Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/RdIfEaGsdAKAYeOJDtKHWcavyU8.roa
File: RdIfEaGsdAKAYeOJDtKHWcavyU8.roa (raw, json)
Hash identifier: SSMEyHeWMlP2Lh/RcgPWO981s53eLF7yWU8DeywIxB0=
Subject key identifier: 45:D2:1F:11:A1:AC:74:02:80:61:E3:89:0E:D2:87:59:C6:AF:C9:4F
Certificate issuer: /CN=0ede17b8caf02461bf54c0964ed38a2590062f94
Certificate serial: 018CC725BDB5710601CAC365023CAB25B2B3
Authority key identifier: 0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/RdIfEaGsdAKAYeOJDtKHWcavyU8.roa
Signing time: Mon 01 Jan 2024 22:29:48 +0000
ROA not before: Mon 01 Jan 2024 22:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196659
IP address blocks: 91.102.232.0/21 maxlen: 24
91.102.233.0/24 maxlen: 24
91.102.238.0/24 maxlen: 24
91.102.234.0/24 maxlen: 24
91.102.239.0/24 maxlen: 24
91.102.235.0/24 maxlen: 24
91.102.236.0/24 maxlen: 24
91.102.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:bd:b5:71:06:01:ca:c3:65:02:3c:ab:25:b2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ede17b8caf02461bf54c0964ed38a2590062f94
Validity
Not Before: Jan 1 22:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45d21f11a1ac74028061e3890ed28759c6afc94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b4:ad:07:9a:a9:9c:42:ad:0b:0f:dc:f4:36:
b0:16:a9:cc:93:14:00:df:8f:73:28:19:78:89:b5:
2a:ab:bd:b0:3a:69:b7:11:f0:72:50:c9:41:20:07:
dc:d0:fe:51:98:02:4e:93:d9:c0:95:99:23:07:f0:
3e:70:0a:3f:4f:0c:51:d5:c5:18:cd:60:d3:4f:79:
5a:5b:dd:1f:39:5a:cc:c8:12:c1:81:b8:fc:78:7f:
77:ad:30:e4:e3:2a:b2:04:de:a2:02:e3:ae:ae:a3:
c7:c8:f6:0a:fe:c9:39:fd:04:80:2a:38:12:fe:d1:
27:ce:5d:aa:2d:9b:d4:e7:30:5f:eb:5a:09:28:ca:
de:ea:86:f8:9c:cf:fd:12:37:54:16:f5:89:92:b2:
04:3d:3b:63:b3:30:b4:3e:62:de:45:ad:8d:dd:1b:
39:cd:e0:8f:86:9e:92:44:7d:1a:1b:b4:67:c4:7d:
18:a5:01:c3:97:d3:1f:7e:14:4e:1d:33:9f:6b:8a:
0b:29:d9:a0:09:83:0a:46:a6:49:d8:a0:30:ff:f9:
c3:ea:d8:c8:3f:7e:7a:93:7a:94:4f:c1:94:97:54:
b9:d3:bb:0a:f1:a8:4a:1b:13:f2:5c:5b:69:be:78:
0d:44:5f:c9:6e:bb:53:8f:82:6e:6d:9c:34:c9:09:
30:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D2:1F:11:A1:AC:74:02:80:61:E3:89:0E:D2:87:59:C6:AF:C9:4F
X509v3 Authority Key Identifier:
keyid:0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/RdIfEaGsdAKAYeOJDtKHWcavyU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.232.0/21
Signature Algorithm: sha256WithRSAEncryption
b5:41:3b:e6:83:99:34:d8:4d:20:e6:3d:0f:54:f4:9a:2d:13:
