Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/AcbtCpkeifKVOqAmc3abPlNBcnU.roa
File: AcbtCpkeifKVOqAmc3abPlNBcnU.roa (raw, json)
Hash identifier: UqtYT3ct7MBJJ18t4PNMtydmsIoHfWhqOCweV21ggVc=
Subject key identifier: 01:C6:ED:0A:99:1E:89:F2:95:3A:A0:26:73:76:9B:3E:53:41:72:75
Certificate issuer: /CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
Certificate serial: 018CC8DF24A4190EDC9A837BF2B981DD3797
Authority key identifier: 1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/AcbtCpkeifKVOqAmc3abPlNBcnU.roa
Signing time: Tue 02 Jan 2024 06:31:56 +0000
ROA not before: Tue 02 Jan 2024 06:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43887
IP address blocks: 91.198.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:24:a4:19:0e:dc:9a:83:7b:f2:b9:81:dd:37:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
Validity
Not Before: Jan 2 06:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01c6ed0a991e89f2953aa02673769b3e53417275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:2e:fe:bd:e3:b0:27:c7:65:85:4e:5d:ff:
8a:b3:b8:05:30:ef:b0:e5:7d:5f:a1:14:88:c6:23:
2a:68:be:5d:ab:32:e4:79:31:f7:fb:d4:41:f1:80:
f7:fd:74:ab:93:e6:5d:d4:80:86:e2:13:6d:99:5d:
c3:6d:f2:0d:ee:6e:54:83:3f:29:5e:80:77:62:6f:
04:09:67:47:27:52:6b:b1:ae:8b:6e:52:0a:70:20:
c3:2c:00:48:4b:f8:da:5e:5c:1a:93:7f:29:34:7f:
fc:86:28:91:74:03:08:a5:b3:2d:28:62:32:d1:eb:
af:f7:b4:92:c3:af:9b:d9:fc:6c:77:60:b0:a6:28:
f7:65:99:fd:89:56:c4:9e:05:6f:da:83:7e:bc:43:
c0:a0:fa:b3:fc:4a:7b:49:3b:50:60:62:fb:27:33:
ce:e4:15:8e:1b:55:21:29:30:c9:d3:30:e3:49:92:
65:b2:6b:4f:5a:83:d2:cc:eb:33:e2:64:71:f9:82:
8f:01:e9:2d:42:c3:e6:13:08:b8:21:af:db:04:db:
7b:6b:0c:b9:99:8f:86:5a:49:68:f4:28:dd:4a:fa:
09:3f:16:d2:f7:b8:1d:2e:48:8e:b8:d6:31:54:d7:
8b:5a:f0:00:07:b1:97:91:a5:9a:cf:f1:70:ea:d1:
a6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C6:ED:0A:99:1E:89:F2:95:3A:A0:26:73:76:9B:3E:53:41:72:75
X509v3 Authority Key Identifier:
keyid:1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/AcbtCpkeifKVOqAmc3abPlNBcnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.182.0/24
Signature Algorithm: sha256WithRSAEncryption
61:61:ec:bf:ed:49:cc:bf:9a:3c:ac:4f:da:73:64:2d:28:12:
3b:e5:15:dd:5a:b7:54:f7:44:55:5f:61:b3:48:d7:e5:a8:10:
b1:e8:f2:ee:7a:d6:bd:0b:27:ff:f0:6a:60:b8:cc:be:7b:5b:
0f:9c:73:9d:db:d3:06:99:9e:d5:7b:20:d4:2e:ef:bf:7a:ba:
5e:d6:75:31:2a:f0:75:d7:31:a6:1d:62:a2:80:3f:41:b1:27:
89:79:7e:2b:b8:1a:89:f5:88:43:8f:cc:f7:72:24:d6:40:2e:
66:23:bd:18:73:33:8c:ff:0d:c4:eb:9b:5f:92:47:18:4c:a3:
24:1b:65:0d:c5:d9:6e:cb:c2:cb:40:04:59:25:f2:38:77:19:
05:3a:df:47:3e:0f:3a:04:72:5a:f7:19:9c:e1:c7:91:5c:a6:
85:05:9d:a0:0b:d1:c5:d1:13:38:28:9d:07:fc:24:9c:9e:df:
7e:bb:a6:3a:4a:27:58:08:b3:b3:47:b1:b4:c9:b4:b9:db:4e:
06:b5:5a:2f:2e:0b:76:5e:21:2c:0b:83:57:31:4e:1a:6b:98:
b5:e1:58:2f:8b:40:92:7a:b7:bb:b1:13:fb:c9:c5:ed:d1:72:
7c:f9:6a:8f:f0:b3:1a:57:30:df:48:91:87:2d:47:c4:4c:da:
44:d9:8d:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3ySkGQ7cmoN78rmB3TeXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTg5NTUxMjhiY2JjNzY5M2ViMWE5MzdmZjI4YjQwZWIz
NDQ4YTAwHhcNMjQwMTAyMDYzMTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWM2ZWQwYTk5MWU4OWYyOTUzYWEwMjY3Mzc2OWIzZTUzNDE3Mjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4Eu/r3jsCfHZYVOXf+Ks7gFMO+w
5X1foRSIxiMqaL5dqzLkeTH3+9RB8YD3/XSrk+Zd1ICG4hNtmV3DbfIN7m5Ugz8p
XoB3Ym8ECWdHJ1Jrsa6LblIKcCDDLABIS/jaXlwak38pNH/8hiiRdAMIpbMtKGIy
0euv97SSw6+b2fxsd2Cwpij3ZZn9iVbEngVv2oN+vEPAoPqz/Ep7STtQYGL7JzPO
5BWOG1UhKTDJ0zDjSZJlsmtPWoPSzOsz4mRx+YKPAektQsPmEwi4Ia/bBNt7awy5
mY+GWklo9CjdSvoJPxbS97gdLkiOuNYxVNeLWvAAB7GXkaWaz/Fw6tGmsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAHG7QqZHonylTqgJnN2mz5TQXJ1MB8GA1UdIwQY
MBaAFByYlVEovLx2k+sak3/yi0DrNEigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEppVlVTaTh2SGFUNnhxVGZfS0xRT3MwU0tBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83Yzg3MWQtODUzZS00YTJkLWE4ZDQt
YmY4MTNjZjA4MWI3LzEvQWNidENwa2VpZktWT3FBbWMzYWJQbE5CY25VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83Yzg3MWQtODUzZS00YTJkLWE4ZDQtYmY4MTNjZjA4MWI3
LzEvSEppVlVTaTh2SGFUNnhxVGZfS0xRT3MwU0tBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8a2MA0G
CSqGSIb3DQEBCwUAA4IBAQBhYey/7UnMv5o8rE/ac2QtKBI75RXdWrdU90RVX2Gz
SNflqBCx6PLueta9Cyf/8GpguMy+e1sPnHOd29MGmZ7VeyDULu+/erpe1nUxKvB1
1zGmHWKigD9BsSeJeX4ruBqJ9YhDj8z3ciTWQC5mI70YczOM/w3E65tfkkcYTKMk
G2UNxdluy8LLQARZJfI4dxkFOt9HPg86BHJa9xmc4ceRXKaFBZ2gC9HF0RM4KJ0H
/CScnt9+u6Y6SidYCLOzR7G0ybS5204GtVovLgt2XiEsC4NXMU4aa5i14Vgvi0CS
ere7sRP7ycXt0XJ8+WqP8LMaVzDfSJGHLUfETNpE2Y1F
-----END CERTIFICATE-----
Generated at Wed May 15 18:10:58 2024 by rpki-client on console-fra.rpki-client.org