Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/4tsZbL5A-lt4qxBh8lvrcJSIYN4.roa
File: 4tsZbL5A-lt4qxBh8lvrcJSIYN4.roa (raw, json)
Hash identifier: Xwy2J4T3u2rEQl/pI/cSkrUkLpdIg3KFW31/bkXfxBg=
Subject key identifier: E2:DB:19:6C:BE:40:FA:5B:78:AB:10:61:F2:5B:EB:70:94:88:60:DE
Certificate issuer: /CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Certificate serial: 018CC56DFA3A343D2DB4B1995AEE46258724
Authority key identifier: 9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/4tsZbL5A-lt4qxBh8lvrcJSIYN4.roa
Signing time: Mon 01 Jan 2024 14:29:28 +0000
ROA not before: Mon 01 Jan 2024 14:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42481
IP address blocks: 91.192.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 07:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:fa:3a:34:3d:2d:b4:b1:99:5a:ee:46:25:87:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Validity
Not Before: Jan 1 14:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2db196cbe40fa5b78ab1061f25beb70948860de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d0:a4:7c:11:ec:a3:8b:5c:2c:5e:0a:88:39:
18:ee:a4:6a:13:1d:fd:57:6d:1a:22:72:00:63:28:
97:67:a8:64:97:4b:66:45:ce:0c:2a:3a:3a:70:9c:
b4:f9:c6:2e:aa:cb:6c:77:cf:e2:72:3c:85:48:12:
11:88:d3:46:a0:56:6e:70:3e:2c:74:b0:43:7e:7d:
40:b0:7e:88:31:e0:cb:60:70:4c:1e:b4:64:d3:ad:
3e:f3:8f:df:b0:27:09:22:45:c1:d1:3a:37:6a:52:
07:37:bb:5d:f9:f1:f4:32:f3:c0:c5:40:88:f9:5f:
b0:c7:e0:b6:98:02:dc:ea:bf:e1:fb:67:59:cf:97:
cc:b2:ae:82:88:8e:8b:83:f2:e0:7e:ce:34:bc:85:
ea:e2:83:0c:04:f8:3c:20:4f:b0:e2:a1:1a:60:f2:
2a:71:ff:d9:31:d9:58:8d:e9:48:aa:12:c9:c7:b5:
17:71:7c:a3:2a:64:08:46:81:96:a7:27:27:00:32:
94:c4:3d:98:74:e1:c6:42:56:63:fd:1a:3f:ef:94:
2f:9f:bc:63:30:de:f7:e4:1f:ec:2c:87:de:7e:f9:
3f:b2:1d:40:5c:d7:e9:ea:f2:94:d4:19:d0:04:1b:
49:ca:92:5f:15:78:8c:7a:25:6d:83:65:f4:80:a1:
24:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DB:19:6C:BE:40:FA:5B:78:AB:10:61:F2:5B:EB:70:94:88:60:DE
X509v3 Authority Key Identifier:
keyid:9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/4tsZbL5A-lt4qxBh8lvrcJSIYN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.148.0/22
Signature Algorithm: sha256WithRSAEncryption
10:f0:c9:8e:57:7c:43:3b:72:dc:ff:2e:85:2b:3b:57:d6:4a:
af:1e:54:7b:2b:1e:1f:ba:6c:5c:74:1e:b8:43:80:56:89:ee:
fb:cd:73:1a:41:cc:1d:e1:15:f2:4e:90:d6:28:1b:a2:8a:41:
b3:74:fc:77:1d:a2:cf:68:ba:61:21:fe:d3:56:9c:8a:11:d2:
c8:da:76:58:36:3e:71:80:69:a3:0a:7e:3f:6d:5e:af:64:7e:
c6:f3:be:bc:db:62:e8:51:6e:70:fc:78:22:14:26:d1:53:6f:
b5:64:46:cd:46:1d:f3:ce:47:99:63:7f:e4:03:bb:5d:22:82:
89:25:18:2d:65:a9:25:bf:c3:19:df:53:75:0f:cd:32:4c:0f:
47:e0:88:36:81:85:31:e4:f8:5a:8f:8f:2a:19:09:0e:f3:0f:
04:67:79:a7:ac:97:8e:98:a2:40:18:c2:f3:99:95:91:4b:66:
04:7e:c7:0f:ce:17:5c:aa:14:7f:fd:5e:f4:1a:8c:53:34:f3:
2f:4b:77:5d:1a:bd:6c:94:7c:d5:59:f1:4b:2d:e0:58:13:30:
7a:2c:0b:ef:0f:3f:98:0b:7e:41:38:21:d5:e7:c0:7e:47:6c:
ea:cc:48:84:1d:75:36:3b:f1:08:f7:a8:8b:38:ed:3b:2c:87:
72:63:ba:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbfo6ND0ttLGZWu5GJYckMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhN2I5YThjZDgxOWY0YTkyMDMzNGQ3ZTcyZWMyMzQwODcw
ZDc3NDkwHhcNMjQwMTAxMTQyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmRiMTk2Y2JlNDBmYTViNzhhYjEwNjFmMjViZWI3MDk0ODg2MGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytCkfBHso4tcLF4KiDkY7qRqEx39
V20aInIAYyiXZ6hkl0tmRc4MKjo6cJy0+cYuqstsd8/icjyFSBIRiNNGoFZucD4s
dLBDfn1AsH6IMeDLYHBMHrRk060+84/fsCcJIkXB0To3alIHN7td+fH0MvPAxUCI
+V+wx+C2mALc6r/h+2dZz5fMsq6CiI6Lg/Lgfs40vIXq4oMMBPg8IE+w4qEaYPIq
cf/ZMdlYjelIqhLJx7UXcXyjKmQIRoGWpycnADKUxD2YdOHGQlZj/Ro/75Qvn7xj
MN735B/sLIfefvk/sh1AXNfp6vKU1BnQBBtJypJfFXiMeiVtg2X0gKEk0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOLbGWy+QPpbeKsQYfJb63CUiGDeMB8GA1UdIwQY
MBaAFJp7mozYGfSpIDNNfnLsI0CHDXdJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW51YWpOZ1o5S2tnTTAxLWN1d2pRSWNOZDBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83ZTBlYmItNDY4Ni00MDZlLWI5OWYt
MjFmYWYxNDRjYjYyLzEvNHRzWmJMNUEtbHQ0cXhCaDhsdnJjSlNJWU40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS83ZTBlYmItNDY4Ni00MDZlLWI5OWYtMjFmYWYxNDRjYjYy
LzEvbW51YWpOZ1o5S2tnTTAxLWN1d2pRSWNOZDBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8CUMA0G
CSqGSIb3DQEBCwUAA4IBAQAQ8MmOV3xDO3Lc/y6FKztX1kqvHlR7Kx4fumxcdB64
Q4BWie77zXMaQcwd4RXyTpDWKBuiikGzdPx3HaLPaLphIf7TVpyKEdLI2nZYNj5x
gGmjCn4/bV6vZH7G876822LoUW5w/HgiFCbRU2+1ZEbNRh3zzkeZY3/kA7tdIoKJ
JRgtZaklv8MZ31N1D80yTA9H4Ig2gYUx5Phaj48qGQkO8w8EZ3mnrJeOmKJAGMLz
mZWRS2YEfscPzhdcqhR//V70GoxTNPMvS3ddGr1slHzVWfFLLeBYEzB6LAvvDz+Y
C35BOCHV58B+R2zqzEiEHXU2O/EI96iLOO07LIdyY7re
-----END CERTIFICATE-----
Generated at Tue Jun 18 11:29:24 2024 by rpki-client on console-ams.rpki-client.org