Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/CwLWzaJMBrgcveKEUuJx_t3yIMY.roa
File: CwLWzaJMBrgcveKEUuJx_t3yIMY.roa (raw, json)
Hash identifier: NNJ4TT59K+yHrFgU684LGSF7Ib9YszbGxtRpW4pA+2s=
Subject key identifier: 0B:02:D6:CD:A2:4C:06:B8:1C:BD:E2:84:52:E2:71:FE:DD:F2:20:C6
Certificate issuer: /CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Certificate serial: 018EBD4188F9045505DBBCF56B8525BFD498
Authority key identifier: 92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/CwLWzaJMBrgcveKEUuJx_t3yIMY.roa
Signing time: Mon 08 Apr 2024 10:29:32 +0000
ROA not before: Mon 08 Apr 2024 10:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199760
IP address blocks: 91.239.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bd:41:88:f9:04:55:05:db:bc:f5:6b:85:25:bf:d4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Validity
Not Before: Apr 8 10:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b02d6cda24c06b81cbde28452e271feddf220c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2a:06:09:31:05:4a:b0:f3:68:77:37:fa:dd:
be:1a:a3:0e:16:79:39:87:5a:47:31:35:04:1e:84:
46:12:bd:3a:53:0b:d5:a6:5f:82:fc:d3:04:6b:84:
62:aa:69:3a:58:e5:43:d0:6c:4e:71:6d:26:5d:78:
fd:bc:58:72:9f:c9:b6:fe:47:b8:38:0a:a0:3b:d3:
33:97:8b:7b:26:f7:27:0c:69:e0:cf:af:97:72:e5:
ed:c8:97:a3:dd:b8:87:88:00:1f:a7:0f:bd:7d:b4:
d5:f2:1c:4a:5b:da:f8:cf:c0:20:4b:7b:f3:96:6b:
31:d4:f4:60:1b:8c:6f:c6:aa:10:e7:f6:eb:6a:d5:
5e:a5:dd:43:ae:56:57:da:45:f5:99:c4:d8:08:12:
46:69:ab:2b:38:c3:ac:67:68:c0:0d:3d:3c:40:9d:
10:8b:f5:c4:51:44:33:95:56:3f:35:1e:4e:9a:42:
ec:9c:c1:8d:1c:10:d7:2b:7b:4c:b2:58:60:ba:e5:
f5:ec:a0:05:79:05:29:f2:ad:f1:7d:38:0c:36:39:
86:ba:e1:88:aa:1d:39:17:4e:a2:37:2b:e2:7d:e6:
7e:8a:cb:7b:4e:e9:18:12:6e:6e:6d:d8:97:7a:c8:
fb:02:fe:11:62:3e:f5:0d:65:98:fd:f4:14:db:39:
89:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:02:D6:CD:A2:4C:06:B8:1C:BD:E2:84:52:E2:71:FE:DD:F2:20:C6
X509v3 Authority Key Identifier:
keyid:92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/CwLWzaJMBrgcveKEUuJx_t3yIMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.216.0/24
Signature Algorithm: sha256WithRSAEncryption
88:ab:13:23:32:89:ae:ab:32:cd:8e:0f:3e:3b:85:92:6d:47:
9f:0e:ac:79:44:cb:36:3c:10:5c:26:e7:67:8a:41:f1:12:bd:
97:66:ed:d0:c7:e6:ef:fd:4d:dd:68:08:94:d9:76:d7:65:ed:
33:ed:6a:ae:e6:a1:50:19:a5:c2:fa:18:7d:2d:46:1f:b4:32:
d1:5a:e7:d4:db:8e:8c:91:0b:f6:70:34:c3:9b:da:17:96:9f:
2e:f5:02:99:ef:d4:c1:39:87:8c:8d:4a:fa:e7:f3:c6:43:56:
ba:73:64:8d:bc:11:9e:95:57:f9:97:b1:3f:2d:c8:a4:82:10:
db:b6:7e:27:75:5f:72:3a:24:21:fe:94:09:3f:61:ca:ac:81:
43:6b:4e:21:19:0b:aa:57:f8:59:d8:ba:b7:6c:71:d6:ae:78:
d6:06:cb:92:9d:d9:5a:41:b0:b0:be:12:94:2d:8a:36:8c:a5:
68:38:65:33:fc:75:e2:52:1c:4f:a8:fa:81:a0:18:c7:c2:27:
14:01:91:25:81:c3:ba:fd:44:42:3a:5d:13:95:a2:61:2e:be:
8d:06:e9:b5:1e:49:6f:22:c9:4f:98:22:9f:42:37:52:22:2a:
57:0c:09:1a:ca:a1:61:d4:c4:cc:27:b9:b2:a6:d6:68:7b:58:
58:97:60:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY69QYj5BFUF27z1a4Ulv9SYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNjU4N2E3YzQyYzI2MWZhMjU0YjBiODJlN2JjMDcxOWNj
NjQ4MTIwHhcNMjQwNDA4MTAyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjAyZDZjZGEyNGMwNmI4MWNiZGUyODQ1MmUyNzFmZWRkZjIyMGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyoGCTEFSrDzaHc3+t2+GqMOFnk5
h1pHMTUEHoRGEr06UwvVpl+C/NMEa4Riqmk6WOVD0GxOcW0mXXj9vFhyn8m2/ke4
OAqgO9Mzl4t7JvcnDGngz6+XcuXtyJej3biHiAAfpw+9fbTV8hxKW9r4z8AgS3vz
lmsx1PRgG4xvxqoQ5/bratVepd1DrlZX2kX1mcTYCBJGaasrOMOsZ2jADT08QJ0Q
i/XEUUQzlVY/NR5OmkLsnMGNHBDXK3tMslhguuX17KAFeQUp8q3xfTgMNjmGuuGI
qh05F06iNyvifeZ+ist7TukYEm5ubdiXesj7Av4RYj71DWWY/fQU2zmJiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAsC1s2iTAa4HL3ihFLicf7d8iDGMB8GA1UdIwQY
MBaAFJJlh6fELCYfolSwuC57wHGcxkgSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9iZDIwMDUtZmI3Yi00MDUyLWIzZjIt
ODhmYTNiNmViMDA2LzEvQ3dMV3phSk1CcmdjdmVLRVV1SnhfdDN5SU1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9iZDIwMDUtZmI3Yi00MDUyLWIzZjItODhmYTNiNmViMDA2
LzEva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+/YMA0G
CSqGSIb3DQEBCwUAA4IBAQCIqxMjMomuqzLNjg8+O4WSbUefDqx5RMs2PBBcJudn
ikHxEr2XZu3Qx+bv/U3daAiU2XbXZe0z7Wqu5qFQGaXC+hh9LUYftDLRWufU246M
kQv2cDTDm9oXlp8u9QKZ79TBOYeMjUr65/PGQ1a6c2SNvBGelVf5l7E/LcikghDb
tn4ndV9yOiQh/pQJP2HKrIFDa04hGQuqV/hZ2Lq3bHHWrnjWBsuSndlaQbCwvhKU
LYo2jKVoOGUz/HXiUhxPqPqBoBjHwicUAZElgcO6/URCOl0TlaJhLr6NBum1Hklv
IslPmCKfQjdSIipXDAkayqFh1MTMJ7myptZoe1hYl2CK
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:54:24 2024 by rpki-client on console-fra.rpki-client.org