5:d5:61:46:09:52:f8:4e:2a:
e1:9c:d9:36:df:7f:1d:45:b6:64:e4:14:b0:53:cb:
b0:5a:89:f7:42:f0:67:31:20:cb:fc:54:a1:9d:69:
a7:7e:03:70:26:c9:f9:9f:b0:47:cb:d8:73:a9:24:
c4:2d:73:9c:aa:9d:c1:bd:c5:7b:e2:bb:c0:46:a4:
95:e7:99:be:85:a1:69:2e:2e:ec:c1:e1:a3:f8:d1:
3f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7E:C5:F4:1A:67:63:25:EC:71:18:E4:C4:B2:E8:EB:5E:3F:C4:6E
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/y37F9BpnYyXscRjkxLLo614_xG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.142.0/23
Signature Algorithm: sha256WithRSAEncryption
68:95:96:4d:0f:23:9e:08:b9:01:ba:2c:ad:b0:3a:ab:e8:47:
3a:10:cf:20:ed:69:89:c2:d4:59:c2:dc:fa:73:4f:9e:f3:f3:
77:48:ec:1f:d5:c5:74:7a:47:aa:f6:d7:66:66:42:33:fa:01:
8c:6d:95:45:b6:6e:4f:cc:cc:bb:fb:4e:de:a6:f9:d9:d3:e7:
60:12:cd:96:a3:3c:9c:a2:ad:8f:8d:8d:99:94:6e:99:e2:4b:
4d:83:12:42:db:63:45:aa:78:86:dd:4d:32:0a:cd:29:14:09:
49:eb:ab:3b:11:68:88:a2:43:b4:91:85:3a:9d:d4:57:55:29:
07:79:1f:e2:10:09:5c:8d:d8:d7:8a:3a:ad:10:91:ad:87:dd:
82:85:d9:96:aa:ad:1c:a1:7c:fa:8c:ec:0b:24:9d:a3:0e:bf:
46:b2:99:65:25:b1:d3:ce:e7:94:c0:05:c9:6d:92:6c:cb:75:
88:c4:95:4e:19:6c:5e:05:de:d2:15:0d:dc:da:df:05:f1:13:
2c:c2:38:74:ce:81:a1:51:dc:c8:40:8c:ef:2a:f4:4c:23:1b:
28:a5:fd:91:b3:1a:69:e1:eb:76:66:74:0e:3d:55:91:14:39:
45:f6:16:ea:a0:9c:d9:c1:84:73:a2:77:0f:5d:cc:67:4a:f3:
6a:69:65:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuTeM75ji4Y1zlKc62Ma7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx
MTliZDcwHhcNMjQwMTAxMjAzMTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjdlYzVmNDFhNjc2MzI1ZWM3MTE4ZTRjNGIyZThlYjVlM2ZjNDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6O8LjPZeefHYiJw8ergrLlsV1xu
XttSS8/9QBANzSJ7gqyD8LYcipa/6qvL1/DWZwbGFgCEUYkffILGgryfp0bozfdJ
ApP8O1u2fOTXvVIdd50JkQU0Cnee8GePQTc8tnXammFHd/KZFZOXEuaHV0KMuZ8I
R/FoGOk7xMZQ2kNPpAUDIja1/wp8z/jUdXv6Jo69Dvb6IqyPPB0wivKegGfC+ug9
XF53Rhi11WFGCVL4TirhnNk2338dRbZk5BSwU8uwWon3QvBnMSDL/FShnWmnfgNw
Jsn5n7BHy9hzqSTELXOcqp3BvcV74rvARqSV55m+haFpLi7sweGj+NE/KwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMt+xfQaZ2Ml7HEY5MSy6OteP8RuMB8GA1UdIwQY
MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt
YjZmMmFjODZlZjI3LzEveTM3RjlCcG5ZeVhzY1Jqa3hMTG82MTRfeEc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3
LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8mOMA0G
CSqGSIb3DQEBCwUAA4IBAQBolZZNDyOeCLkBuiytsDqr6Ec6EM8g7WmJwtRZwtz6
c0+e8/N3SOwf1cV0ekeq9tdmZkIz+gGMbZVFtm5PzMy7+07epvnZ0+dgEs2Wozyc
oq2PjY2ZlG6Z4ktNgxJC22NFqniG3U0yCs0pFAlJ66s7EWiIokO0kYU6ndRXVSkH
eR/iEAlcjdjXijqtEJGth92ChdmWqq0coXz6jOwLJJ2jDr9GspllJbHTzueUwAXJ
bZJsy3WIxJVOGWxeBd7SFQ3c2t8F8RMswjh0zoGhUdzIQIzvKvRMIxsopf2Rsxpp
4et2ZnQOPVWRFDlF9hbqoJzZwYRzoncPXcxnSvNqaWUV
-----END CERTIFICATE-----
Generated at Fri May 3 05:12:28 2024 by rpki-client on console-fra.rpki-client.org