Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/1hB8-5SbBQp9uBMjkAko4UTFi2I.roa
File: 1hB8-5SbBQp9uBMjkAko4UTFi2I.roa (raw, json)
Hash identifier: ySNhSFK285jz5BuwzJBv3vYAkMABZ7Ua2Muah/SQ+F4=
Subject key identifier: D6:10:7C:FB:94:9B:05:0A:7D:B8:13:23:90:09:28:E1:44:C5:8B:62
Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial: 018CC4933A3A209C9F95C8FEDD704345763A
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/1hB8-5SbBQp9uBMjkAko4UTFi2I.roa
Signing time: Mon 01 Jan 2024 10:30:32 +0000
ROA not before: Mon 01 Jan 2024 10:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5413
IP address blocks: 91.231.188.0/24 maxlen: 24
91.231.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 07:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:3a:3a:20:9c:9f:95:c8:fe:dd:70:43:45:76:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Validity
Not Before: Jan 1 10:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6107cfb949b050a7db81323900928e144c58b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9a:b8:aa:d3:5f:a4:e4:6f:6a:60:11:7e:1a:
7d:a9:fa:fe:7f:a9:ca:62:7f:8a:c0:4f:8d:98:ef:
3c:9f:83:ae:3e:3e:04:35:8b:01:d7:00:f0:60:73:
70:d5:89:29:45:eb:f7:b6:86:57:97:2f:e8:1d:c7:
46:cb:6b:27:c6:ef:fc:ba:85:99:6e:ac:14:51:75:
33:63:79:cb:98:7a:c3:76:18:1e:ce:87:26:f1:89:
53:09:77:96:a8:b9:17:59:46:c5:db:d9:e7:c0:7c:
2a:6f:a0:b1:25:3f:d6:b1:a7:01:96:15:c5:58:f0:
95:38:89:61:4f:26:c6:9c:2f:7b:ba:b0:87:de:b4:
eb:75:d0:07:ca:eb:9d:69:f6:a7:db:a2:62:c7:03:
9c:78:d3:ae:45:21:89:d0:57:01:5b:46:eb:4e:f8:
b1:ea:56:3f:94:84:8f:d1:ef:ff:f7:b9:1e:35:2f:
cc:a5:42:5a:29:66:82:9a:b0:ea:56:10:29:85:0b:
47:be:31:ef:87:0e:be:f1:be:99:31:2e:b6:f2:e4:
5c:e2:a8:68:15:db:6b:48:2b:55:cb:65:55:86:1d:
35:b6:ce:14:61:13:87:0c:c3:a2:79:03:f3:c4:06:
f1:9a:77:a9:aa:e2:5f:32:69:74:e5:c7:07:ef:7b:
da:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:10:7C:FB:94:9B:05:0A:7D:B8:13:23:90:09:28:E1:44:C5:8B:62
X509v3 Authority Key Identifier:
keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/1hB8-5SbBQp9uBMjkAko4UTFi2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.188.0/24
91.231.191.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:34:a8:14:46:b4:7a:a5:6a:c5:73:b7:f0:a8:e3:77:42:b1:
b7:aa:74:6a:7c:2e:64:21:09:d7:a7:0f:97:59:2a:20:74:25:
71:c5:ce:8d:10:f6:0f:9d:ab:1d:e3:e5:85:da:c8:99:e5:df:
ef:79:4f:0d:fa:cb:e1:87:93:23:1a:6f:36:da:0a:0a:18:45:
d4:89:41:bf:d4:16:b5:33:4c:dc:69:85:db:52:88:c8:7c:b6:
eb:76:33:b9:8d:4b:b1:82:2c:a1:1f:72:48:70:22:2d:90:97:
ba:22:26:32:2d:61:d2:c4:96:82:e5:04:4b:71:34:7b:ea:1a:
26:f9:69:fa:0f:1a:3d:4d:71:ae:0d:39:53:28:47:94:28:38:
9a:2a:6d:16:c3:94:bc:c1:67:dc:fd:1c:49:e9:1c:30:64:42:
56:c5:8b:08:17:ce:1c:d2:42:a3:9f:77:d0:e1:76:86:96:22:
f4:38:28:2c:2a:fc:c2:01:e7:4c:92:e9:9f:e7:e7:ea:a9:ca:
7f:88:c3:a2:4b:42:14:64:9d:96:99:3e:40:a1:89:84:68:ef:
68:7a:6e:4d:08:c8:71:0b:01:ef:4c:43:ba:c4:f2:65:c8:8a:
f7:43:5c:e2:c5:4f:c5:1d:19:9d:7b:54:63:b2:53:58:04:6f:
e2:ce:f0:5a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzEkzo6IJyflcj+3XBDRXY6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3
NmFlYjIwHhcNMjQwMTAxMTAzMDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjEwN2NmYjk0OWIwNTBhN2RiODEzMjM5MDA5MjhlMTQ0YzU4YjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5q4qtNfpORvamARfhp9qfr+f6nK
Yn+KwE+NmO88n4OuPj4ENYsB1wDwYHNw1YkpRev3toZXly/oHcdGy2snxu/8uoWZ
bqwUUXUzY3nLmHrDdhgezocm8YlTCXeWqLkXWUbF29nnwHwqb6CxJT/WsacBlhXF
WPCVOIlhTybGnC97urCH3rTrddAHyuudafan26JixwOceNOuRSGJ0FcBW0brTvix
6lY/lISP0e//97keNS/MpUJaKWaCmrDqVhAphQtHvjHvhw6+8b6ZMS628uRc4qho
FdtrSCtVy2VVhh01ts4UYROHDMOieQPzxAbxmnepquJfMml05ccH73vabwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNYQfPuUmwUKfbgTI5AJKOFExYtiMB8GA1UdIwQY
MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt
N2UwNWFkMDE5MGNlLzEvMWhCOC01U2JCUXA5dUJNamtBa280VVRGaTJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl
LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+e8AwQA
W+e/MA0GCSqGSIb3DQEBCwUAA4IBAQB8NKgURrR6pWrFc7fwqON3QrG3qnRqfC5k
IQnXpw+XWSogdCVxxc6NEPYPnasd4+WF2siZ5d/veU8N+svhh5MjGm822goKGEXU
iUG/1Ba1M0zcaYXbUojIfLbrdjO5jUuxgiyhH3JIcCItkJe6IiYyLWHSxJaC5QRL
cTR76hom+Wn6Dxo9TXGuDTlTKEeUKDiaKm0Ww5S8wWfc/RxJ6RwwZEJWxYsIF84c
0kKjn3fQ4XaGliL0OCgsKvzCAedMkumf5+fqqcp/iMOiS0IUZJ2WmT5AoYmEaO9o
em5NCMhxCwHvTEO6xPJlyIr3Q1zixU/FHRmde1RjslNYBG/izvBa
-----END CERTIFICATE-----
Generated at Mon Jul 1 15:51:43 2024 by rpki-client on console-fra.rpki-client.org