5c:70:39:d4:99:97:91:1c:78:a1:79:0d:01:12:db:6b:b5:9d:
39:81:71:4d:fc:29:7f:a6:67:2e:d6:c1:4a:ce:36:fd:02:b1:
c9:01:fe:1d:91:ec:ea:ce:2a:b8:ec:e6:28:d4:ba:9e:31:81:
ab:51:96:af:a4:0d:57:af:5b:a7:90:29:3c:8a:5a:55:c1:43:
ea:c9:2a:49:55:5d:f6:bc:53:bf:a4:ee:20:c3:cd:cb:0a:ed:
ef:e7:09:f6:6d:c9:2e:82:02:23:29:12:31:53:2c:b7:4a:52:
79:a4:cb:78:8b:02:eb:8a:17:94:3e:45:fa:06:36:d0:a1:d3:
2b:98:4d:90:c2:70:e2:8f:9f:32:d4:6d:89:61:8a:f3:b1:be:
71:29:38:c2:24:8b:55:2e:74:70:24:1e:01:d1:ee:5e:33:ee:
33:4d:34:d9:2a:81:92:d6:93:b3:6b:d1:c8:54:e8:c3:87:40:
3e:68:15:54:07:ed:a9:3c:39:8f:36:82:34:51:69:f5:52:10:
98:89:83:f6:6f:65:2e:db:4b:df:d9:68:30:ba:a1:1a:c5:73:
91:b7:56:83:a3:a5:29:1c:d1:59:c0:a4:aa:11:21:5b:79:d4:
8c:46:b6:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJb21cQYBysNlAjyrJbKzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZGUxN2I4Y2FmMDI0NjFiZjU0YzA5NjRlZDM4YTI1OTAw
NjJmOTQwHhcNMjQwMTAxMjIyOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWQyMWYxMWExYWM3NDAyODA2MWUzODkwZWQyODc1OWM2YWZjOTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27StB5qpnEKtCw/c9DawFqnMkxQA
349zKBl4ibUqq72wOmm3EfByUMlBIAfc0P5RmAJOk9nAlZkjB/A+cAo/TwxR1cUY
zWDTT3laW90fOVrMyBLBgbj8eH93rTDk4yqyBN6iAuOurqPHyPYK/sk5/QSAKjgS
/tEnzl2qLZvU5zBf61oJKMre6ob4nM/9EjdUFvWJkrIEPTtjszC0PmLeRa2N3Rs5
zeCPhp6SRH0aG7RnxH0YpQHDl9MffhROHTOfa4oLKdmgCYMKRqZJ2KAw//nD6tjI
P356k3qUT8GUl1S507sK8ahKGxPyXFtpvngNRF/JbrtTj4JubZw0yQkwiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEXSHxGhrHQCgGHjiQ7Sh1nGr8lPMB8GA1UdIwQY
MBaAFA7eF7jK8CRhv1TAlk7TiiWQBi+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHQ0WHVNcndKR0dfVk1DV1R0T0tKWkFHTDVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lNGJiNTEtYjk2My00YjQ2LWFhMjct
MjZiZjhjY2Q3Yjc0LzEvUmRJZkVhR3NkQUtBWWVPSkR0S0hXY2F2eVU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9lNGJiNTEtYjk2My00YjQ2LWFhMjctMjZiZjhjY2Q3Yjc0
LzEvRHQ0WHVNcndKR0dfVk1DV1R0T0tKWkFHTDVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDW2boMA0G
CSqGSIb3DQEBCwUAA4IBAQC1QTvmg5k02E0g5j0PVPSaLRNccDnUmZeRHHiheQ0B
EttrtZ05gXFN/Cl/pmcu1sFKzjb9ArHJAf4dkezqziq47OYo1LqeMYGrUZavpA1X
r1unkCk8ilpVwUPqySpJVV32vFO/pO4gw83LCu3v5wn2bckuggIjKRIxUyy3SlJ5
pMt4iwLriheUPkX6BjbQodMrmE2QwnDij58y1G2JYYrzsb5xKTjCJItVLnRwJB4B
0e5eM+4zTTTZKoGS1pOza9HIVOjDh0A+aBVUB+2pPDmPNoI0UWn1UhCYiYP2b2Uu
20vf2WgwuqEaxXORt1aDo6UpHNFZwKSqESFbedSMRrb0
-----END CERTIFICATE-----
Generated at Sun Jun 2 06:46:59 2024 by rpki-client on console-ams.rpki-client.org