Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/rBFHy0ABSZlGMVMfAMJn6_-WDuQ.roa
File: rBFHy0ABSZlGMVMfAMJn6_-WDuQ.roa (raw, json)
Hash identifier: cawsq2zLEk5dmGhTuEf+V6Nf80QGUzA7FnYPoYhFqK8=
Subject key identifier: AC:11:47:CB:40:01:49:99:46:31:53:1F:00:C2:67:EB:FF:96:0E:E4
Certificate issuer: /CN=8ce8df39e3626087ae16f60ebe61acc8c6d13573
Certificate serial: 018CC34959D93AE1154C6B3C205C08E8850B
Authority key identifier: 8C:E8:DF:39:E3:62:60:87:AE:16:F6:0E:BE:61:AC:C8:C6:D1:35:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOjfOeNiYIeuFvYOvmGsyMbRNXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/rBFHy0ABSZlGMVMfAMJn6_-WDuQ.roa
Signing time: Mon 01 Jan 2024 04:30:13 +0000
ROA not before: Mon 01 Jan 2024 04:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59877
IP address blocks: 91.212.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jOjfOeNiYIeuFvYOvmGsyMbRNXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:59:d9:3a:e1:15:4c:6b:3c:20:5c:08:e8:85:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ce8df39e3626087ae16f60ebe61acc8c6d13573
Validity
Not Before: Jan 1 04:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac1147cb400149994631531f00c267ebff960ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:29:aa:4a:91:b2:82:88:9b:c0:6a:21:8f:be:
a1:75:74:a1:c7:9d:99:1a:de:10:bd:61:c9:5a:42:
eb:d5:1b:af:9d:34:53:08:15:ae:8f:f7:8b:17:e3:
9d:76:6f:3d:f0:ce:c2:88:10:17:f4:3e:f3:5e:aa:
d2:7e:10:8e:37:93:de:06:08:d9:77:ac:4a:d7:97:
f3:17:0a:95:d8:08:bd:53:2c:1b:9b:07:ed:c4:13:
04:ff:d8:3e:d1:b1:31:de:9a:fa:ce:93:75:7a:c2:
5a:fa:2d:31:b2:b5:ae:78:6a:2a:53:11:71:41:c4:
ae:58:6c:d5:e3:21:52:8e:a3:89:ad:aa:7d:8c:78:
c1:28:14:34:dc:2c:82:b5:70:b9:ed:3d:ba:06:f9:
6a:bb:88:d1:d2:02:f1:da:22:fb:38:4d:af:e6:d0:
c8:07:d4:b1:b1:70:22:5b:95:55:89:c0:8f:5a:ac:
47:09:a0:57:2e:0c:03:74:e9:af:e2:1c:41:e6:b3:
2e:9c:0c:28:f5:5e:5e:f3:06:1b:c9:e2:b2:fd:e0:
64:8f:3d:a9:38:77:c7:ab:60:f2:06:9b:3c:a1:cf:
26:47:d4:28:b8:0b:c7:17:77:5b:2c:a9:27:7a:4e:
81:9a:c4:fd:9d:e0:fa:f5:31:79:fb:47:23:ca:6d:
f2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:11:47:CB:40:01:49:99:46:31:53:1F:00:C2:67:EB:FF:96:0E:E4
X509v3 Authority Key Identifier:
keyid:8C:E8:DF:39:E3:62:60:87:AE:16:F6:0E:BE:61:AC:C8:C6:D1:35:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOjfOeNiYIeuFvYOvmGsyMbRNXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/rBFHy0ABSZlGMVMfAMJn6_-WDuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.33.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:fd:21:9b:79:6b:70:17:cf:9b:54:84:51:4c:52:fb:86:20:
2b:af:87:b3:ba:a9:d8:f4:de:3a:b9:f5:04:ed:60:ea:2d:21:
ce:05:d4:04:13:16:c3:4d:96:7a:36:fa:14:a4:1f:55:19:9f:
27:a9:e9:5f:35:1b:ef:7a:31:cd:45:d5:ac:42:90:b3:82:93:
5e:64:f3:cb:ab:9d:8f:0f:12:30:cd:ec:f1:ef:91:21:b3:83:
a2:c5:7f:dd:d0:1b:76:6f:ed:1d:ef:b2:e2:b4:56:bb:1f:d8:
71:2b:ea:ae:2f:37:eb:5a:b4:34:cc:2e:09:79:64:a6:61:89:
ee:13:be:85:e8:72:7a:a2:94:46:55:1b:9c:35:12:de:2d:c3:
11:88:94:1b:57:00:31:d9:a4:7d:fa:dd:d1:03:66:af:94:d9:
dc:97:1b:13:1a:e9:cc:1a:47:8d:06:84:34:81:96:19:9c:55:
56:1f:65:9c:2f:9a:35:fe:a7:b1:c9:41:63:82:92:39:4b:a8:
52:f1:31:bb:a3:d4:fd:fe:6d:8c:0b:6f:a6:f1:20:2e:94:04:
fd:9e:ca:d4:c9:2e:1f:fd:00:3e:df:c5:67:26:70:d6:cb:3f:
83:23:e9:4b:ca:80:bb:30:21:1b:67:df:5c:2a:4c:2c:3b:67:
cc:1f:13:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSVnZOuEVTGs8IFwI6IULMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZThkZjM5ZTM2MjYwODdhZTE2ZjYwZWJlNjFhY2M4YzZk
MTM1NzMwHhcNMjQwMTAxMDQzMDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzExNDdjYjQwMDE0OTk5NDYzMTUzMWYwMGMyNjdlYmZmOTYwZWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCmqSpGygoibwGohj76hdXShx52Z
Gt4QvWHJWkLr1RuvnTRTCBWuj/eLF+Oddm898M7CiBAX9D7zXqrSfhCON5PeBgjZ
d6xK15fzFwqV2Ai9UywbmwftxBME/9g+0bEx3pr6zpN1esJa+i0xsrWueGoqUxFx
QcSuWGzV4yFSjqOJrap9jHjBKBQ03CyCtXC57T26Bvlqu4jR0gLx2iL7OE2v5tDI
B9SxsXAiW5VVicCPWqxHCaBXLgwDdOmv4hxB5rMunAwo9V5e8wYbyeKy/eBkjz2p
OHfHq2DyBps8oc8mR9QouAvHF3dbLKknek6BmsT9neD69TF5+0cjym3yqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKwRR8tAAUmZRjFTHwDCZ+v/lg7kMB8GA1UdIwQY
MBaAFIzo3znjYmCHrhb2Dr5hrMjG0TVzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak9qZk9lTmlZSWV1RnZZT3ZtR3N5TWJSTlhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zNWIwMjAtYTIyNS00ZGZmLWIxNzIt
ZDA4MThlZjA2NjU5LzEvckJGSHkwQUJTWmxHTVZNZkFNSm42Xy1XRHVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8zNWIwMjAtYTIyNS00ZGZmLWIxNzItZDA4MThlZjA2NjU5
LzEvak9qZk9lTmlZSWV1RnZZT3ZtR3N5TWJSTlhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9QhMA0G
CSqGSIb3DQEBCwUAA4IBAQC3/SGbeWtwF8+bVIRRTFL7hiArr4ezuqnY9N46ufUE
7WDqLSHOBdQEExbDTZZ6NvoUpB9VGZ8nqelfNRvvejHNRdWsQpCzgpNeZPPLq52P
DxIwzezx75Ehs4OixX/d0Bt2b+0d77LitFa7H9hxK+quLzfrWrQ0zC4JeWSmYYnu
E76F6HJ6opRGVRucNRLeLcMRiJQbVwAx2aR9+t3RA2avlNnclxsTGunMGkeNBoQ0
gZYZnFVWH2WcL5o1/qexyUFjgpI5S6hS8TG7o9T9/m2MC2+m8SAulAT9nsrUyS4f
/QA+38VnJnDWyz+DI+lLyoC7MCEbZ99cKkwsO2fMHxMf
-----END CERTIFICATE-----
Generated at Sat Jun 15 10:42:57 2024 by rpki-client on console-ams.rpki-client.org