Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/Rtw1pOGNsb0YXu3FNTmYz6NaEx4.roa
File: Rtw1pOGNsb0YXu3FNTmYz6NaEx4.roa (raw, json)
Hash identifier: X8vczeplUcKIUUFQdipAFH+nfrFZjf6QkxfUfxVhb1c=
Subject key identifier: 46:DC:35:A4:E1:8D:B1:BD:18:5E:ED:C5:35:39:98:CF:A3:5A:13:1E
Certificate issuer: /CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Certificate serial: 018CC9BBF143EB9CF50230EAD5A7A71050BD
Authority key identifier: 5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/Rtw1pOGNsb0YXu3FNTmYz6NaEx4.roa
Signing time: Tue 02 Jan 2024 10:33:06 +0000
ROA not before: Tue 02 Jan 2024 10:33:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42160
IP address blocks: 164.138.104.0/21 maxlen: 21
91.230.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:f1:43:eb:9c:f5:02:30:ea:d5:a7:a7:10:50:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Validity
Not Before: Jan 2 10:33:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46dc35a4e18db1bd185eedc5353998cfa35a131e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:28:01:38:60:24:55:4d:ee:44:f7:aa:cf:ec:
09:fc:a1:df:0c:48:a2:29:cb:88:06:05:5f:cc:ee:
98:1f:cb:a5:9f:ae:da:11:d5:7b:8b:36:0a:55:37:
58:b6:72:8c:ad:b2:af:49:de:7b:26:3e:a2:ad:73:
75:c8:98:ef:9b:9b:a2:e7:e0:1d:c2:ec:b5:38:69:
b6:0d:92:eb:1d:93:c7:c5:57:82:df:45:8f:8e:2c:
4e:c6:b3:fc:8b:18:53:e6:6c:d8:68:40:8f:12:1d:
f2:e1:ef:c7:e6:68:df:4b:70:c3:4a:b0:f8:b1:5d:
9c:8b:4c:2e:35:cf:7b:57:60:b2:49:5a:1c:8c:7d:
28:20:6b:68:e5:7e:ef:0f:a0:2d:5b:41:31:ea:18:
8f:da:7a:2d:8d:99:4a:f8:46:cb:15:94:96:92:cc:
48:05:90:8f:9e:f7:e6:50:e4:74:9a:a4:db:fb:eb:
dc:ec:2b:bb:87:c5:46:d6:54:38:85:5d:d6:db:f7:
54:f7:1b:86:b6:72:d1:be:91:b9:ca:fc:ea:35:b1:
07:0f:e2:f1:96:fc:34:7e:78:92:1f:5e:0f:ac:f6:
a3:13:61:4d:88:14:ca:b8:14:3c:e4:c4:04:56:a8:
de:71:e5:f4:7b:28:18:d7:07:88:d3:70:56:dc:76:
f9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DC:35:A4:E1:8D:B1:BD:18:5E:ED:C5:35:39:98:CF:A3:5A:13:1E
X509v3 Authority Key Identifier:
keyid:5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/Rtw1pOGNsb0YXu3FNTmYz6NaEx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.64.0/24
164.138.104.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:bc:d4:84:d6:7d:6b:68:72:20:58:34:62:34:d5:6c:3c:f4:
ca:57:5e:5d:bf:f4:cf:86:7e:d5:d8:1a:14:78:e8:0c:c9:ad:
ac:ef:58:b1:61:0c:5d:29:ff:04:7e:26:cf:23:44:c9:48:03:
