Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/sAPaECvdQBTb2DPEf7SUkmj5TUY.roa
File: sAPaECvdQBTb2DPEf7SUkmj5TUY.roa (raw, json)
Hash identifier: kuzoThcgBY+wY6KjJNAqt0qjwRIPEzp0yNQSX255xhM=
Subject key identifier: B0:03:DA:10:2B:DD:40:14:DB:D8:33:C4:7F:B4:94:92:68:F9:4D:46
Certificate issuer: /CN=769a0ed13591d4b84ca79a8eb577226076651a14
Certificate serial: 018CC64B76394C0D53126E31B1479A754743
Authority key identifier: 76:9A:0E:D1:35:91:D4:B8:4C:A7:9A:8E:B5:77:22:60:76:65:1A:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/sAPaECvdQBTb2DPEf7SUkmj5TUY.roa
Signing time: Mon 01 Jan 2024 18:31:23 +0000
ROA not before: Mon 01 Jan 2024 18:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56743
IP address blocks: 91.223.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:76:39:4c:0d:53:12:6e:31:b1:47:9a:75:47:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=769a0ed13591d4b84ca79a8eb577226076651a14
Validity
Not Before: Jan 1 18:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b003da102bdd4014dbd833c47fb4949268f94d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:98:82:36:80:d3:88:a1:d6:3f:48:c0:d7:
ac:5f:61:92:3b:87:8d:7a:1b:56:a6:73:9e:1a:fe:
3d:69:f7:55:a9:40:e4:da:25:bb:4b:74:2b:5c:ba:
31:7d:9d:2f:e1:57:18:84:2b:cb:f3:6b:4d:bb:a4:
8f:3d:74:5c:20:f6:b9:4c:cd:6e:1e:4e:11:68:f6:
ab:78:bf:71:30:01:fb:f5:df:62:b9:b0:4b:88:04:
ba:49:0b:40:e0:25:3f:8e:f2:3b:af:c0:46:d0:7c:
19:a1:a6:76:1c:c8:21:60:f9:79:3b:b4:e7:92:68:
6c:eb:bf:f6:a6:35:49:a8:dd:da:27:8d:7a:e6:7e:
82:f6:f2:e8:14:3e:d1:30:3d:d9:97:e0:dc:ea:f0:
fe:2f:00:0c:0d:6c:a8:32:59:e9:fe:ea:10:02:b5:
8e:f2:49:ce:f8:ef:68:b2:a8:9c:0e:b3:64:5c:a3:
62:17:29:1f:02:7e:4d:4d:1e:27:c1:92:ce:86:19:
be:7f:0f:5a:89:66:7d:c0:c0:7c:c3:da:03:87:5d:
4c:9b:5a:bb:85:b1:92:cf:59:29:5c:a3:d8:a8:4f:
20:6f:ad:04:48:15:f6:b6:e2:0b:8f:b1:46:96:5f:
3c:6f:9d:e5:5f:0d:10:b2:5d:f5:f5:56:cf:26:2f:
50:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:03:DA:10:2B:DD:40:14:DB:D8:33:C4:7F:B4:94:92:68:F9:4D:46
X509v3 Authority Key Identifier:
keyid:76:9A:0E:D1:35:91:D4:B8:4C:A7:9A:8E:B5:77:22:60:76:65:1A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/sAPaECvdQBTb2DPEf7SUkmj5TUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.179.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:27:ee:e6:98:73:ce:53:39:47:ec:61:cb:15:3e:ec:77:b2:
78:b4:78:86:13:f3:f0:d5:87:4c:49:62:bd:d0:ab:a5:d6:60:
b4:c3:e2:d2:31:98:03:75:5b:ce:b4:2c:c5:c4:50:f3:ff:90:
df:b1:6c:1c:da:c5:33:0f:3a:86:32:52:8d:60:03:00:24:96:
62:7a:fd:aa:0b:c7:88:7e:a8:e6:b9:96:ef:cb:a3:82:9a:a2:
03:85:ba:e1:0d:83:38:f5:b3:c1:f1:7c:df:bb:1d:7d:64:16:
fc:6a:c7:5e:31:9c:80:53:3b:43:48:b7:d1:64:fb:fd:ff:54:
54:6b:89:73:2f:23:88:50:e8:9e:8a:65:53:96:5e:03:d3:b6:
53:bb:bb:81:6e:3e:a9:95:20:90:2c:32:d9:09:86:42:5a:07:
7b:b2:47:ad:30:55:d5:5b:48:5a:26:4f:2b:60:80:1f:4f:72:
62:8b:3c:0e:db:32:8e:d2:0e:79:12:f1:c4:92:00:72:c0:ab:
02:8f:98:63:ee:6a:7e:f5:93:90:b4:e0:b8:1e:03:db:66:ad:
b9:e8:d8:5d:71:a2:c6:da:29:a5:b7:74:19:46:e8:0f:1e:e3:
ba:a8:3d:2d:27:d5:e5:df:36:6a:f6:e0:49:67:51:b3:50:ff:
2f:4e:35:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGS3Y5TA1TEm4xsUeadUdDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2OWEwZWQxMzU5MWQ0Yjg0Y2E3OWE4ZWI1NzcyMjYwNzY2
NTFhMTQwHhcNMjQwMTAxMTgzMTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDAzZGExMDJiZGQ0MDE0ZGJkODMzYzQ3ZmI0OTQ5MjY4Zjk0ZDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7yYgjaA04ih1j9IwNesX2GSO4eN
ehtWpnOeGv49afdVqUDk2iW7S3QrXLoxfZ0v4VcYhCvL82tNu6SPPXRcIPa5TM1u
Hk4RaPareL9xMAH79d9iubBLiAS6SQtA4CU/jvI7r8BG0HwZoaZ2HMghYPl5O7Tn
kmhs67/2pjVJqN3aJ4165n6C9vLoFD7RMD3Zl+Dc6vD+LwAMDWyoMlnp/uoQArWO
8knO+O9osqicDrNkXKNiFykfAn5NTR4nwZLOhhm+fw9aiWZ9wMB8w9oDh11Mm1q7
hbGSz1kpXKPYqE8gb60ESBX2tuILj7FGll88b53lXw0Qsl319VbPJi9QqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLAD2hAr3UAU29gzxH+0lJJo+U1GMB8GA1UdIwQY
MBaAFHaaDtE1kdS4TKeajrV3ImB2ZRoUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHBvTzBUV1IxTGhNcDVxT3RYY2lZSFpsR2hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni82OGMwMDgtNjlkMy00MzZmLWFkMzMt
MmRiZTc4NTQyMmY4LzEvc0FQYUVDdmRRQlRiMkRQRWY3U1VrbWo1VFVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni82OGMwMDgtNjlkMy00MzZmLWFkMzMtMmRiZTc4NTQyMmY4
LzEvZHBvTzBUV1IxTGhNcDVxT3RYY2lZSFpsR2hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9+zMA0G
CSqGSIb3DQEBCwUAA4IBAQCeJ+7mmHPOUzlH7GHLFT7sd7J4tHiGE/Pw1YdMSWK9
0Kul1mC0w+LSMZgDdVvOtCzFxFDz/5DfsWwc2sUzDzqGMlKNYAMAJJZiev2qC8eI
fqjmuZbvy6OCmqIDhbrhDYM49bPB8Xzfux19ZBb8asdeMZyAUztDSLfRZPv9/1RU
a4lzLyOIUOieimVTll4D07ZTu7uBbj6plSCQLDLZCYZCWgd7sketMFXVW0haJk8r
YIAfT3JiizwO2zKO0g55EvHEkgBywKsCj5hj7mp+9ZOQtOC4HgPbZq256NhdcaLG
2imlt3QZRugPHuO6qD0tJ9Xl3zZq9uBJZ1GzUP8vTjX3
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:21:37 2024 by rpki-client on console-fra.rpki-client.org