Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a20fb0-5b8d-4517-b46e-c72cbac285f8/1/4HldKiU16D_mouNicE3bBNMnEms.roa
File: 4HldKiU16D_mouNicE3bBNMnEms.roa (raw, json)
Hash identifier: B2nIdsJTXH69jAfB2cVW5wZuZkrpN5JG/W00cJRY9AM=
Subject key identifier: E0:79:5D:2A:25:35:E8:3F:E6:A2:E3:62:70:4D:DB:04:D3:27:12:6B
Certificate issuer: /CN=b40aa5163496e053a76b6d69cdc45f75006cd8df
Certificate serial: 018CC9BCB3EF9503E329475230ED1BFE99F1
Authority key identifier: B4:0A:A5:16:34:96:E0:53:A7:6B:6D:69:CD:C4:5F:75:00:6C:D8:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAqlFjSW4FOna21pzcRfdQBs2N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a20fb0-5b8d-4517-b46e-c72cbac285f8/1/4HldKiU16D_mouNicE3bBNMnEms.roa
Signing time: Tue 02 Jan 2024 10:33:56 +0000
ROA not before: Tue 02 Jan 2024 10:33:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51509
IP address blocks: 91.217.92.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/a20fb0-5b8d-4517-b46e-c72cbac285f8/1/tAqlFjSW4FOna21pzcRfdQBs2N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/a20fb0-5b8d-4517-b46e-c72cbac285f8/1/tAqlFjSW4FOna21pzcRfdQBs2N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAqlFjSW4FOna21pzcRfdQBs2N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:b3:ef:95:03:e3:29:47:52:30:ed:1b:fe:99:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40aa5163496e053a76b6d69cdc45f75006cd8df
Validity
Not Before: Jan 2 10:33:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0795d2a2535e83fe6a2e362704ddb04d327126b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c2:5d:5b:40:4f:0c:cc:3d:73:f3:6f:3a:26:
4d:ea:d7:e8:0c:dc:0c:41:8a:8b:ac:36:be:55:cb:
3d:f2:c1:93:9d:6c:83:4c:36:b9:ec:57:52:cb:89:
65:13:a8:52:47:72:4b:26:a8:e6:38:21:4d:4c:67:
ac:b2:61:ad:82:e1:fc:25:6d:00:95:cc:c1:7a:c3:
fd:9c:e8:a8:60:78:ce:69:69:e3:22:87:01:f1:d5:
52:45:55:a0:b5:f7:e4:89:f6:65:01:b1:32:f6:13:
3d:68:0b:da:87:ff:20:cb:6c:ac:85:f5:e8:f1:3f:
d9:41:81:39:42:5a:a3:3f:46:5b:4f:90:0b:c3:2e:
13:b2:a2:b4:b8:20:0b:58:84:01:31:88:64:16:e5:
9d:f3:71:ab:c0:f3:4c:bd:0d:5c:22:dc:c7:27:7f:
2c:e9:5e:5f:4b:08:45:d8:e1:e7:c6:66:f2:6a:30:
e5:cd:90:93:30:68:1e:e6:f5:83:76:7f:80:bd:d4:
30:e9:6c:07:5b:81:c0:4a:28:be:60:9f:d1:bf:0f:
07:e8:82:fb:81:d2:10:b8:b2:e6:ad:b1:71:fc:a8:
58:5e:74:28:c1:37:68:ff:03:fe:84:09:27:5c:c0:
78:a7:af:6d:d5:e2:5e:36:9a:e3:0e:7a:dc:79:61:
73:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:79:5D:2A:25:35:E8:3F:E6:A2:E3:62:70:4D:DB:04:D3:27:12:6B
X509v3 Authority Key Identifier:
keyid:B4:0A:A5:16:34:96:E0:53:A7:6B:6D:69:CD:C4:5F:75:00:6C:D8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAqlFjSW4FOna21pzcRfdQBs2N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a20fb0-5b8d-4517-b46e-c72cbac285f8/1/4HldKiU16D_mouNicE3bBNMnEms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a20fb0-5b8d-4517-b46e-c72cbac285f8/1/tAqlFjSW4FOna21pzcRfdQBs2N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.92.0/23
