Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/L128kX89lADfR4goQxhnIWB7Wpo.roa
File: L128kX89lADfR4goQxhnIWB7Wpo.roa (raw, json)
Hash identifier: MJNkKFNqNR18tVlt8d15yWBLSWSgbBjsuQTG/U6fPFE=
Subject key identifier: 2F:5D:BC:91:7F:3D:94:00:DF:47:88:28:43:18:67:21:60:7B:5A:9A
Certificate issuer: /CN=eefbe8369a7bbc03a86fbe639b7efaa02b717287
Certificate serial: 018F5B6A303A0B052A9F9997E0A3D0AA5AD9
Authority key identifier: EE:FB:E8:36:9A:7B:BC:03:A8:6F:BE:63:9B:7E:FA:A0:2B:71:72:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/L128kX89lADfR4goQxhnIWB7Wpo.roa
Signing time: Thu 09 May 2024 03:33:56 +0000
ROA not before: Thu 09 May 2024 03:33:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207616
IP address blocks: 91.193.56.0/23 maxlen: 24
185.190.26.0/24 maxlen: 24
194.48.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5b:6a:30:3a:0b:05:2a:9f:99:97:e0:a3:d0:aa:5a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eefbe8369a7bbc03a86fbe639b7efaa02b717287
Validity
Not Before: May 9 03:33:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f5dbc917f3d9400df47882843186721607b5a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8e:83:9d:d9:77:5e:dc:84:2d:1f:7c:0e:93:
55:67:b0:37:89:d1:44:6a:57:8f:69:d1:55:2b:f1:
9f:4c:40:9c:d3:45:0d:b3:70:c7:d0:3b:59:f6:f7:
2d:02:aa:b0:0d:8f:f7:de:4c:f6:8d:00:66:38:33:
03:9b:3b:b0:bd:d6:d8:99:de:fc:b7:0f:45:ca:02:
b9:89:74:93:74:a5:da:49:44:24:3b:fe:e3:bb:1c:
f8:f5:12:f7:9d:6a:42:70:64:e0:fe:9d:8f:de:39:
f0:9f:32:b0:2d:5f:4d:99:56:e4:d9:b7:b2:60:10:
4c:95:da:e4:47:37:56:2c:b5:ba:d8:6b:84:e2:bc:
e9:79:44:13:6e:7c:92:9e:88:43:ab:11:b5:1d:e2:
f4:ef:64:c6:88:bd:29:c0:80:ec:bd:1c:f0:38:91:
07:14:81:89:ce:26:7d:a0:cc:5e:01:d9:45:8e:87:
6b:43:80:c6:de:db:d3:40:60:09:47:aa:e2:a6:b1:
f8:e5:05:b5:27:4b:36:94:15:00:99:ca:51:5e:ec:
07:41:34:78:63:c9:15:94:56:d2:95:06:57:13:2d:
78:9b:ac:63:6a:67:73:96:e0:e2:2b:f6:9f:12:74:
d7:03:81:13:86:b6:52:d3:87:7b:56:8b:f0:12:91:
35:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5D:BC:91:7F:3D:94:00:DF:47:88:28:43:18:67:21:60:7B:5A:9A
X509v3 Authority Key Identifier:
keyid:EE:FB:E8:36:9A:7B:BC:03:A8:6F:BE:63:9B:7E:FA:A0:2B:71:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/L128kX89lADfR4goQxhnIWB7Wpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.56.0/23
185.190.26.0/24
194.48.200.0/24
Signature Algorithm: sha256WithRSAEncryption
20:dc:a6:e9:77:0f:4f:8b:a1:9d:ad:71:41:b9:d6:3c:c9:0c:
9a:3d:c1:5f:ad:24:02:2d:73:b9:a8:17:e6:ae:2d:f1:ac:34:
