Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/XXp6F8JDwRb4bOTSr_HLqZJaqmY.roa
File: XXp6F8JDwRb4bOTSr_HLqZJaqmY.roa (raw, json)
Hash identifier: X3h45+h8wzSeQLAEWG5mrqx9o6InwE5BaoDAMv4WJRE=
Subject key identifier: 5D:7A:7A:17:C2:43:C1:16:F8:6C:E4:D2:AF:F1:CB:A9:92:5A:AA:66
Certificate issuer: /CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Certificate serial: 018CC500B1030EA569FB03EE2851263F145A
Authority key identifier: 8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/XXp6F8JDwRb4bOTSr_HLqZJaqmY.roa
Signing time: Mon 01 Jan 2024 12:30:06 +0000
ROA not before: Mon 01 Jan 2024 12:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57808
IP address blocks: 91.235.147.0/24 maxlen: 24
91.235.146.0/23 maxlen: 23
91.235.145.0/24 maxlen: 24
91.235.144.0/22 maxlen: 22
91.235.144.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:b1:03:0e:a5:69:fb:03:ee:28:51:26:3f:14:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Validity
Not Before: Jan 1 12:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d7a7a17c243c116f86ce4d2aff1cba9925aaa66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ae:b2:38:bf:13:5b:75:2c:d0:9a:dd:28:6f:
7e:19:c4:56:91:96:f7:ff:82:35:47:30:7b:84:e4:
d8:2f:6f:63:80:1e:5d:05:23:ed:1a:42:d0:b6:52:
a8:37:37:19:88:81:15:29:fa:aa:9b:b7:78:f0:e0:
3a:60:99:7d:64:18:62:93:8b:17:08:65:62:1e:2a:
b3:3b:3f:4b:6e:30:6c:14:e3:be:67:e0:d0:ae:8d:
4c:1f:41:71:d6:07:4f:84:65:7b:86:ee:47:7c:81:
28:c8:0b:a6:0e:9f:ef:4a:29:4a:8f:d9:e6:35:20:
c2:e2:47:16:0c:92:fe:a9:f2:cc:21:3a:e7:27:32:
ec:a9:97:ce:bc:fb:93:fb:26:ab:42:5d:b2:d2:6e:
f2:0a:d2:86:e9:f6:cd:bb:18:dd:7c:fe:73:61:bf:
53:e6:c0:e1:33:a1:9b:34:bd:e6:e4:63:36:a5:cf:
51:60:3c:a6:74:2d:82:1e:53:6f:4f:eb:d7:3a:3a:
5b:5c:a8:e6:ee:94:05:da:03:a2:58:04:ed:1b:4c:
a3:e4:5d:5e:0d:d4:f7:56:da:48:4e:a3:97:96:10:
b6:d3:e1:a7:5d:96:2e:83:60:47:a7:94:fa:87:52:
9e:46:9d:25:42:34:b5:bb:01:ab:a7:aa:ef:e3:1a:
20:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7A:7A:17:C2:43:C1:16:F8:6C:E4:D2:AF:F1:CB:A9:92:5A:AA:66
X509v3 Authority Key Identifier:
keyid:8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/XXp6F8JDwRb4bOTSr_HLqZJaqmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.144.0/22
Signature Algorithm: sha256WithRSAEncryption
54:98:96:99:9f:0d:16:13:9e:5a:0c:da:aa:4f:74:3f:2b:2a:
8d:2f:3d:a7:25:8d:d3:7e:e4:45:4b:0b:c8:2b:3b:98:97:d6:
72:e7:5b:18:83:82:bb:d0:7a:08:67:64:e0:fc:3f:32:bc:fc:
94:ba:16:4f:b1:54:3c:53:d3:5a:5e:52:a9:17:e8:34:21:ba:
04:80:91:06:51:49:4f:69:2b:ba:5a:f2:71:63:0a:38:52:69:
59:3c:59:fa:52:51:bb:01:71:f0:15:ee:76:69:f7:ec:5f:45:
e2:89:37:26:c7:f7:62:fe:f4:11:12:72:5f:9c:66:e8:aa:13:
b1:fd:34:2c:e1:62:59:96:cf:c9:54:65:45:b9:67:00:6f:53:
36:a1:72:1f:0e:d3:4d:c7:f2:c2:54:c2:67:cd:d0:74:52:42:
48:c1:40:98:d9:de:f0:c3:8d:91:7d:cf:d6:b1:f4:dc:3c:71:
db:4a:41:2b:ae:72:d2:a8:50:58:ac:4a:2b:89:bb:03:41:34:
a2:53:b0:ab:07:11:09:f1:ec:d2:9e:00:ca:a7:89:e8:87:54:
dc:98:e0:5a:47:9f:af:55:31:d4:23:3d:94:bc:98:13:b9:43:
a0:cc:62:e7:79:75:18:0e:80:ad:2c:71:57:5c:b2:f5:63:78:
0b:cd:21:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFALEDDqVp+wPuKFEmPxRaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYjZiZDY1ZmUyYTg2ZmQ0MmY5YzRmNTA0ZTFlZWQ1ODU3
MGY5M2QwHhcNMjQwMTAxMTIzMDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDdhN2ExN2MyNDNjMTE2Zjg2Y2U0ZDJhZmYxY2JhOTkyNWFhYTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK6yOL8TW3Us0JrdKG9+GcRWkZb3
/4I1RzB7hOTYL29jgB5dBSPtGkLQtlKoNzcZiIEVKfqqm7d48OA6YJl9ZBhik4sX
CGViHiqzOz9LbjBsFOO+Z+DQro1MH0Fx1gdPhGV7hu5HfIEoyAumDp/vSilKj9nm
NSDC4kcWDJL+qfLMITrnJzLsqZfOvPuT+yarQl2y0m7yCtKG6fbNuxjdfP5zYb9T
5sDhM6GbNL3m5GM2pc9RYDymdC2CHlNvT+vXOjpbXKjm7pQF2gOiWATtG0yj5F1e
DdT3VtpITqOXlhC20+GnXZYug2BHp5T6h1KeRp0lQjS1uwGrp6rv4xogywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF16ehfCQ8EW+Gzk0q/xy6mSWqpmMB8GA1UdIwQY
MBaAFIq2vWX+Kob9QvnE9QTh7tWFcPk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXJhOVpmNHFodjFDLWNUMUJPSHUxWVZ3LVQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80NWE5YzUtMmNjMS00ZjQ1LWJhODAt
YWQ1ODE4OWRlNzU0LzEvWFhwNkY4SkR3UmI0Yk9UU3JfSExxWkphcW1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80NWE5YzUtMmNjMS00ZjQ1LWJhODAtYWQ1ODE4OWRlNzU0
LzEvaXJhOVpmNHFodjFDLWNUMUJPSHUxWVZ3LVQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+uQMA0G
CSqGSIb3DQEBCwUAA4IBAQBUmJaZnw0WE55aDNqqT3Q/KyqNLz2nJY3TfuRFSwvI
KzuYl9Zy51sYg4K70HoIZ2Tg/D8yvPyUuhZPsVQ8U9NaXlKpF+g0IboEgJEGUUlP
aSu6WvJxYwo4UmlZPFn6UlG7AXHwFe52affsX0XiiTcmx/di/vQREnJfnGboqhOx
/TQs4WJZls/JVGVFuWcAb1M2oXIfDtNNx/LCVMJnzdB0UkJIwUCY2d7ww42Rfc/W
sfTcPHHbSkErrnLSqFBYrEoribsDQTSiU7CrBxEJ8ezSngDKp4noh1TcmOBaR5+v
VTHUIz2UvJgTuUOgzGLneXUYDoCtLHFXXLL1Y3gLzSFh
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:36:57 2024 by rpki-client on console-ams.rpki-client.org