Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/JOfthZq066qDLVrfs367kPMm9Xk.roa
File: JOfthZq066qDLVrfs367kPMm9Xk.roa (raw, json)
Hash identifier: vFjM9t10yd/W/kA1FoYlqFqqbk/LSbuXSA6THvEE+Bc=
Subject key identifier: 24:E7:ED:85:9A:B4:EB:AA:83:2D:5A:DF:B3:7E:BB:90:F3:26:F5:79
Certificate issuer: /CN=20e6a0107d689a9370b622951a449646cc38b590
Certificate serial: 018CC80143A8CA1CE1D8E530F62DE3EA6160
Authority key identifier: 20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/JOfthZq066qDLVrfs367kPMm9Xk.roa
Signing time: Tue 02 Jan 2024 02:29:35 +0000
ROA not before: Tue 02 Jan 2024 02:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198677
IP address blocks: 91.238.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:43:a8:ca:1c:e1:d8:e5:30:f6:2d:e3:ea:61:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e6a0107d689a9370b622951a449646cc38b590
Validity
Not Before: Jan 2 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24e7ed859ab4ebaa832d5adfb37ebb90f326f579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f4:28:67:c3:b4:84:69:e6:66:2d:63:9e:76:
64:4b:67:2a:1a:a7:c4:71:04:2b:18:0c:7a:76:3a:
bf:e0:e3:2f:17:6c:3b:87:8f:a3:e2:6b:c2:63:46:
98:6f:6c:10:c1:03:b0:74:67:d4:d7:91:6b:4b:e9:
91:48:49:70:80:9e:ea:1a:ba:bb:c3:08:c6:bf:a3:
9d:4d:5f:9d:cd:c6:f6:50:d3:ce:1a:ce:b5:2d:1b:
c5:51:b9:07:fa:53:60:e1:37:24:4a:74:c1:d6:5f:
14:73:ce:e4:6d:43:b7:68:67:97:ae:2b:16:62:64:
66:51:18:32:a8:cb:de:98:63:db:65:87:d9:8f:d7:
de:ee:e7:43:9e:8f:05:38:08:0f:ea:b1:8e:df:4e:
99:87:0c:a3:2b:25:49:58:12:21:b0:c0:79:91:c2:
99:2d:1e:47:f0:80:43:94:a7:9c:38:8e:29:b9:95:
e7:9d:4d:22:72:7c:cf:87:54:36:52:c3:7a:06:11:
87:31:94:11:a2:ce:a3:29:8e:ba:3e:a8:d2:e7:39:
0b:fd:bd:6e:61:3b:fd:2c:14:44:27:46:e5:3c:73:
7b:f5:0e:65:71:06:58:f1:77:68:97:9e:86:a7:cc:
19:f7:a2:bc:2e:f9:53:7f:1e:1f:da:4f:3c:85:ce:
0a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E7:ED:85:9A:B4:EB:AA:83:2D:5A:DF:B3:7E:BB:90:F3:26:F5:79
X509v3 Authority Key Identifier:
keyid:20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/JOfthZq066qDLVrfs367kPMm9Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.122.0/24
Signature Algorithm: sha256WithRSAEncryption
75:ca:8b:a4:6c:43:8d:6a:4c:48:1d:06:ab:f4:bf:d9:83:80:
bc:1f:1b:9b:e3:b0:46:ac:76:21:c7:a8:d9:26:00:33:b7:e5:
76:6a:17:bc:1f:a0:dd:fa:70:1a:f7:03:8f:53:2f:0c:77:66:
