Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/D7isygYq29fC46ungNgqwqMJbww.roa
File: D7isygYq29fC46ungNgqwqMJbww.roa (raw, json)
Hash identifier: U2QKQMcd2KpES7rS9nzYbViAmMl/WshCoYHsWRbDPGc=
Subject key identifier: 0F:B8:AC:CA:06:2A:DB:D7:C2:E3:AB:A7:80:D8:2A:C2:A3:09:6F:0C
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 018F3E726A2E2E97B8478FF8CD22C8211BA3
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/D7isygYq29fC46ungNgqwqMJbww.roa
Signing time: Fri 03 May 2024 12:33:56 +0000
ROA not before: Fri 03 May 2024 12:33:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216303
IP address blocks: 178.175.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3e:72:6a:2e:2e:97:b8:47:8f:f8:cd:22:c8:21:1b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: May 3 12:33:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0fb8acca062adbd7c2e3aba780d82ac2a3096f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:88:e4:fb:d9:f2:9b:57:d1:b6:b2:5a:81:0f:
60:dd:84:af:b3:a9:34:15:05:b5:80:2d:57:ad:0f:
bd:73:46:00:c0:6b:2d:41:37:6d:47:fa:34:a8:d0:
50:dc:93:fe:43:a1:32:d4:85:19:75:10:1b:52:21:
f5:3b:08:97:3d:84:fa:44:1b:92:e2:1d:af:37:30:
cf:bf:36:48:be:37:39:95:be:c8:35:97:4a:e7:37:
de:cc:f2:49:4b:3c:89:05:6d:b2:1b:48:33:ad:e4:
4c:1e:ed:88:39:b7:49:92:2a:ee:b9:c9:80:19:3a:
59:9c:25:d9:8a:af:2d:ff:fe:21:b9:de:63:1b:3a:
7c:63:e6:ab:22:d2:96:e9:53:74:d0:16:b5:b7:b5:
17:7c:91:9d:42:0a:83:54:94:8c:34:ee:36:ff:ea:
73:79:02:94:f5:53:11:b3:05:62:37:04:fc:bb:c9:
3c:b5:d7:03:72:d4:ed:41:14:8d:79:ea:d7:f6:83:
f8:c7:05:c4:32:bf:37:0b:66:b1:55:89:02:c8:d8:
9a:98:1e:f2:bd:77:fa:9f:a6:65:b5:4e:bb:0f:89:
31:10:05:3e:9b:da:17:9b:68:b3:11:f8:1a:82:a6:
a6:1d:7f:3f:b0:be:28:f0:0d:ee:7b:f6:84:6e:8c:
e0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B8:AC:CA:06:2A:DB:D7:C2:E3:AB:A7:80:D8:2A:C2:A3:09:6F:0C
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/D7isygYq29fC46ungNgqwqMJbww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.173.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:5e:bf:e7:f5:24:7b:41:5a:d3:8c:72:26:80:64:e1:8b:7c:
2f:a7:d9:ad:3a:ec:c4:44:79:6c:2f:e2:db:11:62:4f:c9:62:
66:61:43:66:d6:fe:7c:a6:99:c9:87:04:d2:8a:b7:5e:4e:5c:
20:e6:12:8b:f7:9d:ff:1c:6c:4e:4b:45:89:e8:44:ea:59:3d:
9e:16:ca:ef:28:32:de:4b:50:64:b3:43:b1:85:b7:59:9d:e6:
50:6d:bc:28:88:b6:4d:34:04:66:3c:e4:f4:5a:91:65:2e:7b:
7c:3d:c3:55:ea:44:92:cf:23:62:ec:ce:86:2b:e6:19:89:ef:
fa:1f:03:3a:69:73:ae:ee:7b:c5:e7:1b:c7:cd:ea:34:09:fa:
00:91:b1:61:a1:77:e1:cd:e0:b7:fd:86:d7:9c:05:ba:46:77:
44:6a:33:77:ad:04:8d:27:50:93:d2:4e:f2:9a:74:71:e9:11:
89:b1:31:1e:5c:2d:e7:ef:16:06:fd:e1:69:1d:3e:2c:08:6d:
42:00:11:42:32:9f:d7:a0:be:7c:42:61:06:d5:42:af:24:b6:
fd:78:fe:c5:4a:09:bd:05:4d:58:9b:8c:cd:be:d2:db:36:24:
f4:d7:49:1b:fc:ae:f9:05:24:b8:10:84:ff:c7:bb:c7:6c:26:
ba:37:92:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY8+cmouLpe4R4/4zSLIIRujMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0
ZGFiN2YwHhcNMjQwNTAzMTIzMzU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmI4YWNjYTA2MmFkYmQ3YzJlM2FiYTc4MGQ4MmFjMmEzMDk2ZjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ojk+9nym1fRtrJagQ9g3YSvs6k0
FQW1gC1XrQ+9c0YAwGstQTdtR/o0qNBQ3JP+Q6Ey1IUZdRAbUiH1OwiXPYT6RBuS
4h2vNzDPvzZIvjc5lb7INZdK5zfezPJJSzyJBW2yG0gzreRMHu2IObdJkiruucmA
GTpZnCXZiq8t//4hud5jGzp8Y+arItKW6VN00Ba1t7UXfJGdQgqDVJSMNO42/+pz
eQKU9VMRswViNwT8u8k8tdcDctTtQRSNeerX9oP4xwXEMr83C2axVYkCyNiamB7y
vXf6n6ZltU67D4kxEAU+m9oXm2izEfgagqamHX8/sL4o8A3ue/aEbozgfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA+4rMoGKtvXwuOrp4DYKsKjCW8MMB8GA1UdIwQY
MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct
OWRkNmU4OGZjYzhkLzEvRDdpc3lnWXEyOWZDNDZ1bmdOZ3F3cU1KYnd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk
LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsq+tMA0G
CSqGSIb3DQEBCwUAA4IBAQBqXr/n9SR7QVrTjHImgGThi3wvp9mtOuzERHlsL+Lb
EWJPyWJmYUNm1v58ppnJhwTSirdeTlwg5hKL953/HGxOS0WJ6ETqWT2eFsrvKDLe
S1Bks0OxhbdZneZQbbwoiLZNNARmPOT0WpFlLnt8PcNV6kSSzyNi7M6GK+YZie/6
HwM6aXOu7nvF5xvHzeo0CfoAkbFhoXfhzeC3/YbXnAW6RndEajN3rQSNJ1CT0k7y
mnRx6RGJsTEeXC3n7xYG/eFpHT4sCG1CABFCMp/XoL58QmEG1UKvJLb9eP7FSgm9
BU1Ym4zNvtLbNiT010kb/K75BSS4EIT/x7vHbCa6N5Lr
-----END CERTIFICATE-----
Generated at Tue Nov 26 00:32:25 2024 by rpki-client on console-fra.rpki-client.org