69:c8:d7:5a:60:6f:30:35:3a:8f:14:47:d7:49:7f:be:25:55:
e3:20:95:7f:10:0f:f9:d9:47:52:3e:fc:d7:4e:e2:9e:af:a5:
88:6e:26:5b:1b:66:48:79:c4:02:e7:db:e8:a5:b7:10:3e:9b:
10:eb:99:63:03:63:d2:9c:90:93:7f:42:54:6d:10:60:5b:a1:
c2:85:36:61:65:d9:6e:b9:d7:49:7b:46:94:2b:88:93:3e:10:
dd:65:0e:48:b8:a9:89:4b:96:89:ba:57:6c:7f:21:a4:13:d0:
0a:2c:19:51:0b:38:6f:37:ca:6d:d4:10:83:92:5b:c6:d2:a3:
f7:d5:c3:a4:08:33:89:44:06:75:57:50:25:bc:81:0c:8e:e7:
59:6d:98:f6:45:6e:c1:fd:d6:e8:9b:78:62:fc:f2:21:62:c7:
dd:ec:94:ad:e8:eb:aa:4f:bf:f4:fd:98:af:a8:64:2a:9f:e0:
1b:14:59:20:c6:00:71:ab:f4:ae:2e:17:e0:67:09:3f:9b:e0:
41:cb:ad:43
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzJu/FD65z1AjDq1aenEFC9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMzBkOTUwNDYzMzFiZGNlMzAxOGI3ZmZlMGYxM2RiZjlm
YzcxOGQwHhcNMjQwMTAyMTAzMzA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmRjMzVhNGUxOGRiMWJkMTg1ZWVkYzUzNTM5OThjZmEzNWExMzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCgBOGAkVU3uRPeqz+wJ/KHfDEii
KcuIBgVfzO6YH8uln67aEdV7izYKVTdYtnKMrbKvSd57Jj6irXN1yJjvm5ui5+Ad
wuy1OGm2DZLrHZPHxVeC30WPjixOxrP8ixhT5mzYaECPEh3y4e/H5mjfS3DDSrD4
sV2ci0wuNc97V2CySVocjH0oIGto5X7vD6AtW0Ex6hiP2notjZlK+EbLFZSWksxI
BZCPnvfmUOR0mqTb++vc7Cu7h8VG1lQ4hV3W2/dU9xuGtnLRvpG5yvzqNbEHD+Lx
lvw0fniSH14PrPajE2FNiBTKuBQ85MQEVqjeceX0eygY1weI03BW3Hb5EQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEbcNaThjbG9GF7txTU5mM+jWhMeMB8GA1UdIwQY
MBaAFFww2VBGMxvc4wGLf/4PE9v5/HGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEREWlVFWXpHOXpqQVl0X19nOFQyX244Y1kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84OTgzYWYtNWMxOC00YmM4LWEzZjUt
MDc1MDkxOTFmOTUzLzEvUnR3MXBPR05zYjBZWHUzRk5UbVl6Nk5hRXg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC84OTgzYWYtNWMxOC00YmM4LWEzZjUtMDc1MDkxOTFmOTUz
LzEvWEREWlVFWXpHOXpqQVl0X19nOFQyX244Y1kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+ZAAwQD
pIpoMA0GCSqGSIb3DQEBCwUAA4IBAQBcvNSE1n1raHIgWDRiNNVsPPTKV15dv/TP
hn7V2BoUeOgMya2s71ixYQxdKf8EfibPI0TJSANpyNdaYG8wNTqPFEfXSX++JVXj
IJV/EA/52UdSPvzXTuKer6WIbiZbG2ZIecQC59vopbcQPpsQ65ljA2PSnJCTf0JU
bRBgW6HChTZhZdluuddJe0aUK4iTPhDdZQ5IuKmJS5aJuldsfyGkE9AKLBlRCzhv
N8pt1BCDklvG0qP31cOkCDOJRAZ1V1AlvIEMjudZbZj2RW7B/dbom3hi/PIhYsfd
7JSt6OuqT7/0/ZivqGQqn+AbFFkgxgBxq/SuLhfgZwk/m+BBy61D
-----END CERTIFICATE-----
Generated at Wed May 29 09:24:42 2024 by rpki-client on console-fra.rpki-client.org