Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/22MeIWEjvHa8iJ3p36-qSr0m_pI.roa
File: 22MeIWEjvHa8iJ3p36-qSr0m_pI.roa (raw, json)
Hash identifier: Vq7z2xSOltMdpYyFKfWL1huKQ34vLm7gOf2cxfYWupQ=
Subject key identifier: DB:63:1E:21:61:23:BC:76:BC:88:9D:E9:DF:AF:AA:4A:BD:26:FE:92
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 018CC56E4F8836C5D6F62377F67DB7AAF1A5
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/22MeIWEjvHa8iJ3p36-qSr0m_pI.roa
Signing time: Mon 01 Jan 2024 14:29:49 +0000
ROA not before: Mon 01 Jan 2024 14:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19437
IP address blocks: 91.246.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 16:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:4f:88:36:c5:d6:f6:23:77:f6:7d:b7:aa:f1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Jan 1 14:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db631e216123bc76bc889de9dfafaa4abd26fe92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1e:04:89:8c:22:c0:55:6e:53:c2:c3:57:53:
ac:c2:76:ea:3e:e4:80:ff:68:50:b5:91:b4:ab:46:
a6:af:a9:a4:46:12:9b:70:83:31:8b:81:9b:02:ee:
44:0f:a4:62:61:7d:b9:51:e3:a4:61:1e:18:21:16:
93:dd:e3:e7:d5:f6:df:c7:10:d8:2a:df:c9:f2:63:
eb:87:d0:0c:2c:a2:e2:4c:04:a7:dd:60:7c:1a:02:
0c:cd:cb:60:03:1b:54:5d:20:64:a9:62:88:ce:2b:
a1:33:20:3a:b6:26:d5:4a:ab:8f:2a:54:fc:70:82:
af:c0:8e:69:c6:8a:5b:65:78:6e:c3:7e:07:37:e7:
08:0d:79:d0:34:c0:d3:67:86:ca:21:cd:59:0f:c4:
d0:5c:af:6c:b4:fa:14:a5:eb:a6:d5:2f:21:39:2c:
d3:16:17:4f:48:c3:c0:0b:aa:07:b7:cb:00:2d:57:
36:fc:cb:35:c6:20:5c:af:ac:2b:9f:d3:83:3d:a5:
c6:2d:a4:52:ea:ac:73:20:d6:88:2c:94:77:30:e7:
b0:66:40:2d:64:5f:be:db:d8:1f:05:5a:8e:24:3d:
a9:15:c2:00:41:cd:ee:c9:97:e8:f3:99:01:dc:43:
95:d7:01:79:86:2b:e4:0c:53:95:76:ae:d7:09:5c:
ad:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:63:1E:21:61:23:BC:76:BC:88:9D:E9:DF:AF:AA:4A:BD:26:FE:92
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/22MeIWEjvHa8iJ3p36-qSr0m_pI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.59.0/24
Signature Algorithm: sha256WithRSAEncryption
74:00:0d:c7:59:6b:ce:1e:a2:a0:f3:ae:66:f4:f3:84:c7:41:
1e:ce:f5:99:69:0e:ce:b7:90:17:e3:46:ca:77:d9:16:a6:33:
02:d1:e1:d1:f2:44:bc:bc:c4:8d:43:b2:1c:fe:18:cb:d0:54:
0d:ca:0d:ba:45:9b:5a:6c:63:9b:bb:78:b8:5c:f3:6e:ff:e5:
12:5c:70:42:d0:8f:82:b0:7a:04:87:e4:d5:08:c4:b0:87:63:
5a:80:32:94:d8:09:40:ee:f3:81:0e:73:99:ac:56:c0:5f:4b:
2d:05:10:c2:fd:da:9b:c9:b6:95:fe:a7:65:72:5a:b5:40:f5:
fb:32:6c:34:6f:7d:78:2d:47:5e:34:ef:16:7f:b1:7f:18:4d:
2b:3d:64:2e:6d:99:47:78:d5:04:0f:78:d9:2e:80:2f:28:d5:
b6:6e:9b:6f:b6:53:a9:08:c5:60:0f:ac:ba:85:2f:dc:28:a5:
26:aa:4d:46:19:f4:b6:53:e3:c9:27:92:54:b9:de:b4:74:48:
4d:11:22:c3:b4:26:09:23:7e:13:d9:0b:7f:e8:c7:6e:58:83:
4c:93:33:e1:57:41:28:48:d0:3a:71:cd:ec:42:d4:2e:32:65:
12:3e:da:0c:06:74:66:93:58:60:85:20:59:72:70:ac:04:46:
bf:92:0c:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbk+INsXW9iN39n23qvGlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTE0YmY3NmY0MmRhNGYyYWMwMDNhNmM2OWQ2MWMyMzIw
ZTJjZDgwHhcNMjQwMTAxMTQyOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjYzMWUyMTYxMjNiYzc2YmM4ODlkZTlkZmFmYWE0YWJkMjZmZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R4EiYwiwFVuU8LDV1OswnbqPuSA
/2hQtZG0q0amr6mkRhKbcIMxi4GbAu5ED6RiYX25UeOkYR4YIRaT3ePn1fbfxxDY
Kt/J8mPrh9AMLKLiTASn3WB8GgIMzctgAxtUXSBkqWKIziuhMyA6tibVSquPKlT8
cIKvwI5pxopbZXhuw34HN+cIDXnQNMDTZ4bKIc1ZD8TQXK9stPoUpeum1S8hOSzT
FhdPSMPAC6oHt8sALVc2/Ms1xiBcr6wrn9ODPaXGLaRS6qxzINaILJR3MOewZkAt
ZF++29gfBVqOJD2pFcIAQc3uyZfo85kB3EOV1wF5hivkDFOVdq7XCVyt/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNtjHiFhI7x2vIid6d+vqkq9Jv6SMB8GA1UdIwQY
MBaAFEnhS/dvQtpPKsADpsadYcIyDizYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEt
M2JlY2NhYWUzMzZkLzEvMjJNZUlXRWp2SGE4aUozcDM2LXFTcjBtX3BJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEtM2JlY2NhYWUzMzZk
LzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/Y7MA0G
CSqGSIb3DQEBCwUAA4IBAQB0AA3HWWvOHqKg865m9POEx0EezvWZaQ7Ot5AX40bK
d9kWpjMC0eHR8kS8vMSNQ7Ic/hjL0FQNyg26RZtabGObu3i4XPNu/+USXHBC0I+C
sHoEh+TVCMSwh2NagDKU2AlA7vOBDnOZrFbAX0stBRDC/dqbybaV/qdlclq1QPX7
Mmw0b314LUdeNO8Wf7F/GE0rPWQubZlHeNUED3jZLoAvKNW2bptvtlOpCMVgD6y6
hS/cKKUmqk1GGfS2U+PJJ5JUud60dEhNESLDtCYJI34T2Qt/6MduWINMkzPhV0Eo
SNA6cc3sQtQuMmUSPtoMBnRmk1hghSBZcnCsBEa/kgxK
-----END CERTIFICATE-----
Generated at Sat May 11 19:01:34 2024 by rpki-client on console-fra.rpki-client.org