Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/um9ivXkpTnP9Z7S1UfoKmG4ezyA.roa
File: um9ivXkpTnP9Z7S1UfoKmG4ezyA.roa (raw, json)
Hash identifier: n1jBpgPXO1Dy+tDpm5Vr4qO54Ix4P71xQScYibmzJX8=
Subject key identifier: BA:6F:62:BD:79:29:4E:73:FD:67:B4:B5:51:FA:0A:98:6E:1E:CF:20
Certificate issuer: /CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Certificate serial: 018E05DAC9D5ED640C65A72F0D7886EB749A
Authority key identifier: 18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/um9ivXkpTnP9Z7S1UfoKmG4ezyA.roa
Signing time: Sun 03 Mar 2024 19:46:48 +0000
ROA not before: Sun 03 Mar 2024 19:46:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 91.207.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:05:da:c9:d5:ed:64:0c:65:a7:2f:0d:78:86:eb:74:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Validity
Not Before: Mar 3 19:46:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba6f62bd79294e73fd67b4b551fa0a986e1ecf20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:01:78:62:7e:26:c3:19:1d:49:2b:21:be:
3c:dc:2b:75:bd:3d:00:1f:df:a3:1d:80:39:6a:d1:
b3:85:4f:32:d5:da:f8:e1:83:63:21:6d:87:c2:5d:
0d:99:1a:34:a2:1f:9b:e6:77:ce:87:2b:f3:8e:22:
4d:4f:9b:71:3f:d5:d0:a3:8f:0f:b1:6d:64:47:3d:
88:7a:26:c7:5a:aa:79:78:65:11:ef:32:ea:80:3f:
bc:85:da:cc:e6:83:ab:8f:b9:96:2c:ba:fc:9d:1f:
4e:ff:ad:da:61:cb:45:1a:d1:2e:e6:91:eb:6d:27:
99:a0:f8:ba:8d:01:7d:29:7e:ef:b0:c6:da:49:46:
2a:44:7b:ec:45:6a:b4:a0:54:ce:7c:84:4a:34:46:
b5:66:c7:0a:d7:19:97:26:81:da:64:04:7e:84:3c:
9a:a9:f0:16:ee:20:32:18:1d:4b:0e:cc:48:14:6e:
2e:44:ba:85:59:c4:2c:05:f8:0b:5b:74:9d:20:9a:
ff:ff:ea:2f:fb:6e:ab:65:90:eb:f3:7b:c4:11:66:
3e:84:ed:b7:0a:b8:16:c9:d7:37:5f:72:0b:df:86:
f1:61:fb:c9:01:93:6b:c0:3d:48:c3:6e:31:e0:da:
b1:19:10:6d:9c:ed:bc:3c:46:f2:00:e6:2f:30:39:
73:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6F:62:BD:79:29:4E:73:FD:67:B4:B5:51:FA:0A:98:6E:1E:CF:20
X509v3 Authority Key Identifier:
keyid:18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/um9ivXkpTnP9Z7S1UfoKmG4ezyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.116.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:17:f4:5f:cd:4c:60:ef:1b:19:ef:e6:66:26:8a:64:6c:b4:
3a:82:3a:8b:4c:f5:d6:c5:13:15:32:0a:f5:ce:81:cc:70:31:
81:b0:1b:cd:42:e8:0e:fa:a1:77:e5:74:cc:ad:4c:51:6c:3f:
ed:30:ac:b7:1f:c7:8e:73:24:fd:ef:36:2d:46:fd:d2:fb:07:
06:24:6a:ae:31:bf:ea:34:a1:0b:eb:a6:6a:cc:b1:c5:49:73:
91:df:66:ed:c9:cb:5e:f4:d6:8e:81:3e:b8:43:67:03:92:4c:
05:1f:ea:93:4e:f7:0f:a6:0c:57:a0:5c:53:a3:9d:0e:e0:8f:
cc:58:d6:be:a4:5e:48:49:fc:c7:61:df:78:96:e7:a0:d0:77:
4a:4a:f3:2c:b2:a6:4e:6f:39:ff:01:1f:0c:b3:88:fc:01:b3:
f2:10:27:5b:71:1a:66:22:25:3a:81:8b:71:c4:3f:1e:ef:d8:
b2:9a:9b:8f:81:95:63:09:de:b9:1e:ce:2a:9b:1d:6b:00:7b:
ae:71:1f:26:e6:0b:00:ff:2e:08:fc:a1:f1:98:c4:ed:16:6b:
9d:0f:7a:e4:74:a4:7e:ce:59:ea:e8:ca:5b:af:8f:59:a0:46:
4e:e3:6f:05:4e:44:95:eb:7c:77:59:49:c5:21:85:0c:7b:e8:
7f:5e:19:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY4F2snV7WQMZacvDXiG63SaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MjFjYzkwOGRmYTkxMTEwZDExMTlhNmRlMWVjNDFlM2Vj
ZmYzNDYwHhcNMjQwMzAzMTk0NjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTZmNjJiZDc5Mjk0ZTczZmQ2N2I0YjU1MWZhMGE5ODZlMWVjZjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9wBeGJ+JsMZHUkrIb483Ct1vT0A
H9+jHYA5atGzhU8y1dr44YNjIW2Hwl0NmRo0oh+b5nfOhyvzjiJNT5txP9XQo48P
sW1kRz2IeibHWqp5eGUR7zLqgD+8hdrM5oOrj7mWLLr8nR9O/63aYctFGtEu5pHr
bSeZoPi6jQF9KX7vsMbaSUYqRHvsRWq0oFTOfIRKNEa1ZscK1xmXJoHaZAR+hDya
qfAW7iAyGB1LDsxIFG4uRLqFWcQsBfgLW3SdIJr//+ov+26rZZDr83vEEWY+hO23
CrgWydc3X3IL34bxYfvJAZNrwD1Iw24x4NqxGRBtnO28PEbyAOYvMDlzGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLpvYr15KU5z/We0tVH6CphuHs8gMB8GA1UdIwQY
MBaAFBghzJCN+pERDREZpt4exB4+z/NGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0NITWtJMzZrUkVORVJtbTNoN0VIajdQODBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC80NTZjNjItNDc0Ni00MWUwLTgwNDQt
OTIwNTk5ZjUyNjM3LzEvdW05aXZYa3BUblA5WjdTMVVmb0ttRzRlenlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC80NTZjNjItNDc0Ni00MWUwLTgwNDQtOTIwNTk5ZjUyNjM3
LzEvR0NITWtJMzZrUkVORVJtbTNoN0VIajdQODBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW890MA0G
CSqGSIb3DQEBCwUAA4IBAQCgF/RfzUxg7xsZ7+ZmJopkbLQ6gjqLTPXWxRMVMgr1
zoHMcDGBsBvNQugO+qF35XTMrUxRbD/tMKy3H8eOcyT97zYtRv3S+wcGJGquMb/q
NKEL66ZqzLHFSXOR32btycte9NaOgT64Q2cDkkwFH+qTTvcPpgxXoFxTo50O4I/M
WNa+pF5ISfzHYd94lueg0HdKSvMssqZObzn/AR8Ms4j8AbPyECdbcRpmIiU6gYtx
xD8e79iympuPgZVjCd65Hs4qmx1rAHuucR8m5gsA/y4I/KHxmMTtFmudD3rkdKR+
zlnq6Mpbr49ZoEZO428FTkSV63x3WUnFIYUMe+h/XhnA
-----END CERTIFICATE-----
Generated at Tue Nov 26 00:41:43 2024 by rpki-client on console-ams.rpki-client.org