Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/XagqwPrphdMsiVC_zXhxpsJBdZ8.roa
File: XagqwPrphdMsiVC_zXhxpsJBdZ8.roa (raw, json)
Hash identifier: 2smiIlI1HkgEERC4EqKM99nTxEmfT2GOn6VzHXtGtYg=
Subject key identifier: 5D:A8:2A:C0:FA:E9:85:D3:2C:89:50:BF:CD:78:71:A6:C2:41:75:9F
Certificate issuer: /CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Certificate serial: 018CC2DAB6D44AD1C639CBD9378BE2355925
Authority key identifier: CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/XagqwPrphdMsiVC_zXhxpsJBdZ8.roa
Signing time: Mon 01 Jan 2024 02:29:22 +0000
ROA not before: Mon 01 Jan 2024 02:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197935
IP address blocks: 91.227.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b6:d4:4a:d1:c6:39:cb:d9:37:8b:e2:35:59:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Validity
Not Before: Jan 1 02:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5da82ac0fae985d32c8950bfcd7871a6c241759f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:11:06:5f:a0:14:c8:76:2c:3b:6d:37:20:
d6:fd:f5:10:bc:97:9b:b9:e1:fb:45:fb:6e:2f:98:
4b:63:d5:0f:b2:f6:69:66:03:00:7e:d3:ac:4b:89:
6b:56:66:d7:26:99:45:7d:ca:17:71:3a:ca:32:8d:
38:03:0b:33:ef:49:77:15:63:a7:7e:75:4d:11:6f:
1c:50:f0:cd:4c:d9:85:53:70:d2:06:e9:34:04:0f:
06:26:2b:d4:63:b5:36:ea:12:8b:22:e6:7c:b3:43:
f6:da:7c:6e:24:36:f5:9d:b8:d4:04:2b:64:63:c3:
9b:af:45:fd:9f:2e:17:27:0c:6d:ae:11:c8:4c:47:
76:c0:30:be:45:6b:3c:e1:bf:22:04:ac:09:12:77:
d2:04:fd:a5:61:a8:4f:40:a0:50:25:28:ba:82:98:
18:a5:78:94:02:b3:61:b9:14:0b:b1:88:50:84:da:
79:89:5d:fa:72:17:d6:41:69:15:50:da:4e:07:73:
95:ae:52:85:e1:25:66:63:69:66:d4:70:4e:48:be:
f8:81:76:8c:f5:29:14:e3:b7:f2:fe:41:d1:52:74:
45:72:01:57:98:bf:0d:37:82:33:f8:94:bc:bd:e9:
03:63:44:a9:e5:f2:ee:1c:f5:9c:11:68:d4:b2:50:
df:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A8:2A:C0:FA:E9:85:D3:2C:89:50:BF:CD:78:71:A6:C2:41:75:9F
X509v3 Authority Key Identifier:
keyid:CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/XagqwPrphdMsiVC_zXhxpsJBdZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.76.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b9:62:b7:28:7c:48:0a:f4:8b:33:ca:4e:16:92:de:2f:2f:
05:e6:4e:7a:95:40:00:9d:cc:ed:e0:0f:8d:89:5d:18:dc:40:
cb:94:e2:28:53:db:f6:10:d3:99:b9:de:ec:92:a5:1f:9c:88:
19:aa:25:d3:bd:a7:c7:aa:7f:45:94:70:af:6b:02:35:72:2f:
f3:f3:9c:b5:c1:3b:f4:7e:c2:ac:d5:44:bd:30:23:a3:f5:cd:
bf:4b:b4:2d:a5:6b:9f:93:9c:d5:09:46:21:ae:83:8b:38:a9:
03:68:a4:8f:24:d5:dc:01:36:c1:75:97:a5:10:65:b1:1b:6c:
00:72:b7:f0:2a:c8:81:04:ae:e6:55:48:57:78:ba:a3:85:ed:
6e:7e:24:ef:ad:fd:3e:12:96:1e:a3:61:3d:ba:f8:e2:de:ab:
dc:59:ba:91:a3:5f:8c:1f:08:f8:60:aa:e8:2d:9e:61:5f:b5:
9f:77:0a:d5:44:e7:70:b2:72:87:06:6f:dc:03:88:ee:64:18:
8b:29:b7:8e:89:6f:31:43:3e:64:93:2b:40:fc:8f:1e:f4:81:
18:fe:c3:75:c8:0d:c1:91:64:5a:06:12:dc:c3:66:13:e6:1b:
93:89:03:11:2c:03:38:e1:0b:1a:7d:90:4b:0f:b4:38:67:b4:
e3:eb:25:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2rbUStHGOcvZN4viNVklMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOWVhNTE2NzgwN2I3MDg1YjUxMzEwY2E2MGRiZjJiOTE5
ODJmYzcwHhcNMjQwMTAxMDIyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGE4MmFjMGZhZTk4NWQzMmM4OTUwYmZjZDc4NzFhNmMyNDE3NTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQkRBl+gFMh2LDttNyDW/fUQvJeb
ueH7RftuL5hLY9UPsvZpZgMAftOsS4lrVmbXJplFfcoXcTrKMo04Awsz70l3FWOn
fnVNEW8cUPDNTNmFU3DSBuk0BA8GJivUY7U26hKLIuZ8s0P22nxuJDb1nbjUBCtk
Y8Obr0X9ny4XJwxtrhHITEd2wDC+RWs84b8iBKwJEnfSBP2lYahPQKBQJSi6gpgY
pXiUArNhuRQLsYhQhNp5iV36chfWQWkVUNpOB3OVrlKF4SVmY2lm1HBOSL74gXaM
9SkU47fy/kHRUnRFcgFXmL8NN4Iz+JS8vekDY0Sp5fLuHPWcEWjUslDfUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF2oKsD66YXTLIlQv814cabCQXWfMB8GA1UdIwQY
MBaAFMqepRZ4B7cIW1ExDKYNvyuRmC/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXA2bEZuZ0h0d2hiVVRFTXBnMl9LNUdZTDhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iZTI1NDAtNDhiYi00YzY2LThiMjQt
Mjc0MWIzNmI3NWRlLzEvWGFncXdQcnBoZE1zaVZDX3pYaHhwc0pCZFo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9iZTI1NDAtNDhiYi00YzY2LThiMjQtMjc0MWIzNmI3NWRl
LzEveXA2bEZuZ0h0d2hiVVRFTXBnMl9LNUdZTDhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+NMMA0G
CSqGSIb3DQEBCwUAA4IBAQA8uWK3KHxICvSLM8pOFpLeLy8F5k56lUAAnczt4A+N
iV0Y3EDLlOIoU9v2ENOZud7skqUfnIgZqiXTvafHqn9FlHCvawI1ci/z85y1wTv0
fsKs1US9MCOj9c2/S7QtpWufk5zVCUYhroOLOKkDaKSPJNXcATbBdZelEGWxG2wA
crfwKsiBBK7mVUhXeLqjhe1ufiTvrf0+EpYeo2E9uvji3qvcWbqRo1+MHwj4YKro
LZ5hX7WfdwrVROdwsnKHBm/cA4juZBiLKbeOiW8xQz5kkytA/I8e9IEY/sN1yA3B
kWRaBhLcw2YT5huTiQMRLAM44QsafZBLD7Q4Z7Tj6yVR
-----END CERTIFICATE-----
Generated at Wed Jun 26 04:50:31 2024 by rpki-client on console-ams.rpki-client.org