Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/ps_iNrzQkUXwUMHemqACih1KZBA.roa
File: ps_iNrzQkUXwUMHemqACih1KZBA.roa (raw, json)
Hash identifier: SWbGQ9YJKlbg7m0dMbHigimDeD0vhZfQ7uUkxGVR1RU=
Subject key identifier: A6:CF:E2:36:BC:D0:91:45:F0:50:C1:DE:9A:A0:02:8A:1D:4A:64:10
Certificate issuer: /CN=0d6bad3f3dd0ac556f3f7a80d1c69b9fd964dd6c
Certificate serial: 018CC56E403DDC4245E38A890F292661B9F0
Authority key identifier: 0D:6B:AD:3F:3D:D0:AC:55:6F:3F:7A:80:D1:C6:9B:9F:D9:64:DD:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/ps_iNrzQkUXwUMHemqACih1KZBA.roa
Signing time: Mon 01 Jan 2024 14:29:46 +0000
ROA not before: Mon 01 Jan 2024 14:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57854
IP address blocks: 91.235.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:40:3d:dc:42:45:e3:8a:89:0f:29:26:61:b9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d6bad3f3dd0ac556f3f7a80d1c69b9fd964dd6c
Validity
Not Before: Jan 1 14:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6cfe236bcd09145f050c1de9aa0028a1d4a6410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:44:df:dd:25:ff:db:80:26:2d:fd:a6:a3:60:
47:c8:92:e7:d0:7f:02:13:1b:1c:43:1b:85:cc:cd:
f5:89:eb:c4:b3:11:35:02:52:b4:ff:e2:bf:01:47:
44:35:b1:8a:c3:f4:ad:e1:1d:22:81:b6:70:ad:10:
5d:b9:be:d7:3c:cf:35:f9:df:9a:9d:dd:2f:6a:a3:
50:c6:1d:89:38:50:c9:b1:a1:c8:1e:aa:fe:33:0e:
79:11:fa:12:39:ec:3b:41:2e:9e:30:38:77:0e:89:
14:80:32:d3:9e:22:e0:de:87:4e:d9:ec:5f:21:54:
51:4e:9b:39:97:8f:9e:9b:cf:d5:52:0d:16:a0:2a:
c6:3e:e7:4c:95:99:26:18:cd:77:4a:e0:d9:58:f1:
c8:8a:b2:5e:98:8d:02:fe:42:d7:3b:ef:7e:c5:b9:
e1:c8:5b:6b:37:ee:3b:0d:19:a9:76:2b:92:b9:f8:
17:54:1c:51:60:1a:33:da:ff:07:01:f1:f9:56:3b:
4f:8f:b6:d2:3c:15:86:c4:3b:54:2b:8c:76:b5:11:
21:d2:61:d3:7d:a1:2b:6d:1a:a6:1d:db:eb:6b:79:
d4:6b:4e:5e:5c:80:f6:2e:89:6a:3d:04:21:3e:f8:
7c:97:73:b4:f0:2a:9a:32:2c:2e:e6:7a:ad:8c:5d:
97:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CF:E2:36:BC:D0:91:45:F0:50:C1:DE:9A:A0:02:8A:1D:4A:64:10
X509v3 Authority Key Identifier:
keyid:0D:6B:AD:3F:3D:D0:AC:55:6F:3F:7A:80:D1:C6:9B:9F:D9:64:DD:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/ps_iNrzQkUXwUMHemqACih1KZBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.242.0/24
Signature Algorithm: sha256WithRSAEncryption
40:df:be:b7:d1:bf:44:32:0b:17:af:f4:b2:e2:6c:8c:ea:44:
cf:8b:ea:ed:f0:d5:a6:18:90:f2:56:f8:93:da:7f:eb:93:08:
03:fe:d0:05:ee:a8:ac:40:32:d5:34:d8:06:b8:5b:aa:35:f0:
54:ca:07:73:28:80:28:dd:11:70:57:65:99:50:3a:24:f8:25:
c0:41:4a:33:c3:a5:36:40:6d:5e:f5:7c:68:3c:e4:dd:ce:61:
e2:17:7d:a9:9b:7e:1d:6c:e2:31:8f:19:bd:6e:a4:11:61:33:
22:7b:5b:06:23:21:99:e7:5e:0f:f0:6d:83:9e:be:0e:5e:a6:
f4:2b:83:09:43:a4:48:26:f2:66:a5:62:8b:f6:b2:13:4d:ae:
b1:bb:47:a1:56:20:ad:33:86:17:b1:65:8b:c8:cf:ac:fa:18:
d8:7b:fa:55:24:6b:05:4d:87:34:53:11:75:42:ff:2f:29:11:
39:32:c6:65:70:ee:f7:21:97:72:f8:88:1d:fc:dc:05:86:85:
7c:e6:b5:ba:64:6b:1f:c0:56:7d:4f:25:8a:93:fc:17:d1:64:
d7:f0:48:b8:cb:32:7e:e2:72:d7:cf:6a:e1:7a:10:9e:3b:3c:
d7:de:b9:4a:9f:4a:21:fd:09:0b:40:15:84:1b:96:32:e6:99:
fd:1a:4c:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbkA93EJF44qJDykmYbnwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNmJhZDNmM2RkMGFjNTU2ZjNmN2E4MGQxYzY5YjlmZDk2
NGRkNmMwHhcNMjQwMTAxMTQyOTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmNmZTIzNmJjZDA5MTQ1ZjA1MGMxZGU5YWEwMDI4YTFkNGE2NDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkTf3SX/24AmLf2mo2BHyJLn0H8C
ExscQxuFzM31ievEsxE1AlK0/+K/AUdENbGKw/St4R0igbZwrRBdub7XPM81+d+a
nd0vaqNQxh2JOFDJsaHIHqr+Mw55EfoSOew7QS6eMDh3DokUgDLTniLg3odO2exf
IVRRTps5l4+em8/VUg0WoCrGPudMlZkmGM13SuDZWPHIirJemI0C/kLXO+9+xbnh
yFtrN+47DRmpdiuSufgXVBxRYBoz2v8HAfH5VjtPj7bSPBWGxDtUK4x2tREh0mHT
faErbRqmHdvra3nUa05eXID2LolqPQQhPvh8l3O08CqaMiwu5nqtjF2XCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKbP4ja80JFF8FDB3pqgAoodSmQQMB8GA1UdIwQY
MBaAFA1rrT890KxVbz96gNHGm5/ZZN1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFd1dFB6M1FyRlZ2UDNxQTBjYWJuOWxrM1d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9hY2E3MzYtNDA4OC00ODBiLWFmNWYt
ODliNmMyMTlkOTBiLzEvcHNfaU5yelFrVVh3VU1IZW1xQUNpaDFLWkJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9hY2E3MzYtNDA4OC00ODBiLWFmNWYtODliNmMyMTlkOTBi
LzEvRFd1dFB6M1FyRlZ2UDNxQTBjYWJuOWxrM1d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+vyMA0G
CSqGSIb3DQEBCwUAA4IBAQBA37630b9EMgsXr/Sy4myM6kTPi+rt8NWmGJDyVviT
2n/rkwgD/tAF7qisQDLVNNgGuFuqNfBUygdzKIAo3RFwV2WZUDok+CXAQUozw6U2
QG1e9XxoPOTdzmHiF32pm34dbOIxjxm9bqQRYTMie1sGIyGZ514P8G2Dnr4OXqb0
K4MJQ6RIJvJmpWKL9rITTa6xu0ehViCtM4YXsWWLyM+s+hjYe/pVJGsFTYc0UxF1
Qv8vKRE5MsZlcO73IZdy+Igd/NwFhoV85rW6ZGsfwFZ9TyWKk/wX0WTX8Ei4yzJ+
4nLXz2rhehCeOzzX3rlKn0oh/QkLQBWEG5Yy5pn9Gkzv
-----END CERTIFICATE-----
Generated at Fri May 17 18:44:51 2024 by rpki-client on console-fra.rpki-client.org