Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c8585a-cdf7-4aa3-bc21-212acc4351ff/1/bZE4c_oXKIvuo5-8McUDQDJfCWE.roa
File: bZE4c_oXKIvuo5-8McUDQDJfCWE.roa (raw, json)
Hash identifier: ZhLf1X5Wj0Wf163nYfb+jwjY1rMBjwD0SgJaHW9s1jI=
Subject key identifier: 6D:91:38:73:FA:17:28:8B:EE:A3:9F:BC:31:C5:03:40:32:5F:09:61
Certificate issuer: /CN=1f31120fe225775eb53152d4920e9c573ff2b65e
Certificate serial: 018CC5DC98F9A8FAA89ED36A6FFF984CC3A7
Authority key identifier: 1F:31:12:0F:E2:25:77:5E:B5:31:52:D4:92:0E:9C:57:3F:F2:B6:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzESD-Ild161MVLUkg6cVz_ytl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c8585a-cdf7-4aa3-bc21-212acc4351ff/1/bZE4c_oXKIvuo5-8McUDQDJfCWE.roa
Signing time: Mon 01 Jan 2024 16:30:17 +0000
ROA not before: Mon 01 Jan 2024 16:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198716
IP address blocks: 91.236.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c8585a-cdf7-4aa3-bc21-212acc4351ff/1/HzESD-Ild161MVLUkg6cVz_ytl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c8585a-cdf7-4aa3-bc21-212acc4351ff/1/HzESD-Ild161MVLUkg6cVz_ytl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzESD-Ild161MVLUkg6cVz_ytl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:98:f9:a8:fa:a8:9e:d3:6a:6f:ff:98:4c:c3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f31120fe225775eb53152d4920e9c573ff2b65e
Validity
Not Before: Jan 1 16:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d913873fa17288beea39fbc31c50340325f0961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:33:2e:18:46:25:16:c1:05:61:fd:e7:1d:72:
b7:9e:34:81:c0:43:43:fe:55:dd:71:21:ba:f4:24:
ac:28:cb:7f:56:97:ba:c5:90:b6:89:3d:83:a4:3d:
c9:25:b5:1d:59:b8:75:aa:65:fb:13:f2:0d:a8:9a:
a5:a0:5e:60:31:08:0a:86:2a:1b:11:1f:7c:6f:bb:
dd:a4:07:7e:3f:e4:e6:7e:65:81:e2:05:b0:b1:fb:
fe:b7:64:23:8f:01:d9:ff:9c:05:47:d9:ed:46:99:
fe:84:d6:72:ce:bf:6a:6a:1f:01:68:16:af:be:8e:
57:ef:c1:09:ca:ba:9e:e4:56:4b:04:b6:73:65:2d:
80:d5:f7:90:50:05:e5:7b:d4:bb:25:62:56:55:cc:
c2:1c:33:0d:30:d3:8f:b9:c4:e2:91:60:e4:de:bf:
a3:9e:6b:b8:99:b9:73:53:4e:e0:80:70:50:ea:42:
dd:a6:d2:e8:01:f4:1e:92:c7:7f:d2:76:67:d7:36:
84:2c:ac:d3:08:c3:35:a4:ea:3f:cb:82:62:b5:d3:
93:ba:af:a4:d5:6f:53:79:cc:70:b1:7b:c5:6b:fe:
75:46:f3:16:ed:98:5d:35:a4:74:15:35:dd:00:4e:
90:ca:c3:c2:98:84:44:e6:fa:e2:1e:ee:23:88:67:
67:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:91:38:73:FA:17:28:8B:EE:A3:9F:BC:31:C5:03:40:32:5F:09:61
X509v3 Authority Key Identifier:
keyid:1F:31:12:0F:E2:25:77:5E:B5:31:52:D4:92:0E:9C:57:3F:F2:B6:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzESD-Ild161MVLUkg6cVz_ytl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c8585a-cdf7-4aa3-bc21-212acc4351ff/1/bZE4c_oXKIvuo5-8McUDQDJfCWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c8585a-cdf7-4aa3-bc21-212acc4351ff/1/HzESD-Ild161MVLUkg6cVz_ytl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.235.0/24
