Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/TriU3u2LKsj38hj2fu6fcZHx8Hs.roa
File: TriU3u2LKsj38hj2fu6fcZHx8Hs.roa (raw, json)
Hash identifier: oeIgRBK5nhlkCDLyglJTtmTmphRCFFpCq0FiQfGmXrM=
Subject key identifier: 4E:B8:94:DE:ED:8B:2A:C8:F7:F2:18:F6:7E:EE:9F:71:91:F1:F0:7B
Certificate issuer: /CN=07c9ca1e278307bae2405a4834af447c06414701
Certificate serial: 018CC500A791F29AA72277F08B1D66EC8254
Authority key identifier: 07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/TriU3u2LKsj38hj2fu6fcZHx8Hs.roa
Signing time: Mon 01 Jan 2024 12:30:03 +0000
ROA not before: Mon 01 Jan 2024 12:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49504
IP address blocks: 91.217.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:a7:91:f2:9a:a7:22:77:f0:8b:1d:66:ec:82:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c9ca1e278307bae2405a4834af447c06414701
Validity
Not Before: Jan 1 12:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4eb894deed8b2ac8f7f218f67eee9f7191f1f07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:36:88:1f:e0:d6:3b:54:14:e2:f3:71:80:5e:
c4:6a:a8:08:33:08:44:f6:8e:71:69:31:08:21:07:
ab:27:dc:83:89:25:63:7b:32:6e:4a:e4:0d:ef:1d:
d4:5e:3c:7e:a5:98:a8:e2:90:60:4a:ce:17:c7:bd:
b2:35:a1:87:59:60:d4:dd:0d:be:d3:28:f0:54:61:
ae:72:5a:b7:ac:77:e5:f5:c8:86:51:77:bf:db:9d:
e8:35:6d:8b:df:e9:cd:88:a9:63:e6:ea:86:90:af:
94:4c:91:09:bd:fd:c3:83:cf:88:9d:eb:bc:89:f1:
f3:69:89:66:08:62:81:01:ac:63:d5:dc:fd:77:83:
04:b5:50:83:5e:00:b9:6f:04:dc:17:0c:e3:a6:d9:
d7:9e:9f:22:26:54:3e:bb:62:a3:9c:d3:f4:00:76:
92:06:2f:25:85:ec:b2:fc:9b:0d:90:40:99:73:7e:
f0:56:fe:24:d5:4b:70:59:27:db:1d:ca:ee:21:ab:
7b:a7:df:65:b6:f1:9d:a8:75:01:54:79:4e:e4:47:
ad:4c:1f:5a:61:81:45:78:4a:0d:b2:8f:9f:64:8f:
6e:91:9d:50:50:bb:ce:2b:ba:53:ab:62:27:45:b5:
9a:4c:b1:72:9b:29:68:32:31:01:a7:90:4d:3a:69:
b6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B8:94:DE:ED:8B:2A:C8:F7:F2:18:F6:7E:EE:9F:71:91:F1:F0:7B
X509v3 Authority Key Identifier:
keyid:07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/TriU3u2LKsj38hj2fu6fcZHx8Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.154.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:fd:8b:6e:94:d3:a2:19:7f:84:b5:e3:04:59:b8:c1:f7:78:
50:47:6e:b3:06:04:a8:2d:48:61:74:d5:ac:fb:fa:e6:f4:f9:
7c:f2:9a:c8:2a:79:25:57:06:32:4b:3c:45:d0:96:d9:2e:89:
2d:24:97:25:79:41:f0:f9:a6:b5:59:6f:1a:92:1c:28:c3:75:
54:8f:ae:fa:49:c6:5f:59:27:a4:62:8a:cb:9c:8a:b6:d1:67:
d2:d1:a4:5a:d4:93:b7:24:79:00:f3:bf:9a:25:10:8f:d6:5b:
3d:37:2e:e5:ff:4e:af:9f:91:2c:36:95:29:ad:47:09:62:9c:
ce:3a:7e:ba:38:96:93:6b:77:f7:42:17:ec:64:4f:c7:ed:9b:
6f:fb:68:14:08:c6:04:1b:d8:46:9b:df:79:15:93:92:fc:45:
9e:33:a7:24:91:0f:89:dd:42:61:d2:03:3a:5b:9b:c0:06:f3:
a6:2c:26:fe:0b:d9:e1:46:8a:f8:ce:a4:b5:18:1f:b2:f2:3c:
7e:9a:ff:1c:0b:66:79:b0:7b:99:0e:39:11:76:7d:f9:01:a8:
ef:df:ec:fc:30:90:43:b1:2a:1a:4a:31:11:c1:76:61:eb:2c:
b8:5b:ac:50:c8:77:f2:2b:50:c0:3b:97:fe:b7:4b:1e:30:94:
48:5b:75:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAKeR8pqnInfwix1m7IJUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YzljYTFlMjc4MzA3YmFlMjQwNWE0ODM0YWY0NDdjMDY0
MTQ3MDEwHhcNMjQwMTAxMTIzMDAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWI4OTRkZWVkOGIyYWM4ZjdmMjE4ZjY3ZWVlOWY3MTkxZjFmMDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojaIH+DWO1QU4vNxgF7EaqgIMwhE
9o5xaTEIIQerJ9yDiSVjezJuSuQN7x3UXjx+pZio4pBgSs4Xx72yNaGHWWDU3Q2+
0yjwVGGuclq3rHfl9ciGUXe/253oNW2L3+nNiKlj5uqGkK+UTJEJvf3Dg8+Ineu8
ifHzaYlmCGKBAaxj1dz9d4MEtVCDXgC5bwTcFwzjptnXnp8iJlQ+u2KjnNP0AHaS
Bi8lheyy/JsNkECZc37wVv4k1UtwWSfbHcruIat7p99ltvGdqHUBVHlO5EetTB9a
YYFFeEoNso+fZI9ukZ1QULvOK7pTq2InRbWaTLFymyloMjEBp5BNOmm2UQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE64lN7tiyrI9/IY9n7un3GR8fB7MB8GA1UdIwQY
MBaAFAfJyh4ngwe64kBaSDSvRHwGQUcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjhuS0hpZURCN3JpUUZwSU5LOUVmQVpCUndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8yNjNjMjYtN2RjYS00NTEyLTgzNGYt
MDA1ZWRmYjc2MWM2LzEvVHJpVTN1MkxLc2ozOGhqMmZ1NmZjWkh4OEhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8yNjNjMjYtN2RjYS00NTEyLTgzNGYtMDA1ZWRmYjc2MWM2
LzEvQjhuS0hpZURCN3JpUUZwSU5LOUVmQVpCUndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9maMA0G
CSqGSIb3DQEBCwUAA4IBAQDG/YtulNOiGX+EteMEWbjB93hQR26zBgSoLUhhdNWs
+/rm9Pl88prIKnklVwYySzxF0JbZLoktJJcleUHw+aa1WW8akhwow3VUj676ScZf
WSekYorLnIq20WfS0aRa1JO3JHkA87+aJRCP1ls9Ny7l/06vn5EsNpUprUcJYpzO
On66OJaTa3f3QhfsZE/H7Ztv+2gUCMYEG9hGm995FZOS/EWeM6ckkQ+J3UJh0gM6
W5vABvOmLCb+C9nhRor4zqS1GB+y8jx+mv8cC2Z5sHuZDjkRdn35Aajv3+z8MJBD
sSoaSjERwXZh6yy4W6xQyHfyK1DAO5f+t0seMJRIW3XQ
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:21:05 2024 by rpki-client on console-ams.rpki-client.org