Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/8RkRMd95MxHf6IUpx-XoWz_giT4.roa
File: 8RkRMd95MxHf6IUpx-XoWz_giT4.roa (raw, json)
Hash identifier: wkrMCXRKacHwWqyzZfSfeccZwLJrTRKZ24Dp5ukt8Po=
Subject key identifier: F1:19:11:31:DF:79:33:11:DF:E8:85:29:C7:E5:E8:5B:3F:E0:89:3E
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 01928F0301EFE79CE0E2E76656480D06BF01
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/8RkRMd95MxHf6IUpx-XoWz_giT4.roa
Signing time: Tue 15 Oct 2024 07:09:51 +0000
ROA not before: Tue 15 Oct 2024 07:09:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.103.120.0/21 maxlen: 24
91.103.120.0/22 maxlen: 22
171.22.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8f:03:01:ef:e7:9c:e0:e2:e7:66:56:48:0d:06:bf:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Oct 15 07:09:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1191131df793311dfe88529c7e5e85b3fe0893e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b7:e8:b7:d1:1d:34:61:4b:fe:12:79:9b:93:
1d:6c:a4:07:78:92:cf:10:21:7c:23:13:c0:e0:cc:
e6:6d:d6:41:4d:e4:b0:be:fc:69:73:29:55:5c:53:
24:25:02:fa:41:a5:64:e7:0d:5b:4d:b9:0f:64:ee:
97:68:39:ad:2d:79:47:79:25:11:c7:17:81:53:d0:
ca:8e:fb:7a:ef:b7:3a:58:46:c4:12:c2:22:dd:5f:
40:71:e6:3c:c8:23:d9:a2:d2:d2:10:8b:64:2b:c2:
a9:4a:a5:8d:da:8f:35:39:33:17:f4:8b:65:de:68:
a9:df:15:b3:67:07:83:76:4a:6a:dc:69:f4:24:b6:
c2:21:2a:05:47:f6:15:ec:d7:71:f3:6f:c6:e0:66:
7e:77:4c:17:66:9c:a0:53:4c:12:5d:a3:de:6e:19:
c1:37:59:0b:99:7b:2b:0d:5d:1d:ad:db:e6:62:15:
24:3f:d6:5e:86:61:25:55:dd:24:34:29:18:78:68:
f0:a7:eb:8d:a3:e7:e8:88:3e:bf:db:3c:61:df:41:
4b:35:72:18:80:bb:19:9d:33:56:76:17:49:46:77:
55:6e:1d:19:26:49:86:68:95:5a:0e:6d:41:6b:85:
2c:38:70:52:03:a0:df:df:6f:b5:b4:6b:7f:33:ce:
46:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:19:11:31:DF:79:33:11:DF:E8:85:29:C7:E5:E8:5B:3F:E0:89:3E
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/8RkRMd95MxHf6IUpx-XoWz_giT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.120.0/21
171.22.144.0/24
Signature Algorithm: sha256WithRSAEncryption
21:8a:f4:4c:74:ff:51:03:cb:cb:0a:67:7c:ee:7f:42:73:98:
e2:90:af:fe:6e:15:f3:70:93:78:78:c1:ab:ed:f5:a4:b5:dc:
cd:1a:a0:48:7a:b1:20:b3:2e:bd:7a:ed:51:8b:82:d1:09:e7:
9e:b5:68:7f:91:22:c7:e5:4b:5f:22:59:82:59:00:51:88:d0:
a5:ac:a9:a1:8e:9f:47:3a:4d:e7:8b:06:e3:6b:de:df:1f:04:
9e:e3:3b:8c:af:e2:39:60:bc:c8:6b:d4:6d:be:9a:f5:43:ce:
c4:0f:b8:21:23:be:b1:8c:fe:01:cc:82:98:1e:da:ea:b6:61:
87:0e:27:cb:58:7c:b9:18:72:7d:d8:ba:e3:6f:a4:e4:70:18:
86:b0:bc:72:58:76:82:76:d4:a2:14:58:f9:a2:84:f5:86:e6:
9c:c8:33:d6:79:36:7a:a3:01:40:9a:b9:fa:ae:a4:aa:55:83:
14:7c:96:ad:91:bd:b2:a7:8d:c2:a5:6c:f4:a6:02:fd:57:62:
47:94:e9:1d:6a:2e:2b:46:c7:53:cf:2d:21:20:76:02:34:0a:
64:7a:33:6e:1a:78:e0:34:e0:ff:c2:78:99:e4:c5:35:af:56:
d6:ac:a5:37:16:e8:4d:52:2d:07:81:3a:40:12:8c:6e:2a:33:
3f:d3:08:13
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZKPAwHv55zg4udmVkgNBr8BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4
MjAwYTIwHhcNMjQxMDE1MDcwOTUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTE5MTEzMWRmNzkzMzExZGZlODg1MjljN2U1ZTg1YjNmZTA4OTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrfot9EdNGFL/hJ5m5MdbKQHeJLP
ECF8IxPA4MzmbdZBTeSwvvxpcylVXFMkJQL6QaVk5w1bTbkPZO6XaDmtLXlHeSUR
xxeBU9DKjvt677c6WEbEEsIi3V9AceY8yCPZotLSEItkK8KpSqWN2o81OTMX9Itl
3mip3xWzZweDdkpq3Gn0JLbCISoFR/YV7Ndx82/G4GZ+d0wXZpygU0wSXaPebhnB
N1kLmXsrDV0drdvmYhUkP9ZehmElVd0kNCkYeGjwp+uNo+foiD6/2zxh30FLNXIY
gLsZnTNWdhdJRndVbh0ZJkmGaJVaDm1Ba4UsOHBSA6Df32+1tGt/M85G4QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPEZETHfeTMR3+iFKcfl6Fs/4Ik+MB8GA1UdIwQY
MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt
NGJlMThlZjEyOGI0LzEvOFJrUk1kOTVNeEhmNklVcHgtWG9Xel9naVQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0
LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDW2d4AwQA
qxaQMA0GCSqGSIb3DQEBCwUAA4IBAQAhivRMdP9RA8vLCmd87n9Cc5jikK/+bhXz
cJN4eMGr7fWktdzNGqBIerEgsy69eu1Ri4LRCeeetWh/kSLH5UtfIlmCWQBRiNCl
rKmhjp9HOk3niwbja97fHwSe4zuMr+I5YLzIa9Rtvpr1Q87ED7ghI76xjP4BzIKY
HtrqtmGHDifLWHy5GHJ92Lrjb6TkcBiGsLxyWHaCdtSiFFj5ooT1huacyDPWeTZ6
owFAmrn6rqSqVYMUfJatkb2yp43CpWz0pgL9V2JHlOkdai4rRsdTzy0hIHYCNApk
ejNuGnjgNOD/wniZ5MU1r1bWrKU3FuhNUi0HgTpAEoxuKjM/0wgT
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:34:15 2024 by rpki-client on console-fra.rpki-client.org