Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/1Evuje0EKDtv9H38aJZf_vCpmEs.roa
File: 1Evuje0EKDtv9H38aJZf_vCpmEs.roa (raw, json)
Hash identifier: 1W28sHBQ5gHrXyNl5DfnSmPYt4ELlvhrhaHlGRIBOEY=
Subject key identifier: D4:4B:EE:8D:ED:04:28:3B:6F:F4:7D:FC:68:96:5F:FE:F0:A9:98:4B
Certificate issuer: /CN=032755057c69bd7ba7da22520109e49b5b04cc03
Certificate serial: 018CC94E2D10A17739B132E449763590F981
Authority key identifier: 03:27:55:05:7C:69:BD:7B:A7:DA:22:52:01:09:E4:9B:5B:04:CC:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AydVBXxpvXun2iJSAQnkm1sEzAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/1Evuje0EKDtv9H38aJZf_vCpmEs.roa
Signing time: Tue 02 Jan 2024 08:33:12 +0000
ROA not before: Tue 02 Jan 2024 08:33:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49817
IP address blocks: 91.195.2.0/24 maxlen: 24
91.195.3.0/24 maxlen: 24
91.195.2.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AydVBXxpvXun2iJSAQnkm1sEzAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:2d:10:a1:77:39:b1:32:e4:49:76:35:90:f9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032755057c69bd7ba7da22520109e49b5b04cc03
Validity
Not Before: Jan 2 08:33:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d44bee8ded04283b6ff47dfc68965ffef0a9984b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:15:03:c9:4c:07:b1:59:24:48:ff:f5:38:6a:
08:db:94:f3:83:a7:91:ad:88:d0:db:7d:68:d3:12:
31:e1:eb:84:f5:4a:85:17:d8:7f:80:6a:47:81:60:
bc:47:db:c1:d2:cf:2f:65:f8:a8:88:62:52:e9:ce:
41:bb:d0:ae:f1:ef:a9:6e:59:e2:57:41:ca:c0:3c:
e0:24:cf:b2:b0:ef:85:13:a5:4a:48:57:bb:2d:f4:
6b:76:b6:1b:71:ba:83:86:04:f1:6e:5f:ae:43:c2:
92:e5:fb:86:00:a7:10:f1:c0:08:3a:7c:3d:f3:bc:
7f:26:2c:2c:40:46:45:2b:99:85:c5:d1:43:d5:a4:
63:a8:df:93:63:84:2b:d0:e7:48:25:6d:a2:b3:fc:
3f:fe:06:b5:4e:57:48:b5:db:bf:07:35:f9:88:ca:
2f:d3:c6:9f:8a:21:50:c8:61:c1:b8:25:c2:80:ef:
f8:8d:30:9c:c9:3e:07:6f:9e:d5:61:f2:94:91:b4:
b7:b2:a4:3d:8c:60:c2:13:c8:94:63:8a:ae:f3:23:
46:6f:7c:ff:ce:1d:09:86:c6:cb:17:14:65:02:da:
7a:e7:b9:71:dc:35:9d:29:c0:b0:2b:73:6b:ee:0c:
da:e4:72:09:41:26:a0:b8:34:9f:f6:e7:2c:59:5c:
94:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4B:EE:8D:ED:04:28:3B:6F:F4:7D:FC:68:96:5F:FE:F0:A9:98:4B
X509v3 Authority Key Identifier:
keyid:03:27:55:05:7C:69:BD:7B:A7:DA:22:52:01:09:E4:9B:5B:04:CC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AydVBXxpvXun2iJSAQnkm1sEzAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/1Evuje0EKDtv9H38aJZf_vCpmEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.2.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:44:1b:ee:e2:23:a2:bd:b7:a3:47:8a:ea:80:f8:df:35:36:
fe:ec:4c:24:56:61:17:92:d2:02:6d:cf:2b:47:ca:b9:84:01:
bf:7f:b4:ed:04:47:3f:92:fa:42:9f:95:be:3b:a9:d4:d9:bf:
89:4c:68:c3:32:01:c1:30:09:d0:6e:f0:c0:9b:53:70:70:31:
96:74:c9:23:b2:1c:14:fe:f4:35:f0:c8:b2:2d:ea:83:b1:70:
f3:75:4d:97:71:ce:b4:a4:73:dd:c5:e7:ee:2f:8b:79:70:7e:
38:e8:5d:da:db:bc:a0:d6:58:e5:5c:73:ca:af:c6:ea:6a:f1:
31:5d:ed:7a:d4:1c:f0:c1:06:cc:3a:e2:5b:17:19:0a:b0:4a:
a7:ce:c0:34:4f:c9:f4:9a:b7:7a:7c:46:72:07:a6:a8:9d:b6:
7b:ce:69:d5:b0:3f:df:a6:01:cb:f3:41:45:bf:9d:52:c3:db:
f2:91:37:c0:ff:a7:49:59:b0:9d:ac:02:03:ff:fe:bb:72:0e:
7e:c1:3b:07:80:f7:80:d6:5b:69:6b:c8:dd:e4:26:07:55:93:
b1:0c:70:d5:57:10:e9:bf:4c:d7:2d:af:24:c6:3d:1f:6f:23:
a7:a5:c8:9d:01:80:c2:c4:da:bd:6a:7a:a8:79:4d:7f:7d:ec:
8f:20:46:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTi0QoXc5sTLkSXY1kPmBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjc1NTA1N2M2OWJkN2JhN2RhMjI1MjAxMDllNDliNWIw
NGNjMDMwHhcNMjQwMTAyMDgzMzEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDRiZWU4ZGVkMDQyODNiNmZmNDdkZmM2ODk2NWZmZWYwYTk5ODRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxUDyUwHsVkkSP/1OGoI25Tzg6eR
rYjQ231o0xIx4euE9UqFF9h/gGpHgWC8R9vB0s8vZfioiGJS6c5Bu9Cu8e+pblni
V0HKwDzgJM+ysO+FE6VKSFe7LfRrdrYbcbqDhgTxbl+uQ8KS5fuGAKcQ8cAIOnw9
87x/JiwsQEZFK5mFxdFD1aRjqN+TY4Qr0OdIJW2is/w//ga1TldItdu/BzX5iMov
08afiiFQyGHBuCXCgO/4jTCcyT4Hb57VYfKUkbS3sqQ9jGDCE8iUY4qu8yNGb3z/
zh0JhsbLFxRlAtp657lx3DWdKcCwK3Nr7gza5HIJQSaguDSf9ucsWVyUnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNRL7o3tBCg7b/R9/GiWX/7wqZhLMB8GA1UdIwQY
MBaAFAMnVQV8ab17p9oiUgEJ5JtbBMwDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlkVkJYeHB2WHVuMmlKU0FRbmttMXNFekFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hM2RlZWMtZGNhMi00NTU5LTk0Yjgt
ZDliYTA5NmJmNWJjLzEvMUV2dWplMEVLRHR2OUgzOGFKWmZfdkNwbUVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9hM2RlZWMtZGNhMi00NTU5LTk0YjgtZDliYTA5NmJmNWJj
LzEvQXlkVkJYeHB2WHVuMmlKU0FRbmttMXNFekFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8MCMA0G
CSqGSIb3DQEBCwUAA4IBAQChRBvu4iOivbejR4rqgPjfNTb+7EwkVmEXktICbc8r
R8q5hAG/f7TtBEc/kvpCn5W+O6nU2b+JTGjDMgHBMAnQbvDAm1NwcDGWdMkjshwU
/vQ18MiyLeqDsXDzdU2Xcc60pHPdxefuL4t5cH446F3a27yg1ljlXHPKr8bqavEx
Xe161BzwwQbMOuJbFxkKsEqnzsA0T8n0mrd6fEZyB6aonbZ7zmnVsD/fpgHL80FF
v51Sw9vykTfA/6dJWbCdrAID//67cg5+wTsHgPeA1ltpa8jd5CYHVZOxDHDVVxDp
v0zXLa8kxj0fbyOnpcidAYDCxNq9anqoeU1/feyPIEZ4
-----END CERTIFICATE-----
Generated at Fri May 17 21:11:32 2024 by rpki-client on console-ams.rpki-client.org