Signature Algorithm: sha256WithRSAEncryption
16:ee:1d:48:eb:f3:67:1a:16:f5:5e:8b:4e:d5:3e:88:30:55:
4f:6e:1e:53:4b:22:b8:fb:1d:64:66:2b:dd:06:e6:e8:10:05:
30:eb:cd:7c:b1:7f:44:5f:23:56:1c:36:db:c2:5c:58:c6:81:
f9:c5:3e:ea:65:3d:6b:8c:1b:3f:c1:f9:26:31:df:21:3b:ac:
a0:36:03:6f:d9:39:23:23:81:9e:5d:1f:77:28:13:db:e5:91:
f9:cb:11:d1:df:df:4f:5e:11:be:35:12:39:2f:02:a4:de:ce:
14:45:d9:de:4b:60:63:fd:0c:ba:34:1c:f7:96:45:c7:7b:a1:
20:a3:1c:2f:e9:25:ec:dc:62:00:33:cf:28:b6:26:4a:da:52:
f0:d7:ab:21:55:2d:f1:65:d8:f3:81:86:d2:c2:e5:ab:1c:dd:
47:a2:e4:ba:6d:bc:0a:4d:6a:76:be:02:d8:c2:d7:b5:97:2e:
48:25:25:6c:78:bf:7a:2a:80:13:52:6f:1a:1a:15:77:35:f0:
d1:7f:0e:71:bd:f8:d1:f1:da:d1:7d:0b:95:04:27:19:98:32:
73:40:6f:c5:16:27:26:a1:f8:9e:75:dc:29:e4:df:cc:f8:7c:
5c:2a:14:4f:30:c6:cb:18:26:45:67:92:8e:1f:05:3b:71:1d:
1b:98:75:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3Jj5qPqontNqb/+YTMOnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMzExMjBmZTIyNTc3NWViNTMxNTJkNDkyMGU5YzU3M2Zm
MmI2NWUwHhcNMjQwMTAxMTYzMDE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDkxMzg3M2ZhMTcyODhiZWVhMzlmYmMzMWM1MDM0MDMyNWYwOTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzMuGEYlFsEFYf3nHXK3njSBwEND
/lXdcSG69CSsKMt/Vpe6xZC2iT2DpD3JJbUdWbh1qmX7E/INqJqloF5gMQgKhiob
ER98b7vdpAd+P+TmfmWB4gWwsfv+t2QjjwHZ/5wFR9ntRpn+hNZyzr9qah8BaBav
vo5X78EJyrqe5FZLBLZzZS2A1feQUAXle9S7JWJWVczCHDMNMNOPucTikWDk3r+j
nmu4mblzU07ggHBQ6kLdptLoAfQeksd/0nZn1zaELKzTCMM1pOo/y4JitdOTuq+k
1W9TecxwsXvFa/51RvMW7ZhdNaR0FTXdAE6QysPCmIRE5vriHu4jiGdnQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG2ROHP6FyiL7qOfvDHFA0AyXwlhMB8GA1UdIwQY
MBaAFB8xEg/iJXdetTFS1JIOnFc/8rZeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHpFU0QtSWxkMTYxTVZMVWtnNmNWel95dGw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jODU4NWEtY2RmNy00YWEzLWJjMjEt
MjEyYWNjNDM1MWZmLzEvYlpFNGNfb1hLSXZ1bzUtOE1jVURRREpmQ1dFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9jODU4NWEtY2RmNy00YWEzLWJjMjEtMjEyYWNjNDM1MWZm
LzEvSHpFU0QtSWxkMTYxTVZMVWtnNmNWel95dGw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+zrMA0G
CSqGSIb3DQEBCwUAA4IBAQAW7h1I6/NnGhb1XotO1T6IMFVPbh5TSyK4+x1kZivd
BuboEAUw6818sX9EXyNWHDbbwlxYxoH5xT7qZT1rjBs/wfkmMd8hO6ygNgNv2Tkj
I4GeXR93KBPb5ZH5yxHR399PXhG+NRI5LwKk3s4URdneS2Bj/Qy6NBz3lkXHe6Eg
oxwv6SXs3GIAM88otiZK2lLw16shVS3xZdjzgYbSwuWrHN1HouS6bbwKTWp2vgLY
wte1ly5IJSVseL96KoATUm8aGhV3NfDRfw5xvfjR8drRfQuVBCcZmDJzQG/FFicm
ofieddwp5N/M+HxcKhRPMMbLGCZFZ5KOHwU7cR0bmHXz
-----END CERTIFICATE-----
Generated at Mon Jun 3 14:13:52 2024 by rpki-client on console-ams.rpki-client.org