Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/91tN7HkXnshRbSaZjqvFnOFTMy8.roa
File: 91tN7HkXnshRbSaZjqvFnOFTMy8.roa (raw, json)
Hash identifier: +tw/8qJv2FR07D4NdURZE+TlhImBe6LsBwh6bNGi6Fo=
Subject key identifier: F7:5B:4D:EC:79:17:9E:C8:51:6D:26:99:8E:AB:C5:9C:E1:53:33:2F
Certificate issuer: /CN=dd52ad090b54678e0968e69955c25049434d96c8
Certificate serial: 018CC424A9A0A5EC70503D6CC589A26C298E
Authority key identifier: DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/91tN7HkXnshRbSaZjqvFnOFTMy8.roa
Signing time: Mon 01 Jan 2024 08:29:46 +0000
ROA not before: Mon 01 Jan 2024 08:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28951
IP address blocks: 195.47.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:a9:a0:a5:ec:70:50:3d:6c:c5:89:a2:6c:29:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd52ad090b54678e0968e69955c25049434d96c8
Validity
Not Before: Jan 1 08:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f75b4dec79179ec8516d26998eabc59ce153332f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:32:f8:ca:cb:83:79:5e:75:b0:c5:ea:77:
75:f7:48:1c:7f:a1:85:ef:43:c8:ff:da:44:9e:9f:
f9:09:75:0b:3e:0a:bc:a1:11:d0:8f:ff:78:0e:8c:
71:d0:a5:3d:07:09:54:5e:3d:f6:f3:ed:f9:d1:51:
79:29:98:cc:4f:25:6d:38:5f:19:8d:be:d0:7f:e2:
a2:b1:58:c0:46:0a:6a:57:33:e9:04:df:d7:ca:95:
b2:e2:28:d8:d1:28:b7:87:04:c6:7a:ec:8c:b1:71:
40:e0:1a:99:39:24:f0:2b:d4:c5:cb:7c:1a:64:c9:
0e:39:90:7c:39:81:f2:60:6c:84:c4:23:9b:61:26:
fd:73:3f:4e:5a:b8:ab:fa:51:24:2e:cd:92:7a:0b:
3e:d9:0d:b4:b8:c7:ab:e9:fa:99:0e:97:be:d8:5a:
7d:25:aa:cb:90:a4:52:8c:ec:cc:be:25:0a:64:27:
85:0b:b7:05:a3:83:7a:0d:6b:eb:87:2f:fd:3b:fa:
dd:57:99:82:a5:9f:42:00:ef:6a:46:ea:cf:c0:f1:
04:37:ee:da:b4:4b:8e:1d:cf:a7:ab:2e:72:bb:1c:
95:30:a0:71:43:3b:a9:7e:d2:d0:86:2c:dc:f0:0a:
c3:34:2a:b6:9b:32:2a:90:98:48:f3:d9:e1:cd:84:
b3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5B:4D:EC:79:17:9E:C8:51:6D:26:99:8E:AB:C5:9C:E1:53:33:2F
X509v3 Authority Key Identifier:
keyid:DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/91tN7HkXnshRbSaZjqvFnOFTMy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.213.0/24
Signature Algorithm: sha256WithRSAEncryption
10:82:a9:cc:76:32:5d:c7:e7:a8:72:d7:5b:d7:5e:01:10:86:
fc:82:3b:b2:77:27:9e:c3:e2:7c:c2:ed:64:ca:6d:20:fe:06:
01:6e:de:f5:fc:93:f2:a7:bd:fd:be:80:9b:5a:16:5f:bd:6d:
