Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/xLzzkktbBt99mMeyUZRhgpUbinM.roa
File: xLzzkktbBt99mMeyUZRhgpUbinM.roa (raw, json)
Hash identifier: 2Z7Ze3bDWoLddLTzuT/aB/4MMHmJvYVVWsV9WIs73zw=
Subject key identifier: C4:BC:F3:92:4B:5B:06:DF:7D:98:C7:B2:51:94:61:82:95:1B:8A:73
Certificate issuer: /CN=a006ca06965bee681c3531b426b599a401e1a5a4
Certificate serial: 018CC3B72727346EA1A8B7032416D8B9D34C
Authority key identifier: A0:06:CA:06:96:5B:EE:68:1C:35:31:B4:26:B5:99:A4:01:E1:A5:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/xLzzkktbBt99mMeyUZRhgpUbinM.roa
Signing time: Mon 01 Jan 2024 06:30:09 +0000
ROA not before: Mon 01 Jan 2024 06:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199040
IP address blocks: 91.216.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:27:27:34:6e:a1:a8:b7:03:24:16:d8:b9:d3:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a006ca06965bee681c3531b426b599a401e1a5a4
Validity
Not Before: Jan 1 06:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4bcf3924b5b06df7d98c7b251946182951b8a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:da:37:6f:9e:d9:ff:8f:45:91:0e:7d:fc:75:
a7:28:2f:93:b4:5a:96:34:0d:1e:f1:67:b6:e4:8f:
e5:46:df:b0:a4:52:97:d8:32:52:76:d4:12:af:d7:
c9:62:c0:40:8d:6f:b9:70:ce:9f:d9:7e:03:b9:f1:
b4:a9:21:87:6c:b9:34:4b:1f:f4:9f:5e:02:c7:f7:
64:03:84:df:a3:02:6a:21:28:3b:bc:72:29:7a:a4:
c0:27:a3:6c:87:0f:6d:fd:1d:32:74:21:6c:06:11:
2d:c9:c6:63:94:25:3d:f8:f3:06:11:5f:ed:04:70:
30:a2:60:25:a9:76:c7:06:3b:3e:f2:cb:ff:ab:67:
89:47:65:24:03:12:39:9d:a3:f2:9f:6f:8b:8b:16:
5a:73:9e:f6:9e:b9:02:2b:95:1a:04:bb:36:f6:4e:
f8:0b:c5:e9:ad:7b:dd:32:a3:22:69:d5:24:44:17:
a5:c9:1c:0a:a1:22:de:90:67:f4:3e:07:96:4a:47:
28:9d:d4:e9:70:6c:03:65:79:8f:4e:bd:7f:16:8e:
6e:ef:8c:e7:5c:fa:2c:44:a7:85:d9:fd:61:60:19:
6a:21:03:7d:b7:81:51:64:86:d8:75:a3:2f:c5:81:
f0:8f:05:14:db:2b:33:d9:5d:61:fb:2e:ba:9c:71:
92:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BC:F3:92:4B:5B:06:DF:7D:98:C7:B2:51:94:61:82:95:1B:8A:73
X509v3 Authority Key Identifier:
keyid:A0:06:CA:06:96:5B:EE:68:1C:35:31:B4:26:B5:99:A4:01:E1:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/xLzzkktbBt99mMeyUZRhgpUbinM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.48.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:47:5e:15:af:67:c2:b8:fc:e5:ac:13:fe:06:e7:7e:80:40:
e1:a8:09:ba:28:7f:93:e7:9e:a1:b7:aa:d3:c8:cf:fb:31:43:
bd:24:9e:b6:46:53:f4:e0:99:90:a8:b9:37:2a:80:b8:69:ad:
da:c6:e9:60:09:40:63:80:35:62:ba:a1:a1:de:d6:05:68:a5:
ba:f2:a6:2e:e7:5c:8f:46:5d:23:18:15:ef:bb:05:f9:2a:ed:
6e:e6:7c:ce:62:85:38:10:42:fd:4b:29:3e:69:54:bf:ef:82:
a6:47:f3:d6:79:5e:c3:e1:36:e6:6c:76:42:f1:cb:51:ed:7c:
1f:c9:5d:90:60:fa:69:02:9b:74:0d:97:e7:b2:7f:93:1c:34:
7c:e2:a1:61:55:8c:b1:96:93:47:ad:ad:9b:6f:da:8d:fb:44:
50:e3:92:23:f9:44:e2:be:94:c8:bd:81:90:3d:de:71:93:02:
b9:d3:b9:cd:0d:6c:dd:1e:c9:3b:50:00:78:86:26:75:b6:a7:
6e:85:42:33:46:67:9c:15:d4:d7:77:d3:9d:44:63:f9:a7:20:
4f:01:a8:75:6d:48:06:11:92:37:b0:ae:9b:ee:39:c9:ae:ea:
cb:2b:4d:b2:be:b3:b7:4f:d9:7e:94:dd:46:55:15:34:a2:dd:
e1:81:30:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtycnNG6hqLcDJBbYudNMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMDZjYTA2OTY1YmVlNjgxYzM1MzFiNDI2YjU5OWE0MDFl
MWE1YTQwHhcNMjQwMTAxMDYzMDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGJjZjM5MjRiNWIwNmRmN2Q5OGM3YjI1MTk0NjE4Mjk1MWI4YTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlto3b57Z/49FkQ59/HWnKC+TtFqW
NA0e8We25I/lRt+wpFKX2DJSdtQSr9fJYsBAjW+5cM6f2X4DufG0qSGHbLk0Sx/0
n14Cx/dkA4TfowJqISg7vHIpeqTAJ6Nshw9t/R0ydCFsBhEtycZjlCU9+PMGEV/t
BHAwomAlqXbHBjs+8sv/q2eJR2UkAxI5naPyn2+LixZac572nrkCK5UaBLs29k74
C8XprXvdMqMiadUkRBelyRwKoSLekGf0PgeWSkcondTpcGwDZXmPTr1/Fo5u74zn
XPosRKeF2f1hYBlqIQN9t4FRZIbYdaMvxYHwjwUU2ysz2V1h+y66nHGSfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMS885JLWwbffZjHslGUYYKVG4pzMB8GA1UdIwQY
MBaAFKAGygaWW+5oHDUxtCa1maQB4aWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0FiS0JwWmI3bWdjTlRHMEpyV1pwQUhocGFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83ZTJiMGEtYThlZC00N2I3LTlkNzQt
YWI5NzVmN2QzNTMzLzEveEx6emtrdGJCdDk5bU1leVVaUmhncFViaW5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi83ZTJiMGEtYThlZC00N2I3LTlkNzQtYWI5NzVmN2QzNTMz
LzEvb0FiS0JwWmI3bWdjTlRHMEpyV1pwQUhocGFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9gwMA0G
CSqGSIb3DQEBCwUAA4IBAQCyR14Vr2fCuPzlrBP+Bud+gEDhqAm6KH+T556ht6rT
yM/7MUO9JJ62RlP04JmQqLk3KoC4aa3axulgCUBjgDViuqGh3tYFaKW68qYu51yP
Rl0jGBXvuwX5Ku1u5nzOYoU4EEL9Syk+aVS/74KmR/PWeV7D4TbmbHZC8ctR7Xwf
yV2QYPppApt0DZfnsn+THDR84qFhVYyxlpNHra2bb9qN+0RQ45Ij+UTivpTIvYGQ
Pd5xkwK507nNDWzdHsk7UAB4hiZ1tqduhUIzRmecFdTXd9OdRGP5pyBPAah1bUgG
EZI3sK6b7jnJrurLK02yvrO3T9l+lN1GVRU0ot3hgTB8
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:10:21 2024 by rpki-client on console-ams.rpki-client.org