Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/bBuVYBCH2oXTmGwBNG-wVskeY60.roa
File: bBuVYBCH2oXTmGwBNG-wVskeY60.roa (raw, json)
Hash identifier: UIe1W2QoITm1cpfcefECIJ7cfQNl3b3Syhw3eIn4PAk=
Subject key identifier: 6C:1B:95:60:10:87:DA:85:D3:98:6C:01:34:6F:B0:56:C9:1E:63:AD
Certificate issuer: /CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Certificate serial: 018CC42544ED4FD0A5BB9F78BF33DE483649
Authority key identifier: 24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/bBuVYBCH2oXTmGwBNG-wVskeY60.roa
Signing time: Mon 01 Jan 2024 08:30:25 +0000
ROA not before: Mon 01 Jan 2024 08:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21449
IP address blocks: 91.217.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:44:ed:4f:d0:a5:bb:9f:78:bf:33:de:48:36:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Validity
Not Before: Jan 1 08:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c1b95601087da85d3986c01346fb056c91e63ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:61:55:c2:67:75:ce:46:d6:ed:3f:0d:11:
70:7c:ef:8b:0b:61:6c:2b:c3:13:4a:f4:e2:9e:cb:
ac:01:20:58:5f:57:56:ec:3b:98:41:b1:d7:12:9f:
04:b5:56:9b:3b:6f:58:28:9f:66:42:00:17:4e:91:
67:18:a4:3d:ac:ad:1d:ec:77:4f:7d:db:d7:d0:05:
81:d7:ba:8c:ba:2b:71:dc:13:38:82:36:e6:1a:b4:
2f:cb:36:3c:3d:e4:4d:12:3b:f2:8d:97:7e:09:f1:
82:97:2c:18:f5:c2:b4:a2:b9:0f:c0:e7:1d:c9:7d:
aa:97:81:e5:80:89:58:2d:08:be:6f:39:f6:39:ec:
cd:1d:81:e7:75:db:4f:9b:4d:98:67:0c:b2:f6:ba:
8a:74:0f:a6:d6:57:0c:00:46:33:58:c7:23:e7:0c:
3c:c3:8f:f7:1e:f8:e8:37:b6:25:da:3e:25:31:24:
45:58:c4:3c:f4:7a:bb:20:7d:eb:82:c0:44:cc:03:
74:f4:97:61:f0:83:d6:12:61:1f:33:78:97:5d:19:
61:fd:21:53:d3:e1:ff:a8:bd:64:ad:0b:71:c9:8f:
86:c1:48:e3:2d:93:48:b0:d2:ed:26:2a:67:f7:1f:
9f:ae:a7:aa:35:b9:6d:dc:ec:33:95:ad:0d:a3:55:
dc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1B:95:60:10:87:DA:85:D3:98:6C:01:34:6F:B0:56:C9:1E:63:AD
X509v3 Authority Key Identifier:
keyid:24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/bBuVYBCH2oXTmGwBNG-wVskeY60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.128.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:77:76:b8:3a:fa:bc:04:2e:48:6f:37:12:2e:a8:32:0f:36:
a5:08:23:36:99:66:a4:47:58:fc:3a:b9:94:1b:3b:2c:1c:18:
cc:5e:62:71:5a:e5:0b:35:8a:26:f3:df:84:74:7f:e8:f3:e5:
17:e7:41:08:ed:5f:fe:79:f9:08:05:aa:36:45:78:1c:0e:52:
e6:d2:a5:44:a5:42:0e:a5:35:83:5e:60:7d:e5:2d:2e:31:a6:
96:f9:aa:97:f1:da:86:cb:03:0f:a5:b2:56:36:f8:11:5e:8c:
46:df:f8:9a:08:43:17:b5:ed:e3:7a:bb:b0:39:d4:77:8f:71:
0a:83:1b:bb:a4:dc:49:2c:ee:48:d5:0e:0a:37:6b:d6:b1:62:
d7:74:32:5f:1c:19:7a:e0:12:4c:6e:e2:0e:2b:53:1b:12:a7:
13:7d:52:7c:6b:81:2b:70:6b:10:8d:54:e6:4f:5b:23:5d:22:
d4:34:ca:98:22:a9:a7:9e:0d:6c:5b:6e:fc:ef:98:ef:07:05:
83:1f:ec:12:c3:17:88:79:f9:60:b0:f0:0e:7b:ca:97:aa:c4:
32:bf:e5:9f:8e:a3:47:4a:9b:cd:18:07:9a:68:5f:5b:f2:c1:
e9:1b:c7:e9:2d:04:1f:db:d5:85:34:00:a4:84:9d:09:d6:3e:
6c:d0:15:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJUTtT9Clu594vzPeSDZJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDI4MDdlYWUyNmE2N2QzZWJjMjVlZDUwZmZlNTQzNGJj
NjZjNTIwHhcNMjQwMTAxMDgzMDI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzFiOTU2MDEwODdkYTg1ZDM5ODZjMDEzNDZmYjA1NmM5MWU2M2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE9hVcJndc5G1u0/DRFwfO+LC2Fs
K8MTSvTinsusASBYX1dW7DuYQbHXEp8EtVabO29YKJ9mQgAXTpFnGKQ9rK0d7HdP
fdvX0AWB17qMuitx3BM4gjbmGrQvyzY8PeRNEjvyjZd+CfGClywY9cK0orkPwOcd
yX2ql4HlgIlYLQi+bzn2OezNHYHnddtPm02YZwyy9rqKdA+m1lcMAEYzWMcj5ww8
w4/3HvjoN7Yl2j4lMSRFWMQ89Hq7IH3rgsBEzAN09Jdh8IPWEmEfM3iXXRlh/SFT
0+H/qL1krQtxyY+GwUjjLZNIsNLtJipn9x+frqeqNblt3Owzla0No1XcPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGwblWAQh9qF05hsATRvsFbJHmOtMB8GA1UdIwQY
MBaAFCTSgH6uJqZ9Prwl7VD/5UNLxmxSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lNTM0NGQtNWVjMy00MGVlLTg2MTIt
Zjk5YTNkZDk5ODI2LzEvYkJ1VllCQ0gyb1hUbUd3Qk5HLXdWc2tlWTYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9lNTM0NGQtNWVjMy00MGVlLTg2MTItZjk5YTNkZDk5ODI2
LzEvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9mAMA0G
CSqGSIb3DQEBCwUAA4IBAQCjd3a4Ovq8BC5IbzcSLqgyDzalCCM2mWakR1j8OrmU
GzssHBjMXmJxWuULNYom89+EdH/o8+UX50EI7V/+efkIBao2RXgcDlLm0qVEpUIO
pTWDXmB95S0uMaaW+aqX8dqGywMPpbJWNvgRXoxG3/iaCEMXte3jeruwOdR3j3EK
gxu7pNxJLO5I1Q4KN2vWsWLXdDJfHBl64BJMbuIOK1MbEqcTfVJ8a4ErcGsQjVTm
T1sjXSLUNMqYIqmnng1sW27875jvBwWDH+wSwxeIeflgsPAOe8qXqsQyv+WfjqNH
SpvNGAeaaF9b8sHpG8fpLQQf29WFNACkhJ0J1j5s0BXp
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:18:48 2024 by rpki-client on console-fra.rpki-client.org