Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/ZHhkejsB2mjrflqe9f_v5fMe0JA.roa
File: ZHhkejsB2mjrflqe9f_v5fMe0JA.roa (raw, json)
Hash identifier: 49LzD0/5FWDZ4D+6LFUIx4GBeu2roaA41OMj356DiHE=
Subject key identifier: 64:78:64:7A:3B:01:DA:68:EB:7E:5A:9E:F5:FF:EF:E5:F3:1E:D0:90
Certificate issuer: /CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Certificate serial: 018CC4252F6D765C50F35840056F02F6A30C
Authority key identifier: 8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/ZHhkejsB2mjrflqe9f_v5fMe0JA.roa
Signing time: Mon 01 Jan 2024 08:30:20 +0000
ROA not before: Mon 01 Jan 2024 08:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207349
IP address blocks: 91.223.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:2f:6d:76:5c:50:f3:58:40:05:6f:02:f6:a3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Validity
Not Before: Jan 1 08:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6478647a3b01da68eb7e5a9ef5ffefe5f31ed090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d9:8f:27:62:03:1b:6e:82:e4:f2:f5:b1:d1:
8b:c5:3b:f5:fe:af:ed:32:ae:03:03:03:ac:88:f0:
84:ef:72:93:ba:56:0f:f0:88:b8:5b:0d:06:0b:0c:
10:cd:74:9b:31:d6:48:2c:ad:24:8d:2a:96:66:23:
96:77:7b:11:34:a4:bc:f4:52:61:ed:41:d7:18:6a:
27:29:73:28:7c:41:e1:9f:47:97:a3:3f:6d:3a:c6:
5f:74:bf:ad:fe:56:ef:1e:6f:46:e5:43:cd:75:08:
e5:11:70:93:c6:e7:44:e6:05:49:e2:3e:0f:34:fc:
5b:c9:be:6e:f3:86:e0:b4:3f:47:d9:fc:af:ec:e4:
d1:5b:d6:c8:ce:f0:3f:4d:04:a0:b7:ef:d9:a4:8a:
75:fc:18:0e:54:20:85:da:2e:1d:d8:6b:69:85:87:
cc:d6:84:be:75:9c:7d:43:a7:c2:53:4c:9c:c3:27:
74:d7:c2:37:38:d4:77:5e:63:96:5b:c2:74:d8:c0:
72:d8:01:c7:aa:e6:bb:d0:33:d1:cc:24:1e:6c:8c:
13:ea:ac:9e:3a:2a:81:38:71:b2:07:0c:a3:3d:f6:
c8:ac:ff:19:bb:94:48:c1:4b:9d:fa:2f:6c:6b:3e:
5e:70:26:5e:ea:b1:78:76:34:31:2f:46:d1:c5:b0:
ee:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:78:64:7A:3B:01:DA:68:EB:7E:5A:9E:F5:FF:EF:E5:F3:1E:D0:90
X509v3 Authority Key Identifier:
keyid:8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/ZHhkejsB2mjrflqe9f_v5fMe0JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.222.0/24
Signature Algorithm: sha256WithRSAEncryption
47:4c:17:a0:4e:5d:a0:f6:df:b8:75:3a:42:57:90:53:3c:14:
63:92:0f:f9:ae:48:2e:65:32:3d:bd:66:03:5a:7f:17:7a:62:
cd:00:dc:b0:27:f6:a5:33:b2:71:a6:94:73:14:47:d4:d2:05:
9d:72:08:a2:6a:35:93:d0:59:e1:b9:83:9a:76:88:9e:83:f9:
d2:73:a3:d0:ac:a1:e8:40:8a:6a:54:66:e3:bf:a4:c2:39:c3:
17:56:59:15:d0:30:f3:e7:c2:dc:8a:87:c0:df:09:79:09:53:
0c:f9:8b:fc:2e:57:69:b5:19:17:9f:0f:e4:13:31:c1:76:ff:
5e:98:76:a3:6a:3b:42:7c:96:74:ba:68:3c:f8:32:3f:ed:f7:
ce:78:9c:8c:a4:23:e5:bc:2c:85:3f:ef:ad:66:9c:6a:dd:1c:
a3:51:31:55:0b:19:8c:67:aa:90:e3:29:f2:48:1d:da:ad:8f:
f4:0c:6a:87:5a:fa:72:ec:97:e9:12:57:25:21:0b:72:85:83:
eb:76:7d:5b:a7:d3:67:d2:ad:8b:cb:24:4a:21:59:87:e0:2c:
c0:2c:ff:18:a8:bd:cf:d0:c2:9a:06:94:31:64:1a:aa:17:b3:
22:a2:db:32:26:34:0e:8d:00:86:21:c1:df:b8:c8:6e:e5:b1:
c2:b7:87:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJS9tdlxQ81hABW8C9qMMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZGY2YzJhZDdhY2VjYWQwNjZlMWY3N2ZlMDU5MjJmMDE2
OTE1MzYwHhcNMjQwMTAxMDgzMDIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDc4NjQ3YTNiMDFkYTY4ZWI3ZTVhOWVmNWZmZWZlNWYzMWVkMDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodmPJ2IDG26C5PL1sdGLxTv1/q/t
Mq4DAwOsiPCE73KTulYP8Ii4Ww0GCwwQzXSbMdZILK0kjSqWZiOWd3sRNKS89FJh
7UHXGGonKXMofEHhn0eXoz9tOsZfdL+t/lbvHm9G5UPNdQjlEXCTxudE5gVJ4j4P
NPxbyb5u84bgtD9H2fyv7OTRW9bIzvA/TQSgt+/ZpIp1/BgOVCCF2i4d2GtphYfM
1oS+dZx9Q6fCU0ycwyd018I3ONR3XmOWW8J02MBy2AHHqua70DPRzCQebIwT6qye
OiqBOHGyBwyjPfbIrP8Zu5RIwUud+i9saz5ecCZe6rF4djQxL0bRxbDu0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGR4ZHo7Adpo635anvX/7+XzHtCQMB8GA1UdIwQY
MBaAFI7fbCrXrOytBm4fd/4Fki8BaRU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanQ5c0t0ZXM3SzBHYmg5M19nV1NMd0ZwRlRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wZTdlZjctMTgzMS00MmY2LWEyY2Mt
YWUyOTBkNTViZGI3LzEvWkhoa2Vqc0IybWpyZmxxZTlmX3Y1Zk1lMEpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8wZTdlZjctMTgzMS00MmY2LWEyY2MtYWUyOTBkNTViZGI3
LzEvanQ5c0t0ZXM3SzBHYmg5M19nV1NMd0ZwRlRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9/eMA0G
CSqGSIb3DQEBCwUAA4IBAQBHTBegTl2g9t+4dTpCV5BTPBRjkg/5rkguZTI9vWYD
Wn8XemLNANywJ/alM7JxppRzFEfU0gWdcgiiajWT0FnhuYOadoieg/nSc6PQrKHo
QIpqVGbjv6TCOcMXVlkV0DDz58LciofA3wl5CVMM+Yv8LldptRkXnw/kEzHBdv9e
mHajajtCfJZ0umg8+DI/7ffOeJyMpCPlvCyFP++tZpxq3RyjUTFVCxmMZ6qQ4yny
SB3arY/0DGqHWvpy7JfpElclIQtyhYPrdn1bp9Nn0q2LyyRKIVmH4CzALP8YqL3P
0MKaBpQxZBqqF7MiotsyJjQOjQCGIcHfuMhu5bHCt4cX
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:55:45 2024 by rpki-client on console-ams.rpki-client.org