Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/dOIqH4-GQ3XjxiSPA5-fj52FRSI.roa
File: dOIqH4-GQ3XjxiSPA5-fj52FRSI.roa (raw, json)
Hash identifier: 2uJVIPruHXVuwBpD4HMxVSxbYmkEGN0bQ+QRy6YM4VE=
Subject key identifier: 74:E2:2A:1F:8F:86:43:75:E3:C6:24:8F:03:9F:9F:8F:9D:85:45:22
Certificate issuer: /CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Certificate serial: 018CC5DBE964FA65F051CBBDF9937B147387
Authority key identifier: D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/dOIqH4-GQ3XjxiSPA5-fj52FRSI.roa
Signing time: Mon 01 Jan 2024 16:29:32 +0000
ROA not before: Mon 01 Jan 2024 16:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198208
IP address blocks: 91.109.208.0/21 maxlen: 24
134.19.200.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:e9:64:fa:65:f0:51:cb:bd:f9:93:7b:14:73:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Validity
Not Before: Jan 1 16:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74e22a1f8f864375e3c6248f039f9f8f9d854522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1f:30:0c:1e:7c:c0:ec:16:14:73:f8:d7:99:
d2:e2:e5:67:26:ea:67:0f:12:82:ec:bc:74:94:fe:
0e:cb:d5:a3:26:f1:24:37:47:3e:54:9a:2a:9b:4c:
ac:64:4d:d3:ae:cb:2d:8a:59:4d:48:a9:5d:e7:5a:
f7:2d:ca:05:3d:c0:44:21:7a:b8:0e:47:11:17:cd:
ac:c4:f6:bf:ea:36:f7:ae:41:b5:2f:c9:0e:4a:88:
e6:af:d4:b2:c9:c6:60:17:61:0f:c6:76:ca:21:3a:
5d:b5:b7:74:1b:67:1c:e2:eb:1d:79:b0:70:c4:c8:
5f:cd:37:17:06:eb:f8:9a:36:c1:1d:e7:75:29:6e:
4c:83:3e:f6:5b:42:01:40:bd:e4:19:04:57:51:1b:
20:6e:84:46:62:1b:7d:4e:b5:48:07:1e:f9:e5:9d:
7e:e3:22:81:b5:63:fc:62:17:b1:8e:24:fd:fd:e4:
2a:b5:13:1c:79:59:34:55:fe:bb:ee:bb:df:33:08:
bd:7c:b2:6b:f9:fc:02:a6:88:02:9c:cd:19:a9:41:
07:c5:f1:8f:4a:79:c7:f4:b6:09:73:e3:9f:c8:a3:
c4:d4:19:d8:ea:4f:17:26:a3:b9:38:49:ff:13:ad:
7a:a1:72:67:88:d2:6f:d1:c3:b1:dd:f6:40:5f:76:
1c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E2:2A:1F:8F:86:43:75:E3:C6:24:8F:03:9F:9F:8F:9D:85:45:22
X509v3 Authority Key Identifier:
keyid:D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/dOIqH4-GQ3XjxiSPA5-fj52FRSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.208.0/21
134.19.200.0/21
Signature Algorithm: sha256WithRSAEncryption
b5:15:cf:93:6a:95:31:91:c0:32:3a:e5:f4:18:68:f5:5d:a5:
d6:ba:c8:a2:ef:31:cc:15:81:3b:44:0f:5f:02:f0:12:f5:0f:
34:18:51:d8:26:2b:a6:32:df:63:c2:99:bd:19:76:a4:ed:e8:
38:ce:df:b4:c8:41:b7:fa:b1:32:ba:1d:dd:94:1c:5d:28:5c:
20:46:78:b4:dc:50:e7:ee:97:71:51:87:81:0c:6f:64:5d:d4:
c5:7f:4a:ac:66:2c:bb:c8:c7:04:b4:bf:7b:ef:32:c3:a5:6b:
37:af:68:1f:52:d8:3b:df:30:2d:84:8a:3a:aa:b8:2e:44:2f:
86:ab:f8:77:34:ba:7d:6b:93:0e:dd:30:c4:58:41:17:92:25:
d2:1b:58:a0:87:81:9c:51:43:06:bb:88:26:fb:81:23:a1:42:
37:48:65:fc:91:28:b7:4c:f2:c7:66:32:73:43:0e:2b:ca:1c:
26:c3:35:0a:4e:45:92:fa:67:b3:87:8f:9e:d1:25:8d:c2:52:
65:ba:7a:cb:4a:8e:99:06:3e:8d:f3:3e:46:fc:3d:3b:2f:ce:
1d:c4:06:06:3b:52:1b:14:06:cc:23:91:90:cc:f4:6b:de:cf:
df:35:09:35:05:82:d6:6e:6a:5d:f7:8d:39:75:b5:ed:04:20:
9e:0c:ce:3c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzF2+lk+mXwUcu9+ZN7FHOHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYzRjMzgwNmUxZjg4ZTk5YmQ4YzVlNDkwMDc3ZjhkZTVk
N2NmMDYwHhcNMjQwMTAxMTYyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGUyMmExZjhmODY0Mzc1ZTNjNjI0OGYwMzlmOWY4ZjlkODU0NTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx8wDB58wOwWFHP415nS4uVnJupn
DxKC7Lx0lP4Oy9WjJvEkN0c+VJoqm0ysZE3TrsstillNSKld51r3LcoFPcBEIXq4
DkcRF82sxPa/6jb3rkG1L8kOSojmr9SyycZgF2EPxnbKITpdtbd0G2cc4usdebBw
xMhfzTcXBuv4mjbBHed1KW5Mgz72W0IBQL3kGQRXURsgboRGYht9TrVIBx755Z1+
4yKBtWP8YhexjiT9/eQqtRMceVk0Vf677rvfMwi9fLJr+fwCpogCnM0ZqUEHxfGP
SnnH9LYJc+OfyKPE1BnY6k8XJqO5OEn/E616oXJniNJv0cOx3fZAX3Yc1wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHTiKh+PhkN148YkjwOfn4+dhUUiMB8GA1UdIwQY
MBaAFNLEw4BuH4jpm9jF5JAHf43l188GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHNURGdHNGZpT21iMk1Ya2tBZF9qZVhYendZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kMmIwYTItOTVlMy00MWEwLThjZGYt
ZmY4MDllN2RhZWNhLzEvZE9JcUg0LUdRM1hqeGlTUEE1LWZqNTJGUlNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9kMmIwYTItOTVlMy00MWEwLThjZGYtZmY4MDllN2RhZWNh
LzEvMHNURGdHNGZpT21iMk1Ya2tBZF9qZVhYendZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDW23QAwQD
hhPIMA0GCSqGSIb3DQEBCwUAA4IBAQC1Fc+TapUxkcAyOuX0GGj1XaXWusii7zHM
FYE7RA9fAvAS9Q80GFHYJiumMt9jwpm9GXak7eg4zt+0yEG3+rEyuh3dlBxdKFwg
Rni03FDn7pdxUYeBDG9kXdTFf0qsZiy7yMcEtL977zLDpWs3r2gfUtg73zAthIo6
qrguRC+Gq/h3NLp9a5MO3TDEWEEXkiXSG1igh4GcUUMGu4gm+4EjoUI3SGX8kSi3
TPLHZjJzQw4ryhwmwzUKTkWS+mezh4+e0SWNwlJlunrLSo6ZBj6N8z5G/D07L84d
xAYGO1IbFAbMI5GQzPRr3s/fNQk1BYLWbmpd9405dbXtBCCeDM48
-----END CERTIFICATE-----
Generated at Sat May 11 15:45:43 2024 by rpki-client on console-fra.rpki-client.org