Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/grW0VjOUxJOsPGC_DkEveZ6FuD8.roa
File: grW0VjOUxJOsPGC_DkEveZ6FuD8.roa (raw, json)
Hash identifier: 4wFAA3Klt2IABPrvkjBj7mOCsKvnEqBCKviA6jwI5I8=
Subject key identifier: 82:B5:B4:56:33:94:C4:93:AC:3C:60:BF:0E:41:2F:79:9E:85:B8:3F
Certificate issuer: /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Certificate serial: 018CCA29B2D24398093313132C018F458B5B
Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/grW0VjOUxJOsPGC_DkEveZ6FuD8.roa
Signing time: Tue 02 Jan 2024 12:32:58 +0000
ROA not before: Tue 02 Jan 2024 12:32:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203397
IP address blocks: 91.226.85.0/24 maxlen: 24
91.226.84.0/24 maxlen: 24
91.226.84.0/22 maxlen: 24
91.226.87.0/24 maxlen: 24
91.226.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:b2:d2:43:98:09:33:13:13:2c:01:8f:45:8b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Validity
Not Before: Jan 2 12:32:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82b5b4563394c493ac3c60bf0e412f799e85b83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bc:b5:de:48:a4:67:f2:bb:95:b2:4f:6d:bd:
8a:3f:88:1c:21:ac:93:d9:91:8a:3b:9e:37:37:25:
40:59:ee:9d:93:e1:5d:58:30:21:09:d5:d9:90:e3:
79:2b:5f:57:f0:87:b9:df:33:03:9e:f5:6e:55:17:
1c:35:d0:1f:0c:53:68:d3:a1:01:b5:92:2f:06:06:
0a:6f:bf:f0:6d:51:42:21:8b:b2:43:80:75:93:34:
37:08:bd:f8:a5:3c:cf:58:9a:e3:2c:a6:0d:87:7b:
fa:cd:5b:9a:df:ad:90:cc:62:ea:b5:a4:d9:2a:90:
ee:52:c7:6e:c4:37:44:86:ed:7c:b1:80:04:bd:39:
c2:2e:39:d7:f5:95:c2:33:69:af:8c:38:a5:19:38:
21:f4:e8:35:75:f3:3e:1d:e2:ff:51:5e:d2:db:af:
d5:8e:83:16:21:1f:e8:37:a5:3a:80:d1:17:83:d4:
07:8a:49:06:a1:de:2f:58:34:dc:4e:1f:86:9d:43:
c8:04:43:20:ac:f4:94:09:69:28:8c:9a:bb:47:b3:
fb:ea:d4:ac:df:c8:24:c4:2f:48:06:51:4d:61:4a:
b7:63:2e:13:4b:ec:09:26:ed:d9:54:57:68:fa:87:
59:38:b4:84:1d:3f:d6:f5:24:b0:5f:48:65:be:93:
18:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B5:B4:56:33:94:C4:93:AC:3C:60:BF:0E:41:2F:79:9E:85:B8:3F
X509v3 Authority Key Identifier:
keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/grW0VjOUxJOsPGC_DkEveZ6FuD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.84.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:5a:e8:99:5a:73:58:4e:87:22:0f:60:7e:20:e4:f8:a8:bf:
a0:cc:b6:92:61:b5:5b:ee:60:1e:68:44:a9:c2:79:cf:11:b6:
16:a3:c4:bb:04:10:fc:9d:ae:7b:e7:36:03:12:1a:5f:28:75:
c8:29:c7:aa:11:0b:3e:80:f6:6a:5d:af:7f:ed:d7:04:34:9a:
61:a0:d0:41:89:c0:6b:60:96:85:2c:22:4b:11:81:48:09:87:
33:00:72:4f:83:1c:da:a0:44:9b:57:62:c9:f9:3e:5a:92:fa:
b0:11:1e:66:2c:77:84:c9:da:df:5b:6f:cb:25:b8:f4:ed:7e:
32:9a:a2:cf:40:c5:bd:c4:66:83:54:cc:f5:e6:be:8e:01:a5:
83:4d:d5:d2:37:bc:d3:d6:fa:d3:b4:7c:97:71:c3:a1:91:d5:
7f:01:82:61:c7:a8:0f:5f:e9:14:7b:8d:35:f3:81:c7:b1:7c:
5b:09:2d:e2:af:e4:48:37:bf:f9:41:95:b9:a3:ed:73:22:7d:
71:7a:4f:ae:8a:f6:63:ca:e6:b2:4b:18:fc:fc:3e:0a:db:a5:
a8:11:57:02:23:0f:42:ce:f8:88:89:07:ca:e1:51:fc:44:35:
e7:d6:1d:b5:f9:b6:38:c5:7c:f1:e8:bc:bf:b0:5c:40:e3:df:
b2:4f:7f:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKbLSQ5gJMxMTLAGPRYtbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZjdhYjQ1ODdlNjkwMjJlNWUyYmMyNDEwN2I1MDFkMDMx
YzM3MjAwHhcNMjQwMTAyMTIzMjU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmI1YjQ1NjMzOTRjNDkzYWMzYzYwYmYwZTQxMmY3OTllODViODNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxry13kikZ/K7lbJPbb2KP4gcIayT
2ZGKO543NyVAWe6dk+FdWDAhCdXZkON5K19X8Ie53zMDnvVuVRccNdAfDFNo06EB
tZIvBgYKb7/wbVFCIYuyQ4B1kzQ3CL34pTzPWJrjLKYNh3v6zVua362QzGLqtaTZ
KpDuUsduxDdEhu18sYAEvTnCLjnX9ZXCM2mvjDilGTgh9Og1dfM+HeL/UV7S26/V
joMWIR/oN6U6gNEXg9QHikkGod4vWDTcTh+GnUPIBEMgrPSUCWkojJq7R7P76tSs
38gkxC9IBlFNYUq3Yy4TS+wJJu3ZVFdo+odZOLSEHT/W9SSwX0hlvpMYUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIK1tFYzlMSTrDxgvw5BL3mehbg/MB8GA1UdIwQY
MBaAFPT3q0WH5pAi5eK8JBB7UB0DHDcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVBlclJZZm1rQ0xsNHJ3a0VIdFFIUU1jTnlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83N2Y0ZjAtYjgzMy00N2I3LWEzYzct
ZWY3MTBlYzdiMmZlLzEvZ3JXMFZqT1V4Sk9zUEdDX0RrRXZlWjZGdUQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83N2Y0ZjAtYjgzMy00N2I3LWEzYzctZWY3MTBlYzdiMmZl
LzEvOVBlclJZZm1rQ0xsNHJ3a0VIdFFIUU1jTnlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+JUMA0G
CSqGSIb3DQEBCwUAA4IBAQCOWuiZWnNYTociD2B+IOT4qL+gzLaSYbVb7mAeaESp
wnnPEbYWo8S7BBD8na575zYDEhpfKHXIKceqEQs+gPZqXa9/7dcENJphoNBBicBr
YJaFLCJLEYFICYczAHJPgxzaoESbV2LJ+T5akvqwER5mLHeEydrfW2/LJbj07X4y
mqLPQMW9xGaDVMz15r6OAaWDTdXSN7zT1vrTtHyXccOhkdV/AYJhx6gPX+kUe401
84HHsXxbCS3ir+RIN7/5QZW5o+1zIn1xek+uivZjyuaySxj8/D4K26WoEVcCIw9C
zviIiQfK4VH8RDXn1h21+bY4xXzx6Ly/sFxA49+yT38e
-----END CERTIFICATE-----
Generated at Sat May 18 05:50:28 2024 by rpki-client on console-ams.rpki-client.org