29:11:2e:d8:9d:39:cd:75:5f:fd:98:e8:16:47:09:c4:9e:64:
7b:0f:03:6e:ee:3b:32:62:6c:09:7e:47:ae:f7:ce:be:69:2d:
56:d9:a8:78:52:a2:39:70:be:1d:71:fb:6f:84:83:e6:fd:33:
23:6c:1f:f5:b4:88:91:80:88:10:55:40:8c:5d:56:be:ae:b5:
72:02:d6:8d:85:63:94:75:bb:11:65:f5:bc:85:02:21:0d:0d:
0a:aa:f4:e4:7b:77:9c:5c:05:af:a8:32:b1:ec:7b:05:f0:73:
e5:21:1f:5d:62:7e:c1:17:48:c5:38:1d:be:89:1c:9b:f0:c3:
cd:b7:26:b0:51:d2:40:ed:8f:0e:96:8d:91:1c:84:7c:98:75:
b2:e5:70:a5:af:b4:aa:01:81:09:bf:98:57:34:8c:bc:5e:8f:
bc:6a:d9:3b:e3:ad:ca:24:98:85:98:5f:36:3a:86:db:35:03:
ca:86:9d:16:64:c6:f1:4c:82:14:4c:8f:da:b8:f8:15:9c:a7:
59:8e:b1:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJKmgpexwUD1sxYmibCmOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNTJhZDA5MGI1NDY3OGUwOTY4ZTY5OTU1YzI1MDQ5NDM0
ZDk2YzgwHhcNMjQwMTAxMDgyOTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzViNGRlYzc5MTc5ZWM4NTE2ZDI2OTk4ZWFiYzU5Y2UxNTMzMzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmUy+MrLg3ledbDF6nd190gcf6GF
70PI/9pEnp/5CXULPgq8oRHQj/94Doxx0KU9BwlUXj328+350VF5KZjMTyVtOF8Z
jb7Qf+KisVjARgpqVzPpBN/XypWy4ijY0Si3hwTGeuyMsXFA4BqZOSTwK9TFy3wa
ZMkOOZB8OYHyYGyExCObYSb9cz9OWrir+lEkLs2Segs+2Q20uMer6fqZDpe+2Fp9
JarLkKRSjOzMviUKZCeFC7cFo4N6DWvrhy/9O/rdV5mCpZ9CAO9qRurPwPEEN+7a
tEuOHc+nqy5yuxyVMKBxQzupftLQhizc8ArDNCq2mzIqkJhI89nhzYSzTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPdbTex5F57IUW0mmY6rxZzhUzMvMB8GA1UdIwQY
MBaAFN1SrQkLVGeOCWjmmVXCUElDTZbIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1ZLdENRdFVaNDRKYU9hWlZjSlFTVU5ObHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84MTgxNDItYzEzOC00NGJiLTkyMmIt
ZDMwNTczMGI1MzY4LzEvOTF0TjdIa1huc2hSYlNhWmpxdkZuT0ZUTXk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi84MTgxNDItYzEzOC00NGJiLTkyMmItZDMwNTczMGI1MzY4
LzEvM1ZLdENRdFVaNDRKYU9hWlZjSlFTVU5ObHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwy/VMA0G
CSqGSIb3DQEBCwUAA4IBAQAQgqnMdjJdx+eoctdb114BEIb8gjuydyeew+J8wu1k
ym0g/gYBbt71/JPyp739voCbWhZfvW0pES7YnTnNdV/9mOgWRwnEnmR7DwNu7jsy
YmwJfkeu986+aS1W2ah4UqI5cL4dcftvhIPm/TMjbB/1tIiRgIgQVUCMXVa+rrVy
AtaNhWOUdbsRZfW8hQIhDQ0KqvTke3ecXAWvqDKx7HsF8HPlIR9dYn7BF0jFOB2+
iRyb8MPNtyawUdJA7Y8Olo2RHIR8mHWy5XClr7SqAYEJv5hXNIy8Xo+8atk7463K
JJiFmF82OobbNQPKhp0WZMbxTIIUTI/auPgVnKdZjrF8
-----END CERTIFICATE-----
Generated at Sun May 19 05:58:21 2024 by rpki-client on console-fra.rpki-client.org