Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/Re7joGFrQP-5GaWryQNb7F5y0BY.roa
File: Re7joGFrQP-5GaWryQNb7F5y0BY.roa (raw, json)
Hash identifier: CWivUKZbTwNroCgl5AqqFSBCRSQuY+yr4kpeUxcNlAY=
Subject key identifier: 45:EE:E3:A0:61:6B:40:FF:B9:19:A5:AB:C9:03:5B:EC:5E:72:D0:16
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 018CC94CA60F3E4CB0315C774D6DA855B23E
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/Re7joGFrQP-5GaWryQNb7F5y0BY.roa
Signing time: Tue 02 Jan 2024 08:31:32 +0000
ROA not before: Tue 02 Jan 2024 08:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43310
IP address blocks: 91.225.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:a6:0f:3e:4c:b0:31:5c:77:4d:6d:a8:55:b2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jan 2 08:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45eee3a0616b40ffb919a5abc9035bec5e72d016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:b9:6b:95:df:a2:54:26:08:72:47:17:71:
5d:70:bb:7d:2b:8c:58:e0:30:9f:85:50:62:9a:01:
6f:e2:0d:ad:8d:f1:ed:3a:d8:ba:6d:65:f4:25:06:
d8:c6:e3:ce:e4:dc:15:1a:7a:7a:ab:27:d5:5c:05:
95:f4:3c:bf:07:48:7e:8b:f4:16:fb:0f:cb:dd:1e:
ba:57:44:d5:b9:50:3d:83:83:06:04:d2:a6:3f:c7:
ac:16:ee:00:8b:02:41:11:28:b4:8d:0f:99:09:69:
18:f0:fc:e1:c7:41:3e:cd:f7:fc:99:c7:70:7f:9a:
ba:b9:5a:05:4b:83:7f:d7:9f:f4:6d:d4:74:e6:e7:
38:46:70:1e:31:b8:12:55:e1:39:26:14:94:51:89:
92:ab:35:c0:85:07:54:84:14:b6:ac:ec:ce:78:2b:
18:d9:aa:e4:b6:f8:bf:84:d1:6c:26:a2:10:88:0b:
59:eb:7d:3f:9d:ba:15:1e:68:32:70:89:98:bd:ed:
9b:a8:11:ca:74:d3:eb:5d:72:a6:e7:59:43:6f:38:
bd:20:9e:43:41:73:0e:68:83:14:54:44:a0:92:13:
d0:43:4c:16:af:53:c1:fa:cd:6f:97:26:29:f3:57:
25:7d:4b:88:97:9a:f6:8e:51:a6:02:6a:c7:c7:b8:
c5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EE:E3:A0:61:6B:40:FF:B9:19:A5:AB:C9:03:5B:EC:5E:72:D0:16
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/Re7joGFrQP-5GaWryQNb7F5y0BY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.224.0/24
Signature Algorithm: sha256WithRSAEncryption
02:4e:8c:23:14:2b:20:18:24:6d:0f:8f:ef:0a:f1:6b:39:52:
0a:46:32:14:8e:65:13:c1:f5:aa:6f:0f:65:81:dd:ad:ee:fb:
d4:06:ad:6f:2c:db:44:16:6a:70:36:fa:2a:0a:b1:8f:1a:04:
f9:e0:42:99:f5:72:c2:3d:aa:2c:92:2d:1b:49:03:70:76:7d:
a5:03:ee:27:a4:b3:24:38:e9:a8:5b:4d:f8:ec:92:6b:9b:d3:
12:40:5e:58:70:2d:4f:45:42:db:a2:c9:c1:ec:8a:20:97:24:
17:5b:17:4d:25:55:de:7e:ab:aa:1e:90:c9:2e:72:9f:e4:20:
5f:c9:c7:6d:d7:34:90:31:a4:9c:9c:bd:f0:2d:0a:03:5e:61:
9d:11:38:00:b6:7a:19:b1:3f:30:a3:2f:4f:9e:79:68:8b:8b:
e2:44:d1:db:30:a4:e5:5d:f2:f9:d8:33:62:03:4e:6b:34:8b:
45:84:37:ff:c5:2a:b2:3f:6c:bd:a2:2d:da:bb:3e:bf:fc:ac:
fc:a9:29:7d:a5:2f:d9:4f:08:7b:3f:17:85:fa:b8:37:2b:c3:
25:e6:25:c9:87:8b:92:eb:40:d8:17:a2:81:10:ee:3a:45:98:
a0:c9:0a:cd:6a:ba:aa:74:44:7b:bb:cb:98:c2:a3:c5:6f:3f:
37:87:f0:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTKYPPkywMVx3TW2oVbI+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl
NGQxZDcwHhcNMjQwMTAyMDgzMTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWVlZTNhMDYxNmI0MGZmYjkxOWE1YWJjOTAzNWJlYzVlNzJkMDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsra5a5XfolQmCHJHF3FdcLt9K4xY
4DCfhVBimgFv4g2tjfHtOti6bWX0JQbYxuPO5NwVGnp6qyfVXAWV9Dy/B0h+i/QW
+w/L3R66V0TVuVA9g4MGBNKmP8esFu4AiwJBESi0jQ+ZCWkY8Pzhx0E+zff8mcdw
f5q6uVoFS4N/15/0bdR05uc4RnAeMbgSVeE5JhSUUYmSqzXAhQdUhBS2rOzOeCsY
2arktvi/hNFsJqIQiAtZ630/nboVHmgycImYve2bqBHKdNPrXXKm51lDbzi9IJ5D
QXMOaIMUVESgkhPQQ0wWr1PB+s1vlyYp81clfUuIl5r2jlGmAmrHx7jFawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEXu46Bha0D/uRmlq8kDW+xectAWMB8GA1UdIwQY
MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt
ZGRmNTY3ZWRlZDAzLzEvUmU3am9HRnJRUC01R2FXcnlRTmI3RjV5MEJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz
LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+HgMA0G
CSqGSIb3DQEBCwUAA4IBAQACTowjFCsgGCRtD4/vCvFrOVIKRjIUjmUTwfWqbw9l
gd2t7vvUBq1vLNtEFmpwNvoqCrGPGgT54EKZ9XLCPaoski0bSQNwdn2lA+4npLMk
OOmoW0347JJrm9MSQF5YcC1PRULbosnB7IoglyQXWxdNJVXefquqHpDJLnKf5CBf
ycdt1zSQMaScnL3wLQoDXmGdETgAtnoZsT8woy9Pnnloi4viRNHbMKTlXfL52DNi
A05rNItFhDf/xSqyP2y9oi3auz6//Kz8qSl9pS/ZTwh7PxeF+rg3K8Ml5iXJh4uS
60DYF6KBEO46RZigyQrNarqqdER7u8uYwqPFbz83h/CB
-----END CERTIFICATE-----
Generated at Sat Jun 8 03:19:03 2024 by rpki-client on console-ams.rpki-client.org