Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/1-EU9fM3P9KNbq8zb0lR6ikqMYwM.roa
File: 1-EU9fM3P9KNbq8zb0lR6ikqMYwM.roa (raw, json)
Hash identifier: 2x8RlKtqHvU7n2jgyBQZBq66J8e6c/5EWWMR778N+8Q=
Subject key identifier: F8:45:3D:7C:CD:CF:F4:A3:5B:AB:CC:DB:D2:54:7A:8A:4A:8C:63:03
Certificate issuer: /CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Certificate serial: 018CC8DFB1DC83062772FB22568FE5816306
Authority key identifier: 89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/1-EU9fM3P9KNbq8zb0lR6ikqMYwM.roa
Signing time: Tue 02 Jan 2024 06:32:32 +0000
ROA not before: Tue 02 Jan 2024 06:32:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42926
IP address blocks: 91.216.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:b1:dc:83:06:27:72:fb:22:56:8f:e5:81:63:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Validity
Not Before: Jan 2 06:32:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8453d7ccdcff4a35babccdbd2547a8a4a8c6303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dd:7b:bc:9a:df:51:a2:21:34:28:9f:62:20:
7a:5a:b2:0b:a1:38:07:72:42:6d:28:50:69:45:3c:
96:b8:f4:86:2d:87:c0:64:d6:cc:41:7e:d4:1f:1e:
42:17:c9:32:50:76:33:10:f5:60:a8:8f:53:b2:35:
a8:7a:f1:eb:47:48:76:af:4e:d3:eb:c2:2a:26:60:
7f:e7:c1:00:80:02:ac:3c:25:81:82:a5:dd:d2:16:
ac:ec:b4:b8:fe:dc:f0:bc:bd:87:73:67:42:c0:98:
fc:25:10:98:53:ea:84:56:1d:6e:9b:a1:97:8a:c2:
94:c4:b4:8e:0d:86:1d:9c:f0:ec:fc:36:68:73:c6:
92:0d:68:28:04:a3:17:6c:57:1b:f0:80:f9:f8:07:
50:c8:2f:e5:4f:de:59:a7:0b:02:59:8e:b7:db:17:
fa:6b:7c:a6:1f:e0:6b:98:76:93:bd:36:33:b2:88:
48:fc:25:ed:26:c1:2c:71:99:1b:54:9a:16:60:3e:
ca:43:53:52:ac:d8:cf:d1:63:57:d2:74:c8:fa:fd:
87:b9:de:fe:07:49:44:6b:2e:25:2b:fb:e5:77:85:
a4:10:84:d3:b9:3d:9c:60:3b:bb:9c:36:0d:3f:b3:
f8:e6:65:2b:02:08:66:a9:a7:7a:a9:9a:b9:26:4a:
b3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:45:3D:7C:CD:CF:F4:A3:5B:AB:CC:DB:D2:54:7A:8A:4A:8C:63:03
X509v3 Authority Key Identifier:
keyid:89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/1-EU9fM3P9KNbq8zb0lR6ikqMYwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.119.0/24
Signature Algorithm: sha256WithRSAEncryption
88:83:50:2b:31:82:23:91:76:7d:ea:73:44:9e:6c:3a:10:53:
92:f0:e7:8d:a4:47:bf:27:f5:f0:08:7b:a7:58:51:89:17:c6:
94:b7:2d:81:11:a5:99:82:81:11:46:4c:0f:98:84:1f:86:44:
97:44:c1:d0:67:a4:bd:90:fd:9d:9d:6d:23:8a:b4:f6:c2:8f:
8d:cd:26:82:2a:f1:f6:8e:6f:7c:41:7b:c1:c0:da:f6:47:32:
8e:af:16:70:7c:90:cf:9f:ab:fd:e0:58:87:5e:f2:8f:f9:72:
cd:52:60:e1:44:c0:ab:6f:af:1f:4f:82:38:1b:12:c3:4c:40:
a0:62:2e:8a:73:d6:e4:93:2b:9b:6b:65:9f:2e:38:f5:8e:ce:
87:81:18:b6:70:5a:60:ec:eb:15:13:31:1b:c8:e0:4c:77:21:
e7:be:54:40:49:1c:07:c4:49:ea:d8:ad:95:e3:68:00:38:05:
94:93:91:84:06:68:b5:f4:a7:e8:ef:5a:f6:d6:79:37:80:fe:
55:eb:ea:19:7d:aa:bc:c5:cb:29:4a:17:15:74:59:1d:4e:7f:
47:73:d6:40:7d:b5:c8:91:4e:c1:e7:92:33:ab:8b:08:2d:65:
51:6e:0f:c6:5c:0a:ef:e0:b1:3a:8f:f9:52:84:23:bc:43:b9:
f8:83:d2:27
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzI37HcgwYncvsiVo/lgWMGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5OTM5ZmYxMjkzYjdlMjI3NzlmYzU1YjRjODNmMTNlNTJl
OTQ0MjgwHhcNMjQwMTAyMDYzMjMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODQ1M2Q3Y2NkY2ZmNGEzNWJhYmNjZGJkMjU0N2E4YTRhOGM2MzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkd17vJrfUaIhNCifYiB6WrILoTgH
ckJtKFBpRTyWuPSGLYfAZNbMQX7UHx5CF8kyUHYzEPVgqI9TsjWoevHrR0h2r07T
68IqJmB/58EAgAKsPCWBgqXd0has7LS4/tzwvL2Hc2dCwJj8JRCYU+qEVh1um6GX
isKUxLSODYYdnPDs/DZoc8aSDWgoBKMXbFcb8ID5+AdQyC/lT95ZpwsCWY632xf6
a3ymH+BrmHaTvTYzsohI/CXtJsEscZkbVJoWYD7KQ1NSrNjP0WNX0nTI+v2Hud7+
B0lEay4lK/vld4WkEITTuT2cYDu7nDYNP7P45mUrAghmqad6qZq5JkqzZwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPhFPXzNz/SjW6vM29JUeopKjGMDMB8GA1UdIwQY
MBaAFImTn/EpO34id5/FW0yD8T5S6UQoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVpPZjhTazdmaUozbjhWYlRJUHhQbExwUkNnLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMTBkZGYtYmI2ZS00YmIwLWJlZmYt
MGU2ODAwMGIzNTM3LzEvMS1FVTlmTTNQOUtOYnE4emIwbFI2aWtxTVl3TS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTUvYTEwZGRmLWJiNmUtNGJiMC1iZWZmLTBlNjgwMDBiMzUz
Ny8xL2laT2Y4U2s3ZmlKM244VmJUSVB4UGxMcFJDZy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvYdzAN
BgkqhkiG9w0BAQsFAAOCAQEAiINQKzGCI5F2fepzRJ5sOhBTkvDnjaRHvyf18Ah7
p1hRiRfGlLctgRGlmYKBEUZMD5iEH4ZEl0TB0GekvZD9nZ1tI4q09sKPjc0mgirx
9o5vfEF7wcDa9kcyjq8WcHyQz5+r/eBYh17yj/lyzVJg4UTAq2+vH0+COBsSw0xA
oGIuinPW5JMrm2tlny449Y7Oh4EYtnBaYOzrFRMxG8jgTHch575UQEkcB8RJ6tit
leNoADgFlJORhAZotfSn6O9a9tZ5N4D+VevqGX2qvMXLKUoXFXRZHU5/R3PWQH21
yJFOweeSM6uLCC1lUW4PxlwK7+CxOo/5UoQjvEO5+IPSJw==
-----END CERTIFICATE-----
Generated at Thu May 30 16:15:54 2024 by rpki-client on console-ams.rpki-client.org