Signature Algorithm: sha256WithRSAEncryption
11:b2:a6:bf:80:10:4d:3d:ce:43:4c:9a:e0:69:62:9b:1a:d8:
e8:bc:e5:f3:76:6e:be:fa:82:99:8a:34:5f:3d:09:fb:1a:81:
ac:58:3b:89:7c:73:99:28:88:4c:ca:30:05:f0:5a:70:24:4a:
19:b4:ad:77:9f:80:a4:00:08:44:f6:59:5e:6d:86:cd:20:11:
79:18:7d:a2:ef:37:d7:bc:d7:dc:4f:7b:5b:3e:15:59:a1:6c:
a3:99:a4:ff:e4:97:9e:9e:2e:98:0d:d8:e1:cc:f1:74:05:83:
26:c4:07:0c:4b:0a:03:76:bf:29:03:a5:47:9c:7d:ae:ea:3f:
ac:c0:ca:a0:51:ba:b7:57:5a:4d:1b:29:4a:9e:76:5b:a3:c9:
5c:bc:c2:d5:85:a2:b4:fd:9a:35:e2:17:df:f4:9c:7a:59:2a:
ff:56:2e:05:35:fd:10:75:e7:b9:7a:3d:c6:f5:52:df:30:96:
c7:1e:de:d4:45:fc:8c:a4:14:9b:32:c7:d9:57:e7:8a:db:11:
ed:a0:8d:9e:44:de:ef:81:23:12:95:32:9e:98:a9:de:5c:8d:
c5:ed:a6:7a:28:76:fb:e3:27:8c:72:e2:eb:a8:79:f2:c3:2c:
40:c5:82:8d:66:69:e2:e4:a8:7e:37:ad:c7:77:4f:e3:50:82:
d5:c1:e1:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvLPvlQPjKUdSMO0b/pnxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MGFhNTE2MzQ5NmUwNTNhNzZiNmQ2OWNkYzQ1Zjc1MDA2
Y2Q4ZGYwHhcNMjQwMTAyMTAzMzU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDc5NWQyYTI1MzVlODNmZTZhMmUzNjI3MDRkZGIwNGQzMjcxMjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMJdW0BPDMw9c/NvOiZN6tfoDNwM
QYqLrDa+Vcs98sGTnWyDTDa57FdSy4llE6hSR3JLJqjmOCFNTGessmGtguH8JW0A
lczBesP9nOioYHjOaWnjIocB8dVSRVWgtffkifZlAbEy9hM9aAvah/8gy2yshfXo
8T/ZQYE5QlqjP0ZbT5ALwy4TsqK0uCALWIQBMYhkFuWd83GrwPNMvQ1cItzHJ38s
6V5fSwhF2OHnxmbyajDlzZCTMGge5vWDdn+AvdQw6WwHW4HASii+YJ/Rvw8H6IL7
gdIQuLLmrbFx/KhYXnQowTdo/wP+hAknXMB4p69t1eJeNprjDnrceWFzNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOB5XSolNeg/5qLjYnBN2wTTJxJrMB8GA1UdIwQY
MBaAFLQKpRY0luBTp2ttac3EX3UAbNjfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEFxbEZqU1c0Rk9uYTIxcHpjUmZkUUJzMk44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9hMjBmYjAtNWI4ZC00NTE3LWI0NmUt
YzcyY2JhYzI4NWY4LzEvNEhsZEtpVTE2RF9tb3VOaWNFM2JCTk1uRW1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9hMjBmYjAtNWI4ZC00NTE3LWI0NmUtYzcyY2JhYzI4NWY4
LzEvdEFxbEZqU1c0Rk9uYTIxcHpjUmZkUUJzMk44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW9lcMA0G
CSqGSIb3DQEBCwUAA4IBAQARsqa/gBBNPc5DTJrgaWKbGtjovOXzdm6++oKZijRf
PQn7GoGsWDuJfHOZKIhMyjAF8FpwJEoZtK13n4CkAAhE9llebYbNIBF5GH2i7zfX
vNfcT3tbPhVZoWyjmaT/5Jeeni6YDdjhzPF0BYMmxAcMSwoDdr8pA6VHnH2u6j+s
wMqgUbq3V1pNGylKnnZbo8lcvMLVhaK0/Zo14hff9Jx6WSr/Vi4FNf0Qdee5ej3G
9VLfMJbHHt7URfyMpBSbMsfZV+eK2xHtoI2eRN7vgSMSlTKemKneXI3F7aZ6KHb7
4yeMcuLrqHnywyxAxYKNZmni5Kh+N63Hd0/jUILVweEP
-----END CERTIFICATE-----
Generated at Fri Jun 7 23:08:43 2024 by rpki-client on console-fra.rpki-client.org