Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/RwEUyl4dKLG2g1awT9AvPTYtgXg.roa
File: RwEUyl4dKLG2g1awT9AvPTYtgXg.roa (raw, json)
Hash identifier: Gb/QorbafWui7B/27b0gB/ImkxikrZ/R21HTCsGu6pM=
Subject key identifier: 47:01:14:CA:5E:1D:28:B1:B6:83:56:B0:4F:D0:2F:3D:36:2D:81:78
Certificate issuer: /CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Certificate serial: 018CC8715EC6A9DDB624EAE6E099A8973398
Authority key identifier: 6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/RwEUyl4dKLG2g1awT9AvPTYtgXg.roa
Signing time: Tue 02 Jan 2024 04:32:02 +0000
ROA not before: Tue 02 Jan 2024 04:32:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210612
IP address blocks: 91.246.61.0/24 maxlen: 24
2a11:c040::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:5e:c6:a9:dd:b6:24:ea:e6:e0:99:a8:97:33:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Validity
Not Before: Jan 2 04:32:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=470114ca5e1d28b1b68356b04fd02f3d362d8178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:be:37:68:f0:12:2f:b0:a7:49:b1:95:1f:1f:
ff:5e:d1:7d:58:b9:09:09:26:47:ba:76:66:7d:17:
a9:d1:0d:1d:f2:bc:b2:00:48:65:11:bd:e2:a1:d4:
b1:8a:dc:ab:51:63:72:55:2a:73:44:82:91:9e:76:
1c:e1:97:b4:8d:60:c6:a0:f8:ce:d1:f2:8c:60:2e:
92:95:fd:53:64:17:d3:d0:36:26:b8:66:e5:30:cb:
39:7a:9d:eb:e4:f1:0c:b2:41:25:87:53:1b:1b:45:
d0:85:03:6b:2a:b8:d4:72:cf:86:09:c3:b3:bb:ca:
68:d4:57:b9:8d:3b:7c:11:db:77:22:b6:de:21:cf:
e0:27:c5:95:47:a8:13:cb:7d:75:85:25:ee:9f:b1:
b3:c2:6b:5b:9a:4d:31:06:79:4d:4c:82:c9:e8:dd:
a9:0f:4a:9a:49:59:45:a8:b9:9d:b0:19:21:dd:c9:
2a:50:38:7e:1a:c7:f6:3e:a6:17:ef:f2:da:ac:9a:
61:f2:fd:51:fe:f4:17:ba:2d:bf:6c:0a:47:5b:d7:
46:c0:a0:99:05:d8:7d:3b:12:91:c9:40:e8:25:53:
81:6c:4b:91:c0:e5:f7:b1:1a:be:3b:fc:7f:09:6c:
4c:97:a8:26:b1:fd:29:71:81:fa:33:e5:fd:34:75:
0f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:01:14:CA:5E:1D:28:B1:B6:83:56:B0:4F:D0:2F:3D:36:2D:81:78
X509v3 Authority Key Identifier:
keyid:6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/RwEUyl4dKLG2g1awT9AvPTYtgXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.61.0/24
IPv6:
2a11:c040::/29
Signature Algorithm: sha256WithRSAEncryption
77:25:49:c0:74:c9:15:9e:12:dc:be:8a:a4:c5:32:0e:62:b4:
a2:74:8f:34:7f:ce:06:40:cd:ba:7a:46:ed:48:c5:ec:1c:29:
0d:0d:f1:00:42:78:79:98:cc:04:33:eb:68:2d:f5:4d:df:46:
5b:a1:7f:bd:1a:c2:1e:f8:b4:15:4d:64:50:ff:ed:08:f8:21:
66:13:4f:f1:b0:91:5f:a6:68:80:3d:91:b0:55:90:dd:21:df:
63:b6:f3:da:4d:fb:93:af:35:0b:11:50:b3:c3:ca:ca:43:37:
1c:98:b7:59:48:b6:39:38:0a:c4:a9:19:44:9d:f4:85:51:21:
fd:b8:fa:d3:1b:43:3c:39:6d:72:b5:3c:7e:8b:e8:4d:27:f4:
a3:3f:6c:65:05:9f:5e:86:36:dc:91:5f:73:3d:8d:8a:05:8d:
04:6e:ca:84:ee:b8:cc:c5:2d:14:7e:13:d2:b1:f9:c8:05:dc:
f0:d0:ca:f4:b4:02:aa:35:db:32:85:95:a9:58:f0:89:25:47:
e9:d7:cc:af:68:e3:06:07:14:f4:af:1a:22:57:9d:0f:c9:b6:
64:c1:d0:ea:6b:a8:b5:67:68:64:65:90:bd:a4:97:b1:b8:11:
15:f0:71:84:99:a4:a1:29:1e:ab:06:e8:2d:e1:04:39:69:93:
dd:49:36:69
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzIcV7Gqd22JOrm4JmolzOYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNGYxMjRjOTFjYWEwY2M5MWMzYjliYjRmOGFkYjA2MzI2
MjI0YTEwHhcNMjQwMTAyMDQzMjAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzAxMTRjYTVlMWQyOGIxYjY4MzU2YjA0ZmQwMmYzZDM2MmQ4MTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL43aPASL7CnSbGVHx//XtF9WLkJ
CSZHunZmfRep0Q0d8ryyAEhlEb3iodSxityrUWNyVSpzRIKRnnYc4Ze0jWDGoPjO
0fKMYC6Slf1TZBfT0DYmuGblMMs5ep3r5PEMskElh1MbG0XQhQNrKrjUcs+GCcOz
u8po1Fe5jTt8Edt3IrbeIc/gJ8WVR6gTy311hSXun7Gzwmtbmk0xBnlNTILJ6N2p
D0qaSVlFqLmdsBkh3ckqUDh+Gsf2PqYX7/LarJph8v1R/vQXui2/bApHW9dGwKCZ
Bdh9OxKRyUDoJVOBbEuRwOX3sRq+O/x/CWxMl6gmsf0pcYH6M+X9NHUP8QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEcBFMpeHSixtoNWsE/QLz02LYF4MB8GA1UdIwQY
MBaAFGtPEkyRyqDMkcO5u0+K2wYyYiShMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTA4U1RKSEtvTXlSdzdtN1Q0cmJCakppSktFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMjRhYzktYWQxYy00ZWM3LTkzNzMt
YjY1MjYyY2YxOTgzLzEvUndFVXlsNGRLTEcyZzFhd1Q5QXZQVFl0Z1hnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9jMjRhYzktYWQxYy00ZWM3LTkzNzMtYjY1MjYyY2YxOTgz
LzEvYTA4U1RKSEtvTXlSdzdtN1Q0cmJCakppSktFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW/Y9MA0E
AgACMAcDBQMqEcBAMA0GCSqGSIb3DQEBCwUAA4IBAQB3JUnAdMkVnhLcvoqkxTIO
YrSidI80f84GQM26ekbtSMXsHCkNDfEAQnh5mMwEM+toLfVN30ZboX+9GsIe+LQV
TWRQ/+0I+CFmE0/xsJFfpmiAPZGwVZDdId9jtvPaTfuTrzULEVCzw8rKQzccmLdZ
SLY5OArEqRlEnfSFUSH9uPrTG0M8OW1ytTx+i+hNJ/SjP2xlBZ9ehjbckV9zPY2K
BY0EbsqE7rjMxS0UfhPSsfnIBdzw0Mr0tAKqNdsyhZWpWPCJJUfp18yvaOMGBxT0
rxoiV50PybZkwdDqa6i1Z2hkZZC9pJexuBEV8HGEmaShKR6rBugt4QQ5aZPdSTZp
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:51 2024 by rpki-client on console-ams.rpki-client.org