Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/1pVi_ndhARpPpWe9Wa3SIV1hO7I.roa
File: 1pVi_ndhARpPpWe9Wa3SIV1hO7I.roa (raw, json)
Hash identifier: TaNYzKwX+yT/G9sCEGEbi1mnVHm0+Lv4ykTFZtMHen4=
Subject key identifier: D6:95:62:FE:77:61:01:1A:4F:A5:67:BD:59:AD:D2:21:5D:61:3B:B2
Certificate issuer: /CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Certificate serial: 018CC5DC0FD0203E9EAD0A90A5DB764210BA
Authority key identifier: 71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/1pVi_ndhARpPpWe9Wa3SIV1hO7I.roa
Signing time: Mon 01 Jan 2024 16:29:42 +0000
ROA not before: Mon 01 Jan 2024 16:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196721
IP address blocks: 91.212.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:0f:d0:20:3e:9e:ad:0a:90:a5:db:76:42:10:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Validity
Not Before: Jan 1 16:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d69562fe7761011a4fa567bd59add2215d613bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f5:f5:1e:10:da:05:29:d7:c7:1e:f6:cf:79:
f0:f0:aa:74:74:54:23:a1:bb:20:d0:af:a8:0b:0d:
0b:ea:c8:75:e4:03:e9:de:bc:0f:cc:0f:75:22:97:
c2:6c:fe:a2:40:5a:1f:a7:c4:d5:16:f4:53:27:4f:
a3:96:12:94:b6:f3:4f:63:c4:05:a8:3a:c5:9f:1d:
a2:12:17:b2:72:ce:b9:ab:25:20:99:05:d9:bf:66:
bd:19:6d:d9:78:fd:e2:95:02:65:6d:75:a4:a8:7a:
89:ef:22:8f:82:46:e0:0d:94:cd:5c:7e:c5:e3:05:
04:94:61:cd:36:36:20:2f:a5:a4:71:1a:ab:9a:82:
39:6b:e2:bf:12:0a:96:b2:fc:e2:0c:20:fa:95:20:
8a:ff:87:2a:d7:ec:63:fb:06:ff:df:8b:bb:32:97:
6f:d4:ca:2e:0e:ce:a6:f0:82:36:77:fa:2b:76:1d:
c7:fc:7e:59:de:d0:fd:e3:97:3f:cf:94:81:bc:0e:
18:0f:dd:e0:b0:df:13:c9:e3:c7:2f:e2:eb:ad:04:
a0:b9:cc:ab:94:ef:c3:37:74:e6:a9:fc:1d:bf:19:
1c:12:aa:f5:3a:cc:89:fb:f6:10:d5:e9:2a:0c:91:
c2:0a:27:4e:8c:52:47:44:cc:cf:0e:87:99:60:64:
b2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:95:62:FE:77:61:01:1A:4F:A5:67:BD:59:AD:D2:21:5D:61:3B:B2
X509v3 Authority Key Identifier:
keyid:71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/1pVi_ndhARpPpWe9Wa3SIV1hO7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.81.0/24
Signature Algorithm: sha256WithRSAEncryption
52:47:70:18:f1:99:f4:52:2b:69:53:44:8e:e8:5d:25:ba:6e:
83:27:35:78:5f:39:43:08:7a:bd:60:7a:46:b6:0a:07:29:b6:
c1:e9:7c:ce:99:cb:4d:09:87:6b:13:90:d1:5d:16:53:2f:75:
9c:63:19:b7:2d:ef:50:e8:ce:2a:86:72:04:7e:c3:16:6b:b7:
4d:eb:bd:a7:80:96:5f:52:5e:72:98:91:e7:9f:9d:df:ac:96:
0d:8e:6d:d6:45:c1:34:c4:92:e0:0d:76:b5:ca:53:bd:ab:40:
30:ca:bc:d5:9e:f6:17:25:21:34:c2:b8:68:45:c0:38:9b:3c:
bc:92:ee:53:2b:b3:41:0b:06:41:50:e6:ec:42:1a:65:56:60:
1b:85:44:f2:6a:11:e4:07:93:c4:64:da:8d:28:15:17:53:9b:
c3:a6:c1:7c:ca:89:c0:1d:dd:25:ba:90:7b:ab:7a:4e:2d:0f:
68:ba:f2:bb:08:08:51:a5:92:ac:b4:40:74:ae:29:68:f3:10:
0d:cc:9c:8f:bc:67:67:34:7d:66:06:8e:93:18:6e:65:57:cf:
1c:e3:c4:42:5a:94:fa:3b:11:fa:ca:2f:69:0d:ba:60:fd:d6:
fd:20:65:ea:93:55:21:7d:49:10:2b:c9:18:d6:a2:59:a9:b8:
6b:36:e1:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3A/QID6erQqQpdt2QhC6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZWU3ZWQ0YTZhOTEwNTRlNmJjMjQ5ODY5M2ZlMGMyZjg2
MjEwMWQwHhcNMjQwMTAxMTYyOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjk1NjJmZTc3NjEwMTFhNGZhNTY3YmQ1OWFkZDIyMTVkNjEzYmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPX1HhDaBSnXxx72z3nw8Kp0dFQj
obsg0K+oCw0L6sh15APp3rwPzA91IpfCbP6iQFofp8TVFvRTJ0+jlhKUtvNPY8QF
qDrFnx2iEheycs65qyUgmQXZv2a9GW3ZeP3ilQJlbXWkqHqJ7yKPgkbgDZTNXH7F
4wUElGHNNjYgL6WkcRqrmoI5a+K/EgqWsvziDCD6lSCK/4cq1+xj+wb/34u7Mpdv
1MouDs6m8II2d/ordh3H/H5Z3tD945c/z5SBvA4YD93gsN8TyePHL+LrrQSgucyr
lO/DN3TmqfwdvxkcEqr1OsyJ+/YQ1ekqDJHCCidOjFJHRMzPDoeZYGSyxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNaVYv53YQEaT6VnvVmt0iFdYTuyMB8GA1UdIwQY
MBaAFHHuftSmqRBU5rwkmGk/4ML4YhAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2U1LTFLYXBFRlRtdkNTWWFUX2d3dmhpRUIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MzhlZGItZDlmZi00YWY1LTgzNDEt
ZmM1Y2M2NGRiNzQ5LzEvMXBWaV9uZGhBUnBQcFdlOVdhM1NJVjFoTzdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83MzhlZGItZDlmZi00YWY1LTgzNDEtZmM1Y2M2NGRiNzQ5
LzEvY2U1LTFLYXBFRlRtdkNTWWFUX2d3dmhpRUIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9RRMA0G
CSqGSIb3DQEBCwUAA4IBAQBSR3AY8Zn0UitpU0SO6F0lum6DJzV4XzlDCHq9YHpG
tgoHKbbB6XzOmctNCYdrE5DRXRZTL3WcYxm3Le9Q6M4qhnIEfsMWa7dN672ngJZf
Ul5ymJHnn53frJYNjm3WRcE0xJLgDXa1ylO9q0AwyrzVnvYXJSE0wrhoRcA4mzy8
ku5TK7NBCwZBUObsQhplVmAbhUTyahHkB5PEZNqNKBUXU5vDpsF8yonAHd0lupB7
q3pOLQ9ouvK7CAhRpZKstEB0rilo8xANzJyPvGdnNH1mBo6TGG5lV88c48RCWpT6
OxH6yi9pDbpg/db9IGXqk1UhfUkQK8kY1qJZqbhrNuHK
-----END CERTIFICATE-----
Generated at Sat Jun 8 03:18:49 2024 by rpki-client on console-ams.rpki-client.org