Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/tVxabC6pp13p8ISdSQRBU-4wODU.roa
File: tVxabC6pp13p8ISdSQRBU-4wODU.roa (raw, json)
Hash identifier: nv5gU1apPgHXsuLdw65qlSz9i8nkyLkpIeJ5dM+pwUg=
Subject key identifier: B5:5C:5A:6C:2E:A9:A7:5D:E9:F0:84:9D:49:04:41:53:EE:30:38:35
Certificate issuer: /CN=fcf2cf7284d7a0346e82f378ad830f57c3961b6d
Certificate serial: 018CCA9A0BF6D29F995F16CF30969A43CE32
Authority key identifier: FC:F2:CF:72:84:D7:A0:34:6E:82:F3:78:AD:83:0F:57:C3:96:1B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/tVxabC6pp13p8ISdSQRBU-4wODU.roa
Signing time: Tue 02 Jan 2024 14:35:42 +0000
ROA not before: Tue 02 Jan 2024 14:35:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49722
IP address blocks: 91.215.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:9a:0b:f6:d2:9f:99:5f:16:cf:30:96:9a:43:ce:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf2cf7284d7a0346e82f378ad830f57c3961b6d
Validity
Not Before: Jan 2 14:35:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b55c5a6c2ea9a75de9f0849d49044153ee303835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:51:f2:1c:ee:aa:05:0d:ef:e2:8b:e5:71:be:
c9:22:3e:fe:91:b6:4e:94:bb:f4:81:81:64:0e:a8:
5d:56:79:cb:f6:3e:b1:eb:07:5c:4b:b1:bd:07:ba:
22:88:d3:d3:a5:0c:97:e4:3f:5d:ee:2a:9e:21:b0:
82:5d:f6:6d:92:45:53:50:d5:93:5a:87:85:4d:11:
1f:7f:a4:e9:01:47:33:ba:2d:2b:2f:19:25:57:66:
14:67:41:59:c2:25:38:7b:1f:62:a5:ec:44:d4:5d:
0c:b8:62:48:6b:86:e4:c7:42:f1:71:91:5f:d0:2e:
b4:72:cd:96:66:7d:76:81:16:f0:a0:85:aa:15:a9:
f0:85:75:1f:2d:d1:0a:27:1a:ca:6c:8b:b4:78:3b:
26:cc:c4:ac:9f:00:8e:ed:23:b9:65:94:96:71:cf:
21:27:f2:89:75:e4:f8:36:71:df:7c:fa:e4:a5:49:
3f:d9:14:34:a1:b6:2d:e0:d2:81:f5:cc:f5:fa:e6:
b3:01:fd:e4:52:52:3b:04:d5:2f:31:30:9f:8b:88:
8e:b1:fe:b4:03:df:fb:b2:81:29:db:0b:ac:69:b6:
1c:df:fd:2d:95:8e:da:93:8a:ab:14:70:c4:21:53:
8d:de:a3:a1:a6:41:ce:de:86:86:24:54:84:f1:2c:
e7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5C:5A:6C:2E:A9:A7:5D:E9:F0:84:9D:49:04:41:53:EE:30:38:35
X509v3 Authority Key Identifier:
keyid:FC:F2:CF:72:84:D7:A0:34:6E:82:F3:78:AD:83:0F:57:C3:96:1B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/tVxabC6pp13p8ISdSQRBU-4wODU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.224.0/22
Signature Algorithm: sha256WithRSAEncryption
35:97:94:41:9a:a2:c2:75:5f:dd:4a:05:a7:6e:4c:c9:b2:1e:
3c:71:db:74:c0:b7:51:e7:84:ed:8a:10:f0:7d:04:24:74:8d:
66:fb:ed:21:fd:e7:14:ea:c3:79:cb:4d:ef:68:8c:1c:32:17:
0e:40:df:a4:d9:e0:ce:33:c9:30:91:df:1a:84:e4:69:0d:e4:
77:fb:cb:ec:a4:2d:79:bb:c7:87:a8:75:dc:3d:1f:4d:0a:31:
61:12:5f:7e:9f:5b:0f:05:d9:68:e2:71:06:75:54:b8:46:ab:
7c:38:4c:e5:37:85:0a:cd:b2:73:0c:2e:05:cb:5b:df:35:d3:
c9:c1:97:3f:dc:9f:fe:ed:f3:31:6a:b8:16:5d:57:c9:a2:01:
b8:bf:fb:09:87:3a:c1:29:88:b5:f3:2f:48:6f:3a:9a:60:44:
a3:a1:de:86:43:d3:ba:37:9b:12:81:e0:75:34:cf:fa:3e:3e:
2f:06:a3:fd:f5:46:60:68:28:97:ac:ad:65:cd:ce:cd:01:7e:
ee:fd:8b:b4:18:56:80:5c:e8:e2:49:35:db:46:56:24:54:95:
1c:79:01:a9:c9:37:1c:a2:ce:3f:bc:ca:b3:94:e4:25:47:89:
6d:7d:1d:b7:be:a5:a3:43:43:40:36:f1:e0:98:f4:e0:a7:8f:
4d:62:e5:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKmgv20p+ZXxbPMJaaQ84yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZjJjZjcyODRkN2EwMzQ2ZTgyZjM3OGFkODMwZjU3YzM5
NjFiNmQwHhcNMjQwMTAyMTQzNTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTVjNWE2YzJlYTlhNzVkZTlmMDg0OWQ0OTA0NDE1M2VlMzAzODM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVHyHO6qBQ3v4ovlcb7JIj7+kbZO
lLv0gYFkDqhdVnnL9j6x6wdcS7G9B7oiiNPTpQyX5D9d7iqeIbCCXfZtkkVTUNWT
WoeFTREff6TpAUczui0rLxklV2YUZ0FZwiU4ex9ipexE1F0MuGJIa4bkx0LxcZFf
0C60cs2WZn12gRbwoIWqFanwhXUfLdEKJxrKbIu0eDsmzMSsnwCO7SO5ZZSWcc8h
J/KJdeT4NnHffPrkpUk/2RQ0obYt4NKB9cz1+uazAf3kUlI7BNUvMTCfi4iOsf60
A9/7soEp2wusabYc3/0tlY7ak4qrFHDEIVON3qOhpkHO3oaGJFSE8SznnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLVcWmwuqadd6fCEnUkEQVPuMDg1MB8GA1UdIwQY
MBaAFPzyz3KE16A0boLzeK2DD1fDlhttMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1BMUGNvVFhvRFJ1Z3ZONHJZTVBWOE9XRzIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kZGFkOWItYzlmMS00MzFiLWIwOTMt
YjY4MzViNzMyYWQ2LzEvdFZ4YWJDNnBwMTNwOElTZFNRUkJVLTR3T0RVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9kZGFkOWItYzlmMS00MzFiLWIwOTMtYjY4MzViNzMyYWQ2
LzEvX1BMUGNvVFhvRFJ1Z3ZONHJZTVBWOE9XRzIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9fgMA0G
CSqGSIb3DQEBCwUAA4IBAQA1l5RBmqLCdV/dSgWnbkzJsh48cdt0wLdR54TtihDw
fQQkdI1m++0h/ecU6sN5y03vaIwcMhcOQN+k2eDOM8kwkd8ahORpDeR3+8vspC15
u8eHqHXcPR9NCjFhEl9+n1sPBdlo4nEGdVS4Rqt8OEzlN4UKzbJzDC4Fy1vfNdPJ
wZc/3J/+7fMxargWXVfJogG4v/sJhzrBKYi18y9IbzqaYESjod6GQ9O6N5sSgeB1
NM/6Pj4vBqP99UZgaCiXrK1lzc7NAX7u/Yu0GFaAXOjiSTXbRlYkVJUceQGpyTcc
os4/vMqzlOQlR4ltfR23vqWjQ0NANvHgmPTgp49NYuUR
-----END CERTIFICATE-----
Generated at Sat Jun 8 06:44:20 2024 by rpki-client on console-ams.rpki-client.org