Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/D43cCV1NaxcyuyRHLQGbcwBQ7Xg.roa
File: D43cCV1NaxcyuyRHLQGbcwBQ7Xg.roa (raw, json)
Hash identifier: 8fngCbEmtjK1a5UniZJ031ZVBruBdCeRcuZVslavI8Q=
Subject key identifier: 0F:8D:DC:09:5D:4D:6B:17:32:BB:24:47:2D:01:9B:73:00:50:ED:78
Certificate issuer: /CN=acf910f36291c3c224ddb596d956543197f163de
Certificate serial: 018CC72722416A8575BA31F930DB6F5D18FB
Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/D43cCV1NaxcyuyRHLQGbcwBQ7Xg.roa
Signing time: Mon 01 Jan 2024 22:31:19 +0000
ROA not before: Mon 01 Jan 2024 22:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198849
IP address blocks: 91.109.251.0/24 maxlen: 24
91.109.252.0/24 maxlen: 24
91.109.253.0/24 maxlen: 24
91.109.248.0/24 maxlen: 24
91.109.249.0/24 maxlen: 24
91.109.250.0/24 maxlen: 24
91.109.248.0/21 maxlen: 21
91.109.254.0/24 maxlen: 24
91.109.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:22:41:6a:85:75:ba:31:f9:30:db:6f:5d:18:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf910f36291c3c224ddb596d956543197f163de
Validity
Not Before: Jan 1 22:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f8ddc095d4d6b1732bb24472d019b730050ed78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:2f:54:3f:0f:04:cd:56:2f:79:ba:c9:67:
e1:5c:e6:b2:bc:25:4b:93:86:83:24:5d:84:53:45:
93:bc:cf:63:e3:9a:ea:b4:f5:07:46:27:24:c0:02:
71:7e:4b:90:77:d6:51:10:1c:a0:32:f4:69:67:19:
be:47:ec:f1:cf:93:da:2c:bd:64:d8:2d:cb:5e:16:
d7:a1:84:4c:cb:e6:8b:c3:8f:f6:29:27:d8:c5:78:
7d:9b:6c:94:6c:b3:02:5a:e5:63:1a:4d:4f:3a:e8:
b9:8c:28:5e:67:3e:fc:2c:52:59:ae:35:01:ac:cc:
e7:60:a1:fe:e6:67:f3:8e:21:00:40:c5:9b:90:22:
f9:a5:ee:39:f6:de:74:e0:c9:d6:7a:22:bc:0a:bb:
11:ef:f4:45:6f:50:7f:a8:e9:46:fc:8d:94:2f:58:
b6:2b:5a:94:2a:78:96:83:90:f5:10:67:2d:74:46:
a1:02:19:97:90:0c:1f:f2:b9:d6:b5:51:d1:e5:ad:
0d:9c:d7:2b:d0:7a:12:bf:d6:6b:26:03:69:e2:3b:
1e:74:5a:95:62:1c:64:02:fa:da:e7:df:31:ab:d9:
0c:ba:80:6d:47:f1:32:c7:77:e7:6d:6d:28:5c:5e:
b7:4c:af:d4:6b:8b:66:47:f7:39:23:d7:73:79:d0:
32:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8D:DC:09:5D:4D:6B:17:32:BB:24:47:2D:01:9B:73:00:50:ED:78
X509v3 Authority Key Identifier:
keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/D43cCV1NaxcyuyRHLQGbcwBQ7Xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.248.0/21
Signature Algorithm: sha256WithRSAEncryption
