Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/meyLAIRIg1CjWqGfkM4JJAprMpk.roa
File: meyLAIRIg1CjWqGfkM4JJAprMpk.roa (raw, json)
Hash identifier: kSDqRDBm4sQPAMMlTqHthmqS+trV1KvYELKKzom4MKo=
Subject key identifier: 99:EC:8B:00:84:48:83:50:A3:5A:A1:9F:90:CE:09:24:0A:6B:32:99
Certificate issuer: /CN=b2d0a0c68a2039ff0ca514024115271c8a046608
Certificate serial: 018CC86F02283FCA94B09DDAB16A402C13D4
Authority key identifier: B2:D0:A0:C6:8A:20:39:FF:0C:A5:14:02:41:15:27:1C:8A:04:66:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stCgxoogOf8MpRQCQRUnHIoEZgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/meyLAIRIg1CjWqGfkM4JJAprMpk.roa
Signing time: Tue 02 Jan 2024 04:29:27 +0000
ROA not before: Tue 02 Jan 2024 04:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15557
IP address blocks: 91.240.78.0/24 maxlen: 24
91.240.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/stCgxoogOf8MpRQCQRUnHIoEZgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:02:28:3f:ca:94:b0:9d:da:b1:6a:40:2c:13:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d0a0c68a2039ff0ca514024115271c8a046608
Validity
Not Before: Jan 2 04:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99ec8b0084488350a35aa19f90ce09240a6b3299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:81:16:2b:d8:28:4b:2c:c1:a8:20:04:f0:28:
23:9a:8d:33:c4:5f:a1:ee:09:f0:94:31:27:82:7e:
85:98:d6:61:9c:31:52:0a:f7:39:2a:2b:26:00:85:
a5:7b:6e:d9:7c:ca:3d:9f:82:f5:dd:0d:d5:c2:e2:
81:c0:13:2b:cb:04:f5:f5:0e:1d:27:7c:39:66:23:
0c:b7:30:17:91:3b:17:95:48:c8:d8:4f:e3:62:60:
32:46:e0:4b:54:6c:74:c1:76:30:b9:2f:e9:2c:00:
df:4b:7e:f3:5f:f2:49:0d:da:8c:23:93:f1:09:e8:
c4:f4:23:fc:2d:0f:b8:a0:81:7a:6d:ce:78:dc:be:
17:e4:5f:8c:46:2c:b1:39:6c:f0:ec:b9:1a:d0:b5:
90:d1:32:cb:c6:2c:bc:11:be:b2:61:c3:ff:1d:bb:
83:23:67:93:4e:51:fa:08:68:63:da:c7:ee:e7:bf:
6e:8f:f4:2a:ee:66:6f:ee:23:ac:61:8f:af:e2:85:
d7:ad:a2:3c:6e:9c:94:0c:99:64:aa:bb:90:bf:4b:
d7:5d:47:f2:95:08:05:ca:10:cf:a9:86:4e:d7:40:
0b:5c:65:ff:59:66:6d:ac:d7:c7:2d:ad:56:d6:55:
40:ba:6d:39:20:43:7a:06:22:fd:4b:8b:eb:c8:1c:
50:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EC:8B:00:84:48:83:50:A3:5A:A1:9F:90:CE:09:24:0A:6B:32:99
X509v3 Authority Key Identifier:
keyid:B2:D0:A0:C6:8A:20:39:FF:0C:A5:14:02:41:15:27:1C:8A:04:66:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stCgxoogOf8MpRQCQRUnHIoEZgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/meyLAIRIg1CjWqGfkM4JJAprMpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.78.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:43:67:4a:b8:bb:ba:3c:c5:2b:c2:a7:8f:bc:2a:39:79:fe:
4b:9c:b9:30:ec:28:2b:7e:79:41:9d:da:40:68:50:db:fb:d9:
f3:fb:53:a4:fe:ad:ff:f6:81:be:b3:9c:2a:62:2b:32:18:b2:
9b:33:41:bc:a1:e4:74:5a:71:01:72:b9:9a:18:86:7b:aa:e8:
b7:87:66:12:c1:70:3d:72:c5:57:5b:20:ef:da:6c:54:de:4d:
fb:eb:91:84:2f:3e:79:24:2e:69:35:7e:3b:1b:8a:fc:e3:31:
a5:96:0b:ed:92:fc:bc:af:f9:cf:0b:e9:53:42:e3:9f:4b:10:
b5:84:ee:fb:d9:eb:98:d7:d6:26:1f:ac:b6:42:a0:a5:a7:06:
8a:57:37:9c:2e:22:0d:b4:5b:2d:e0:00:72:39:5c:9a:52:16:
68:df:80:b5:5e:02:20:92:43:3c:d2:f6:7e:04:62:19:f8:69:
7c:d8:a2:4f:2e:54:a1:e4:93:42:c8:5d:9d:b4:5d:67:72:5e:
64:f7:d3:9c:ff:69:53:f1:c6:62:74:1f:5f:7d:2a:de:9a:76:
34:89:17:b4:6b:bb:c7:b1:3e:d3:43:cf:c8:f1:18:74:57:62:
30:d7:ad:0e:a1:66:91:25:a8:0c:ce:55:32:df:1a:8e:d7:dd:
80:4c:04:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIbwIoP8qUsJ3asWpALBPUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZDBhMGM2OGEyMDM5ZmYwY2E1MTQwMjQxMTUyNzFjOGEw
NDY2MDgwHhcNMjQwMTAyMDQyOTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWVjOGIwMDg0NDg4MzUwYTM1YWExOWY5MGNlMDkyNDBhNmIzMjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIEWK9goSyzBqCAE8Cgjmo0zxF+h
7gnwlDEngn6FmNZhnDFSCvc5KismAIWle27ZfMo9n4L13Q3VwuKBwBMrywT19Q4d
J3w5ZiMMtzAXkTsXlUjI2E/jYmAyRuBLVGx0wXYwuS/pLADfS37zX/JJDdqMI5Px
CejE9CP8LQ+4oIF6bc543L4X5F+MRiyxOWzw7Lka0LWQ0TLLxiy8Eb6yYcP/HbuD
I2eTTlH6CGhj2sfu579uj/Qq7mZv7iOsYY+v4oXXraI8bpyUDJlkqruQv0vXXUfy
lQgFyhDPqYZO10ALXGX/WWZtrNfHLa1W1lVAum05IEN6BiL9S4vryBxQLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJnsiwCESINQo1qhn5DOCSQKazKZMB8GA1UdIwQY
MBaAFLLQoMaKIDn/DKUUAkEVJxyKBGYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3RDZ3hvb2dPZjhNcFJRQ1FSVW5ISW9FWmdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9iM2QwZDctZTEwYS00ODZmLTg4NWQt
NDFhYjdjODcyZmVhLzEvbWV5TEFJUklnMUNqV3FHZmtNNEpKQXByTXBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9iM2QwZDctZTEwYS00ODZmLTg4NWQtNDFhYjdjODcyZmVh
LzEvc3RDZ3hvb2dPZjhNcFJRQ1FSVW5ISW9FWmdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW/BOMA0G
CSqGSIb3DQEBCwUAA4IBAQDKQ2dKuLu6PMUrwqePvCo5ef5LnLkw7CgrfnlBndpA
aFDb+9nz+1Ok/q3/9oG+s5wqYisyGLKbM0G8oeR0WnEBcrmaGIZ7qui3h2YSwXA9
csVXWyDv2mxU3k3765GELz55JC5pNX47G4r84zGllgvtkvy8r/nPC+lTQuOfSxC1
hO772euY19YmH6y2QqClpwaKVzecLiINtFst4AByOVyaUhZo34C1XgIgkkM80vZ+
BGIZ+Gl82KJPLlSh5JNCyF2dtF1ncl5k99Oc/2lT8cZidB9ffSremnY0iRe0a7vH
sT7TQ8/I8Rh0V2Iw160OoWaRJagMzlUy3xqO192ATATz
-----END CERTIFICATE-----
Generated at Sat Jun 8 03:23:24 2024 by rpki-client on console-fra.rpki-client.org