30:5c:56:22:61:f8:df:1a:14:39:e3:da:6c:97:6f:ac:b9:aa:
64:17:cc:ea:25:80:80:aa:76:66:a9:84:98:b4:6a:6d:6b:e9:
88:fa:49:af:bd:eb:56:57:5b:7a:85:70:90:3b:99:e0:05:75:
c9:11:6b:a2:c0:28:6e:d7:5a:0f:82:3f:72:1e:15:de:76:0b:
ed:8e:6c:ed:49:a7:b9:9f:c7:d4:3f:55:35:39:ee:b8:c3:68:
a7:ee:fc:0b:1f:a9:8a:70:01:b2:42:de:4e:59:24:d2:68:5b:
a6:c9:26:85:17:f2:cf:51:b9:68:eb:07:c2:b5:1b:10:aa:5c:
98:ec:85:c4:00:95:03:2a:11:fc:2f:d3:79:7f:cc:76:d7:56:
74:56:69:d0:35:76:4d:6f:5b:87:2e:2a:8e:a5:f1:66:f6:c6:
01:b8:6a:85:21:53:60:90:7e:76:ef:b2:d0:20:54:85:95:13:
4e:19:66:f5:88:3e:26:c3:91:4c:94:f2:3d:4a:cf:fa:f5:c6:
1c:93:f5:9f:98:6f:46:b3:fd:d0:cc:fe:e6:9c:f7:db:64:c0:
07:f5:52:7a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY9bajA6CwUqn5mX4KPQqlrZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZmJlODM2OWE3YmJjMDNhODZmYmU2MzliN2VmYWEwMmI3
MTcyODcwHhcNMjQwNTA5MDMzMzU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjVkYmM5MTdmM2Q5NDAwZGY0Nzg4Mjg0MzE4NjcyMTYwN2I1YTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI6Dndl3XtyELR98DpNVZ7A3idFE
alePadFVK/GfTECc00UNs3DH0DtZ9vctAqqwDY/33kz2jQBmODMDmzuwvdbYmd78
tw9FygK5iXSTdKXaSUQkO/7juxz49RL3nWpCcGTg/p2P3jnwnzKwLV9NmVbk2bey
YBBMldrkRzdWLLW62GuE4rzpeUQTbnySnohDqxG1HeL072TGiL0pwIDsvRzwOJEH
FIGJziZ9oMxeAdlFjodrQ4DG3tvTQGAJR6riprH45QW1J0s2lBUAmcpRXuwHQTR4
Y8kVlFbSlQZXEy14m6xjamdzluDiK/afEnTXA4EThrZS04d7VovwEpE1gQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFC9dvJF/PZQA30eIKEMYZyFge1qaMB8GA1UdIwQY
MBaAFO776Daae7wDqG++Y5t++qArcXKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3Z2b05wcDd2QU9vYjc1am0zNzZvQ3R4Y29jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xYmU5OTktNWE1OS00YzEwLTkyZmYt
ZGExYjU4NjE4ODQxLzEvTDEyOGtYODlsQURmUjRnb1F4aG5JV0I3V3BvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8xYmU5OTktNWE1OS00YzEwLTkyZmYtZGExYjU4NjE4ODQx
LzEvN3Z2b05wcDd2QU9vYjc1am0zNzZvQ3R4Y29jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW8E4AwQA
ub4aAwQAwjDIMA0GCSqGSIb3DQEBCwUAA4IBAQAg3Kbpdw9Pi6GdrXFBudY8yQya
PcFfrSQCLXO5qBfmri3xrDQwXFYiYfjfGhQ549psl2+suapkF8zqJYCAqnZmqYSY
tGpta+mI+kmvvetWV1t6hXCQO5ngBXXJEWuiwChu11oPgj9yHhXedgvtjmztSae5
n8fUP1U1Oe64w2in7vwLH6mKcAGyQt5OWSTSaFumySaFF/LPUblo6wfCtRsQqlyY
7IXEAJUDKhH8L9N5f8x211Z0VmnQNXZNb1uHLiqOpfFm9sYBuGqFIVNgkH5277LQ
IFSFlRNOGWb1iD4mw5FMlPI9Ss/69cYck/WfmG9Gs/3QzP7mnPfbZMAH9VJ6
-----END CERTIFICATE-----
Generated at Wed Jun 26 12:43:56 2024 by rpki-client on console-ams.rpki-client.org