Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/oVBQSnxzxPxv7xe4C32KCR9XbNA.roa
File: oVBQSnxzxPxv7xe4C32KCR9XbNA.roa (raw, json)
Hash identifier: n2ooJXZ1hFz1RnHwZ0sqbdK8VZmViRbfvWaIjqA0m6s=
Subject key identifier: A1:50:50:4A:7C:73:C4:FC:6F:EF:17:B8:0B:7D:8A:09:1F:57:6C:D0
Certificate issuer: /CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2
Certificate serial: 018CC86EF29E6FCAC7AEC526A8B38226D205
Authority key identifier: 6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/oVBQSnxzxPxv7xe4C32KCR9XbNA.roa
Signing time: Tue 02 Jan 2024 04:29:23 +0000
ROA not before: Tue 02 Jan 2024 04:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5413
IP address blocks: 91.227.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:f2:9e:6f:ca:c7:ae:c5:26:a8:b3:82:26:d2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2
Validity
Not Before: Jan 2 04:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a150504a7c73c4fc6fef17b80b7d8a091f576cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d6:a6:28:a4:40:43:5b:7f:fd:41:b1:39:43:
ce:62:30:b8:8c:39:78:b9:b9:84:1f:c3:61:9c:27:
90:0e:5b:f5:53:b7:4e:07:31:c2:be:58:6c:ac:68:
cb:65:b3:22:fc:65:ff:17:ea:24:7d:03:c9:ab:2d:
af:5b:b9:e7:50:a0:1e:eb:4b:2f:2f:54:be:47:f4:
12:1a:54:e3:da:3b:55:ad:83:6d:26:b0:39:06:b6:
d0:c2:b7:15:95:61:6b:5c:98:27:f2:48:1f:1c:71:
1a:86:ef:a8:ae:f7:26:7f:b1:8c:a4:da:5f:fd:6f:
98:09:02:03:ac:fc:e7:ee:ba:3e:15:d5:64:7d:b4:
c8:50:b7:b3:1d:f7:41:dc:d8:07:ed:d2:49:c1:4e:
c6:83:9b:c2:7c:0d:4d:16:d7:36:54:74:b6:d5:19:
e9:2e:99:03:0c:46:68:99:46:30:f3:8f:9c:ef:2a:
5a:2e:cc:c5:5d:8d:a1:85:3d:69:16:85:a0:eb:98:
d9:58:d1:18:c0:2d:3b:2d:83:76:72:ef:5e:c3:4e:
77:b2:86:bb:c9:70:3e:fd:0e:d6:4a:b1:45:ac:6e:
2f:77:43:b0:2d:ae:4f:11:f9:e8:54:d3:51:28:3e:
07:2c:5f:3f:55:08:34:ad:40:77:77:82:70:07:17:
39:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:50:50:4A:7C:73:C4:FC:6F:EF:17:B8:0B:7D:8A:09:1F:57:6C:D0
X509v3 Authority Key Identifier:
keyid:6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/oVBQSnxzxPxv7xe4C32KCR9XbNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.245.0/24
Signature Algorithm: sha256WithRSAEncryption
88:47:72:76:22:39:c6:d9:c0:00:41:fe:a8:7e:60:9d:80:3b:
7f:dd:01:de:86:f4:21:8e:35:11:be:dc:e4:2b:de:aa:db:c2:
34:c5:6b:8b:ea:5b:99:83:a5:ec:4f:f9:29:25:71:27:21:73:
06:c4:86:ee:34:29:82:ed:26:f7:46:c6:b1:ce:ca:dc:77:23:
5f:13:03:c8:7e:d5:90:f0:2c:de:9d:f8:2d:f9:8a:98:ef:52:
bd:33:6c:6d:3d:56:7e:94:34:b4:97:5c:ee:e3:46:4d:79:e8:
b2:ee:71:c5:42:9b:c8:2f:df:b9:ec:61:0c:1d:83:a8:44:46:
e8:da:e3:14:55:a8:f4:31:75:d6:86:18:a5:09:34:79:70:ba:
6d:cd:c6:a9:f3:86:97:36:d1:69:f2:35:6e:36:31:db:b3:37:
e5:74:8f:2e:0c:f4:f9:60:0a:b9:ba:3a:4e:d4:63:ea:11:59:
a7:b9:38:7f:7c:88:a3:1c:75:93:ae:1c:1c:52:4a:50:f7:7d:
01:cd:df:c4:4d:b5:2d:53:fe:3e:6c:8d:d1:6d:15:e6:e6:31:
f3:5e:64:9a:d8:5a:b1:ec:77:c4:c5:c4:47:6d:15:0b:cd:af:
1f:d2:b9:d4:c8:e4:28:ee:50:c3:49:47:14:57:e4:b5:f4:01:
03:9e:5e:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIbvKeb8rHrsUmqLOCJtIFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNDc1YzZmYjgwMzNiNWUxMWQ3ZGI1ZjJjOTk3Yzg0YmE3
MjVjYTIwHhcNMjQwMTAyMDQyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTUwNTA0YTdjNzNjNGZjNmZlZjE3YjgwYjdkOGEwOTFmNTc2Y2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNamKKRAQ1t//UGxOUPOYjC4jDl4
ubmEH8NhnCeQDlv1U7dOBzHCvlhsrGjLZbMi/GX/F+okfQPJqy2vW7nnUKAe60sv
L1S+R/QSGlTj2jtVrYNtJrA5BrbQwrcVlWFrXJgn8kgfHHEahu+orvcmf7GMpNpf
/W+YCQIDrPzn7ro+FdVkfbTIULezHfdB3NgH7dJJwU7Gg5vCfA1NFtc2VHS21Rnp
LpkDDEZomUYw84+c7ypaLszFXY2hhT1pFoWg65jZWNEYwC07LYN2cu9ew053soa7
yXA+/Q7WSrFFrG4vd0OwLa5PEfnoVNNRKD4HLF8/VQg0rUB3d4JwBxc5fwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKFQUEp8c8T8b+8XuAt9igkfV2zQMB8GA1UdIwQY
MBaAFGtHXG+4AzteEdfbXyyZfIS6clyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTBkY2I3Z0RPMTRSMTl0ZkxKbDhoTHB5WEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85ZjQzYWEtYzVjOS00ZWY3LTg3NjYt
NWE5ZDcwMmU3N2UzLzEvb1ZCUVNueHp4UHh2N3hlNEMzMktDUjlYYk5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi85ZjQzYWEtYzVjOS00ZWY3LTg3NjYtNWE5ZDcwMmU3N2Uz
LzEvYTBkY2I3Z0RPMTRSMTl0ZkxKbDhoTHB5WEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+P1MA0G
CSqGSIb3DQEBCwUAA4IBAQCIR3J2IjnG2cAAQf6ofmCdgDt/3QHehvQhjjURvtzk
K96q28I0xWuL6luZg6XsT/kpJXEnIXMGxIbuNCmC7Sb3RsaxzsrcdyNfEwPIftWQ
8Czenfgt+YqY71K9M2xtPVZ+lDS0l1zu40ZNeeiy7nHFQpvIL9+57GEMHYOoREbo
2uMUVaj0MXXWhhilCTR5cLptzcap84aXNtFp8jVuNjHbszfldI8uDPT5YAq5ujpO
1GPqEVmnuTh/fIijHHWTrhwcUkpQ930Bzd/ETbUtU/4+bI3RbRXm5jHzXmSa2Fqx
7HfExcRHbRULza8f0rnUyOQo7lDDSUcUV+S19AEDnl6V
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:26:54 2024 by rpki-client on console-fra.rpki-client.org