ab:57:c9:86:7f:18:3e:2d:59:e9:40:bd:2d:ce:2c:94:a5:ff:
9b:62:1d:86:26:df:9b:e3:a3:07:2d:a4:a1:49:ac:b2:97:cd:
19:c1:49:bb:e4:f2:10:ea:fd:8e:54:02:df:c8:36:70:c9:58:
d2:66:aa:8d:53:41:bf:e7:be:f7:d2:1b:d0:7b:19:89:03:99:
c1:a6:6e:3c:03:9e:a5:2f:85:83:51:4b:e1:10:7a:5b:d8:8b:
3a:b5:bd:b8:40:de:fe:27:29:80:12:f2:22:5c:24:bf:13:bf:
4a:db:ea:30:4c:09:89:30:b5:97:a8:04:7d:2e:7c:c2:e7:51:
e8:9b:ce:4c:83:dc:77:89:39:33:8b:ce:4b:a4:0c:4d:72:66:
53:cb:21:d9:df:7c:07:e8:d0:df:5c:23:9d:5c:79:a3:c2:4e:
d0:bd:3e:03:dd:2e:7d:a1:18:fe:e5:5c:a5:49:1b:b5:23:3d:
33:b4:13:68:db:5c:6b:91:1e:75:27:2b:47:43:a9:82:fd:01:
5f:b9:19:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAUOoyhzh2OUw9i3j6mFgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZTZhMDEwN2Q2ODlhOTM3MGI2MjI5NTFhNDQ5NjQ2Y2Mz
OGI1OTAwHhcNMjQwMTAyMDIyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGU3ZWQ4NTlhYjRlYmFhODMyZDVhZGZiMzdlYmI5MGYzMjZmNTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvQoZ8O0hGnmZi1jnnZkS2cqGqfE
cQQrGAx6djq/4OMvF2w7h4+j4mvCY0aYb2wQwQOwdGfU15FrS+mRSElwgJ7qGrq7
wwjGv6OdTV+dzcb2UNPOGs61LRvFUbkH+lNg4TckSnTB1l8Uc87kbUO3aGeXrisW
YmRmURgyqMvemGPbZYfZj9fe7udDno8FOAgP6rGO306ZhwyjKyVJWBIhsMB5kcKZ
LR5H8IBDlKecOI4puZXnnU0icnzPh1Q2UsN6BhGHMZQRos6jKY66PqjS5zkL/b1u
YTv9LBREJ0blPHN79Q5lcQZY8Xdol56Gp8wZ96K8LvlTfx4f2k88hc4KpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCTn7YWatOuqgy1a37N+u5DzJvV5MB8GA1UdIwQY
MBaAFCDmoBB9aJqTcLYilRpElkbMOLWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU9hZ0VIMW9tcE53dGlLVkdrU1dSc3c0dFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9lODRlOGYtOGJiMi00MDU0LWI0OTUt
MTI1ZWVkZjhkOWYxLzEvSk9mdGhacTA2NnFETFZyZnMzNjdrUE1tOVhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9lODRlOGYtOGJiMi00MDU0LWI0OTUtMTI1ZWVkZjhkOWYx
LzEvSU9hZ0VIMW9tcE53dGlLVkdrU1dSc3c0dFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+56MA0G
CSqGSIb3DQEBCwUAA4IBAQB1youkbEONakxIHQar9L/Zg4C8Hxub47BGrHYhx6jZ
JgAzt+V2ahe8H6Dd+nAa9wOPUy8Md2arV8mGfxg+LVnpQL0tziyUpf+bYh2GJt+b
46MHLaShSayyl80ZwUm75PIQ6v2OVALfyDZwyVjSZqqNU0G/57730hvQexmJA5nB
pm48A56lL4WDUUvhEHpb2Is6tb24QN7+JymAEvIiXCS/E79K2+owTAmJMLWXqAR9
LnzC51Hom85Mg9x3iTkzi85LpAxNcmZTyyHZ33wH6NDfXCOdXHmjwk7QvT4D3S59
oRj+5VylSRu1Iz0ztBNo21xrkR51JytHQ6mC/QFfuRnV
-----END CERTIFICATE-----
Generated at Tue May 21 11:08:00 2024 by rpki-client on console-fra.rpki-client.org