Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/bD3ICrybjEjovSdNxgtPIkn9Sk4.roa
File: bD3ICrybjEjovSdNxgtPIkn9Sk4.roa (raw, json)
Hash identifier: vxy6C0m2thx5FSdX/h/ZspY1Py+9gyZC3I7sRAmWgfE=
Subject key identifier: 6C:3D:C8:0A:BC:9B:8C:48:E8:BD:27:4D:C6:0B:4F:22:49:FD:4A:4E
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018CD492A056CF15D00A126FC6DCFF5807CA
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/bD3ICrybjEjovSdNxgtPIkn9Sk4.roa
Signing time: Thu 04 Jan 2024 13:03:48 +0000
ROA not before: Thu 04 Jan 2024 13:03:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 272344
IP address blocks: 91.109.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d4:92:a0:56:cf:15:d0:0a:12:6f:c6:dc:ff:58:07:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 4 13:03:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c3dc80abc9b8c48e8bd274dc60b4f2249fd4a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:53:85:7f:eb:2f:a9:21:33:71:f2:17:dd:fb:
b9:d1:d8:97:69:42:c6:a1:80:ad:d6:99:cb:75:a4:
99:8f:fc:28:32:0e:53:bc:22:16:e6:33:10:c5:d2:
0f:69:d9:ba:01:7a:9b:92:c0:dc:8e:6c:36:c9:54:
b6:8e:8e:7e:27:b6:e8:2b:aa:9a:0b:0e:45:18:1c:
6d:d4:a6:fd:f4:b0:9e:e5:f9:46:19:a1:dd:dc:c7:
58:d1:1a:0a:d9:15:d7:43:b9:7a:af:ee:0f:8a:b1:
27:cf:f2:c6:3e:53:57:f0:cc:87:95:55:99:7a:66:
38:3f:88:d7:dd:2d:d0:e9:df:81:90:f9:fb:94:97:
71:7a:39:2b:57:15:ee:70:d1:9f:92:09:f0:c8:27:
70:15:24:89:c7:74:a9:e5:a3:1d:c9:53:43:90:b4:
c8:9b:d2:60:a0:65:08:8d:9f:f1:4a:ac:30:8a:c8:
f1:75:88:0f:31:6b:17:33:eb:3e:b4:3b:a2:25:6f:
28:78:83:35:f2:ae:6a:94:28:02:3b:aa:ae:9e:23:
0a:d5:4e:f1:83:33:44:dd:f9:cb:d1:3e:2b:ce:dc:
09:5e:9e:f9:90:94:00:bf:ef:1f:04:7a:86:e8:80:
69:e5:aa:7a:bc:83:0b:4e:55:40:b1:0c:44:99:1a:
74:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3D:C8:0A:BC:9B:8C:48:E8:BD:27:4D:C6:0B:4F:22:49:FD:4A:4E
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/bD3ICrybjEjovSdNxgtPIkn9Sk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.160.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:72:65:00:03:36:ec:f6:25:5d:72:e9:05:06:7b:a6:41:ef:
b3:c8:34:9f:87:38:9a:e4:ae:fd:3a:e0:71:d2:5b:2d:e9:d7:
7a:66:85:17:d1:73:32:74:f7:52:4f:81:b7:52:e4:a1:2f:db:
4d:8e:ee:6b:0f:19:87:56:31:26:0c:79:3f:8b:5b:bb:1f:a0:
78:a1:19:4d:d9:3e:63:1b:8d:ab:57:ac:b2:0f:64:97:95:53:
c0:9e:bc:57:e5:97:16:6a:8b:b0:81:d6:51:07:22:37:49:44:
fc:b9:6c:2e:52:33:70:d9:29:18:b5:17:58:7e:5f:30:de:e0:
8e:57:10:5b:27:97:c7:73:b0:c4:4d:62:de:54:2f:22:b1:ab:
a6:ab:de:e9:cd:34:24:8a:38:0c:d1:b8:75:50:ba:b7:5d:04:
1c:dc:a3:91:c4:13:4b:52:04:9a:18:56:80:fd:a4:75:3a:8e:
60:49:ea:1a:e9:8a:ea:e8:4f:69:a6:bf:5c:75:80:d3:97:08:
0d:be:e8:ce:25:a9:ea:54:8b:2b:36:0e:09:56:47:91:2e:60:
73:d6:0b:75:7c:ed:3d:9e:59:35:84:58:93:57:7a:5a:e2:62:
21:9a:13:30:13:c1:6e:dc:d0:7c:28:ce:df:24:62:ff:7c:a7:
8d:4b:65:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzUkqBWzxXQChJvxtz/WAfKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjQwMTA0MTMwMzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzNkYzgwYWJjOWI4YzQ4ZThiZDI3NGRjNjBiNGYyMjQ5ZmQ0YTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFOFf+svqSEzcfIX3fu50diXaULG
oYCt1pnLdaSZj/woMg5TvCIW5jMQxdIPadm6AXqbksDcjmw2yVS2jo5+J7boK6qa
Cw5FGBxt1Kb99LCe5flGGaHd3MdY0RoK2RXXQ7l6r+4PirEnz/LGPlNX8MyHlVWZ
emY4P4jX3S3Q6d+BkPn7lJdxejkrVxXucNGfkgnwyCdwFSSJx3Sp5aMdyVNDkLTI
m9JgoGUIjZ/xSqwwisjxdYgPMWsXM+s+tDuiJW8oeIM18q5qlCgCO6quniMK1U7x
gzNE3fnL0T4rztwJXp75kJQAv+8fBHqG6IBp5ap6vIMLTlVAsQxEmRp08QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGw9yAq8m4xI6L0nTcYLTyJJ/UpOMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvYkQzSUNyeWJqRWpvdlNkTnhndFBJa245U2s0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW22gMA0G
CSqGSIb3DQEBCwUAA4IBAQDKcmUAAzbs9iVdcukFBnumQe+zyDSfhzia5K79OuBx
0lst6dd6ZoUX0XMydPdST4G3UuShL9tNju5rDxmHVjEmDHk/i1u7H6B4oRlN2T5j
G42rV6yyD2SXlVPAnrxX5ZcWaouwgdZRByI3SUT8uWwuUjNw2SkYtRdYfl8w3uCO
VxBbJ5fHc7DETWLeVC8isaumq97pzTQkijgM0bh1ULq3XQQc3KORxBNLUgSaGFaA
/aR1Oo5gSeoa6Yrq6E9ppr9cdYDTlwgNvujOJanqVIsrNg4JVkeRLmBz1gt1fO09
nlk1hFiTV3pa4mIhmhMwE8Fu3NB8KM7fJGL/fKeNS2Vb
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:50:09 2024 by rpki-client on console-ams.rpki-client.org