a6:ec:8a:02:6e:d1:1e:a3:10:97:e2:c9:00:e8:19:c6:e2:01:
5f:8d:cc:dd:c2:de:38:de:92:24:a3:63:87:a7:d4:88:6a:fc:
9d:e0:70:15:20:4f:ca:fd:88:04:9b:1e:93:e3:6f:47:7d:59:
07:3f:7e:81:c8:7c:08:6c:31:e8:62:7e:ff:f5:7a:18:fa:a4:
c9:0e:1d:0c:f9:b1:1e:ec:e3:77:11:ba:c2:ca:f6:19:8b:84:
c3:1d:f1:3c:59:5e:b9:5b:1b:b2:16:93:36:28:ee:5a:b0:40:
19:b0:41:b6:c3:8b:6f:12:d3:28:de:e0:7c:4d:a3:8b:a5:3b:
99:9e:e8:74:f7:26:68:41:77:b1:74:2b:0c:4d:e4:8a:3e:90:
00:97:92:4d:b7:55:51:db:96:c6:18:1a:41:2b:ff:e0:23:05:
0f:7b:30:ef:5b:47:c6:6e:68:37:f6:8f:31:06:86:f6:87:2b:
d5:36:06:b1:3a:50:45:18:a3:30:e9:b7:18:1c:b3:9e:3a:0f:
29:39:c0:31:62:bd:83:f2:14:ea:d1:ef:cd:9d:87:bf:a5:f6:
94:4e:9d:26:32:e9:12:0c:9a:d4:21:32:17:43:38:bf:73:d0:
4c:3b:9e:77:40:d7:bc:77:e7:e9:0e:b4:84:39:d1:f4:93:4f:
8c:68:94:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJyJBaoV1ujH5MNtvXRj7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZjkxMGYzNjI5MWMzYzIyNGRkYjU5NmQ5NTY1NDMxOTdm
MTYzZGUwHhcNMjQwMTAxMjIzMTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjhkZGMwOTVkNGQ2YjE3MzJiYjI0NDcyZDAxOWI3MzAwNTBlZDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZovVD8PBM1WL3m6yWfhXOayvCVL
k4aDJF2EU0WTvM9j45rqtPUHRickwAJxfkuQd9ZREBygMvRpZxm+R+zxz5PaLL1k
2C3LXhbXoYRMy+aLw4/2KSfYxXh9m2yUbLMCWuVjGk1POui5jCheZz78LFJZrjUB
rMznYKH+5mfzjiEAQMWbkCL5pe459t504MnWeiK8CrsR7/RFb1B/qOlG/I2UL1i2
K1qUKniWg5D1EGctdEahAhmXkAwf8rnWtVHR5a0NnNcr0HoSv9ZrJgNp4jsedFqV
YhxkAvra598xq9kMuoBtR/Eyx3fnbW0oXF63TK/Ua4tmR/c5I9dzedAyDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA+N3AldTWsXMrskRy0Bm3MAUO14MB8GA1UdIwQY
MBaAFKz5EPNikcPCJN21ltlWVDGX8WPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xZjVlMDctMzJiNi00MTE0LThiMGQt
ZDNiNThmNjk4MTQ4LzEvRDQzY0NWMU5heGN5dXlSSExRR2Jjd0JRN1hnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8xZjVlMDctMzJiNi00MTE0LThiMGQtZDNiNThmNjk4MTQ4
LzEvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDW234MA0G
CSqGSIb3DQEBCwUAA4IBAQCm7IoCbtEeoxCX4skA6BnG4gFfjczdwt443pIko2OH
p9SIavyd4HAVIE/K/YgEmx6T429HfVkHP36ByHwIbDHoYn7/9XoY+qTJDh0M+bEe
7ON3EbrCyvYZi4TDHfE8WV65WxuyFpM2KO5asEAZsEG2w4tvEtMo3uB8TaOLpTuZ
nuh09yZoQXexdCsMTeSKPpAAl5JNt1VR25bGGBpBK//gIwUPezDvW0fGbmg39o8x
Bob2hyvVNgaxOlBFGKMw6bcYHLOeOg8pOcAxYr2D8hTq0e/NnYe/pfaUTp0mMukS
DJrUITIXQzi/c9BMO553QNe8d+fpDrSEOdH0k0+MaJRn
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:51:52 2024 by rpki-client on console-ams.rpki-client.org