Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/sz41sl944gA7nc3ftfEabEbKfzA.roa
File: sz41sl944gA7nc3ftfEabEbKfzA.roa (raw, json)
Hash identifier: wEeQh2XWAPuKHpWujjLVJ6riJEtOHAoaBunxaQy6Zik=
Subject key identifier: B3:3E:35:B2:5F:78:E2:00:3B:9D:CD:DF:B5:F1:1A:6C:46:CA:7F:30
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018CC56E22F1F80590914E744B4E75472915
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/sz41sl944gA7nc3ftfEabEbKfzA.roa
Signing time: Mon 01 Jan 2024 14:29:38 +0000
ROA not before: Mon 01 Jan 2024 14:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212335
IP address blocks: 91.243.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:22:f1:f8:05:90:91:4e:74:4b:4e:75:47:29:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jan 1 14:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b33e35b25f78e2003b9dcddfb5f11a6c46ca7f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0e:24:3b:85:20:54:5f:d5:a0:49:15:ae:f5:
54:3c:c8:0f:0f:bc:db:21:05:ed:0a:1c:58:4e:a9:
84:62:25:70:a6:cf:a7:84:f8:97:ea:50:5d:c2:4f:
1e:7a:1a:76:4f:53:65:00:0e:b1:b4:07:71:73:e4:
dd:ac:8a:f1:51:48:2f:42:e3:20:9d:75:4b:03:c8:
dc:1a:94:f4:ba:3f:6c:38:10:6b:5c:7e:a0:88:12:
1a:40:84:19:6d:b9:b9:a1:6a:64:60:97:54:46:e9:
f3:0a:f2:6f:6e:96:47:91:78:f3:dd:e7:cf:c4:dc:
5c:17:12:e9:2e:0a:ca:66:b9:a2:6e:c1:ac:37:d0:
68:0b:5d:13:a0:a8:20:fb:ec:b3:e3:81:08:9a:7b:
72:06:6a:b4:1e:99:eb:e6:74:cc:d1:8a:ac:df:9e:
aa:a3:40:7a:67:b4:f6:90:02:27:ed:f4:b9:d4:20:
91:b4:80:1b:de:b2:e4:16:eb:0c:76:df:21:84:ed:
d9:c8:fb:f3:16:d4:95:df:8b:0a:e5:c2:26:f4:a4:
fe:17:a6:3e:32:26:46:c5:23:dd:d2:a9:0c:92:75:
6e:12:eb:18:cf:0f:4c:12:f5:75:d3:7d:6b:c8:af:
64:92:50:cb:b4:19:96:de:5a:6e:85:08:48:e1:57:
72:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3E:35:B2:5F:78:E2:00:3B:9D:CD:DF:B5:F1:1A:6C:46:CA:7F:30
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/sz41sl944gA7nc3ftfEabEbKfzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.178.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:5b:c0:91:2e:b2:d6:e2:58:34:f3:5e:a5:3f:9c:23:63:37:
29:a6:80:36:64:2f:9c:ee:8e:de:61:6b:67:65:83:15:4d:b7:
1d:4d:da:77:5c:9f:bc:be:d1:35:c5:42:02:d4:d9:88:58:a2:
39:ca:05:80:62:20:12:72:69:e4:2a:89:5c:60:11:96:55:55:
9c:9f:49:0e:d3:c7:4a:96:f6:79:29:88:98:2b:b8:9e:bd:b6:
c1:92:a4:35:01:b3:2d:b3:d9:2b:4a:26:fb:22:da:57:cb:86:
33:3c:fa:f7:bd:17:b3:e7:ab:8b:6c:6a:8e:d8:42:6e:d1:0a:
95:65:4c:a2:7d:26:13:08:43:8c:c6:fd:6c:9b:b7:ba:34:8e:
44:3a:56:95:98:d3:a8:20:cc:5a:7e:1f:22:e3:cd:3a:ba:df:
04:f1:44:91:8d:94:6d:56:4b:17:2d:2b:8c:e0:86:a9:d7:b1:
7c:5b:57:20:d8:71:e4:17:34:fc:de:14:01:1e:5c:37:b5:e8:
0e:e9:5e:02:a0:57:44:8f:25:15:62:66:3c:1a:c0:6f:31:34:
84:86:31:c5:d0:e3:e7:8b:a8:e6:ad:b3:61:0e:be:61:0e:e0:
45:c6:1d:32:e9:42:f0:ab:5d:3d:18:f3:7c:59:59:cc:b1:c5:
ea:a4:e7:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbiLx+AWQkU50S051RykVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1
YmE2ODEwHhcNMjQwMTAxMTQyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzNlMzViMjVmNzhlMjAwM2I5ZGNkZGZiNWYxMWE2YzQ2Y2E3ZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg4kO4UgVF/VoEkVrvVUPMgPD7zb
IQXtChxYTqmEYiVwps+nhPiX6lBdwk8eehp2T1NlAA6xtAdxc+TdrIrxUUgvQuMg
nXVLA8jcGpT0uj9sOBBrXH6giBIaQIQZbbm5oWpkYJdURunzCvJvbpZHkXjz3efP
xNxcFxLpLgrKZrmibsGsN9BoC10ToKgg++yz44EImntyBmq0Hpnr5nTM0Yqs356q
o0B6Z7T2kAIn7fS51CCRtIAb3rLkFusMdt8hhO3ZyPvzFtSV34sK5cIm9KT+F6Y+
MiZGxSPd0qkMknVuEusYzw9MEvV1031ryK9kklDLtBmW3lpuhQhI4VdymwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLM+NbJfeOIAO53N37XxGmxGyn8wMB8GA1UdIwQY
MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt
YTg3NzNkZTc2OGY3LzEvc3o0MXNsOTQ0Z0E3bmMzZnRmRWFiRWJLZnpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3
LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/OyMA0G
CSqGSIb3DQEBCwUAA4IBAQCNW8CRLrLW4lg0816lP5wjYzcppoA2ZC+c7o7eYWtn
ZYMVTbcdTdp3XJ+8vtE1xUIC1NmIWKI5ygWAYiAScmnkKolcYBGWVVWcn0kO08dK
lvZ5KYiYK7ievbbBkqQ1AbMts9krSib7ItpXy4YzPPr3vRez56uLbGqO2EJu0QqV
ZUyifSYTCEOMxv1sm7e6NI5EOlaVmNOoIMxafh8i4806ut8E8USRjZRtVksXLSuM
4Iap17F8W1cg2HHkFzT83hQBHlw3tegO6V4CoFdEjyUVYmY8GsBvMTSEhjHF0OPn
i6jmrbNhDr5hDuBFxh0y6ULwq109GPN8WVnMscXqpOdu
-----END CERTIFICATE-----
Generated at Thu May 2 18:21:51 2024 by rpki-client on console-fra.rpki-client.org