Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/Ci1nM83xoTl6omsJVgKMTQpW7_s.roa
File: Ci1nM83xoTl6omsJVgKMTQpW7_s.roa (raw, json)
Hash identifier: eRebpr6z1td2gGlUbPsf+kb7Laggc+XcETwjUYZDNls=
Subject key identifier: 0A:2D:67:33:CD:F1:A1:39:7A:A2:6B:09:56:02:8C:4D:0A:56:EF:FB
Certificate issuer: /CN=59a06c187953cfc8133b2beee5f01a15e45da078
Certificate serial: 018CC94BDA48C6F60852EB452B82B321E2C3
Authority key identifier: 59:A0:6C:18:79:53:CF:C8:13:3B:2B:EE:E5:F0:1A:15:E4:5D:A0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WaBsGHlTz8gTOyvu5fAaFeRdoHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/Ci1nM83xoTl6omsJVgKMTQpW7_s.roa
Signing time: Tue 02 Jan 2024 08:30:40 +0000
ROA not before: Tue 02 Jan 2024 08:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 91.233.120.0/24 maxlen: 24
194.104.235.0/24 maxlen: 24
2a11:6740::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/WaBsGHlTz8gTOyvu5fAaFeRdoHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/WaBsGHlTz8gTOyvu5fAaFeRdoHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WaBsGHlTz8gTOyvu5fAaFeRdoHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:da:48:c6:f6:08:52:eb:45:2b:82:b3:21:e2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59a06c187953cfc8133b2beee5f01a15e45da078
Validity
Not Before: Jan 2 08:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a2d6733cdf1a1397aa26b0956028c4d0a56effb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:db:f3:03:d5:97:d8:b4:a0:ad:c8:87:c6:ff:
80:05:a8:4e:6b:a4:a8:b3:e3:fe:d8:a1:5f:c6:09:
5e:78:bf:ee:53:75:65:a0:fd:f9:bc:e6:ab:ec:6f:
fc:ac:2d:c5:15:c5:df:aa:4b:61:7e:f9:d7:c9:0a:
31:36:c3:d0:0b:1a:8e:36:da:a6:13:d3:a0:d9:45:
b6:8c:bf:b4:60:63:cb:27:07:04:12:28:c6:23:73:
09:1e:08:f4:56:46:c8:87:24:d7:0d:90:21:4d:a2:
f2:38:40:b0:2a:c2:af:df:af:0e:b0:36:06:c8:ff:
a6:a6:84:3b:9c:97:99:af:c3:5e:35:9f:fd:ff:5a:
f2:5d:9a:c7:3a:eb:a1:24:31:4c:ee:0c:c0:78:00:
cd:3c:0e:6a:95:af:a7:60:e9:42:be:b8:3b:b7:47:
d4:b5:18:7b:54:26:eb:41:e7:c2:ce:42:0a:97:96:
a2:e4:0a:0a:c8:4d:1d:a2:7f:a0:45:70:f7:b8:fa:
fe:23:2a:ac:e7:41:f2:48:89:86:c3:0d:ad:8f:10:
79:9f:15:12:f2:11:36:eb:4d:47:71:bc:4a:1a:ed:
74:21:a5:7b:96:33:af:6a:2a:67:5d:c7:68:cb:eb:
2e:73:27:d8:c0:33:5d:32:df:00:10:d4:70:61:2f:
d6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2D:67:33:CD:F1:A1:39:7A:A2:6B:09:56:02:8C:4D:0A:56:EF:FB
X509v3 Authority Key Identifier:
keyid:59:A0:6C:18:79:53:CF:C8:13:3B:2B:EE:E5:F0:1A:15:E4:5D:A0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WaBsGHlTz8gTOyvu5fAaFeRdoHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/Ci1nM83xoTl6omsJVgKMTQpW7_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/WaBsGHlTz8gTOyvu5fAaFeRdoHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.120.0/24
194.104.235.0/24
IPv6:
2a11:6740::/29
Signature Algorithm: sha256WithRSAEncryption
ab:77:de:4b:a8:1b:d5:fc:ff:77:a7:16:52:6a:f8:6a:c6:93:
0b:ae:28:7d:04:ab:2d:56:82:91:fa:40:8d:a2:3b:a8:6d:c7:
c3:19:40:f6:a8:40:c3:99:69:b3:8b:54:62:f6:b3:3b:78:49:
a2:76:fb:0d:5e:81:de:92:e7:7b:82:2d:f4:b7:82:52:16:2a:
1e:7f:90:51:5b:c4:2e:24:c2:53:8b:5f:5f:93:0b:fe:ee:8e:
ad:d4:eb:3d:d8:21:86:ed:a5:51:b9:5c:f1:55:dc:0b:b1:69:
da:60:51:3f:1b:e2:80:f2:77:a0:2c:ca:00:36:49:18:84:32:
ef:51:fc:fb:e3:00:17:23:67:d7:b3:3d:26:b8:fd:38:85:db:
de:cb:21:a5:5c:57:25:4c:45:3e:29:ac:ce:31:fd:fe:f8:d4:
ee:68:c9:6b:2e:d1:7d:b4:54:0e:2b:e0:d4:cf:78:f3:d5:eb:
c3:e7:f4:45:17:06:18:66:72:16:38:ac:62:45:4b:b8:af:6e:
cb:5f:65:92:0d:24:25:24:bd:c4:bc:03:b9:26:6b:54:51:e8:
9f:0f:c7:1b:7e:58:f2:1b:a2:22:cf:0a:c0:3a:46:db:62:57:
fb:a6:85:db:9f:20:0e:85:68:2e:28:bb:24:a8:f1:5d:ad:ba:
43:b1:ab:e9
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzJS9pIxvYIUutFK4KzIeLDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YTA2YzE4Nzk1M2NmYzgxMzNiMmJlZWU1ZjAxYTE1ZTQ1
ZGEwNzgwHhcNMjQwMTAyMDgzMDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTJkNjczM2NkZjFhMTM5N2FhMjZiMDk1NjAyOGM0ZDBhNTZlZmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNvzA9WX2LSgrciHxv+ABahOa6So
s+P+2KFfxgleeL/uU3VloP35vOar7G/8rC3FFcXfqkthfvnXyQoxNsPQCxqONtqm
E9Og2UW2jL+0YGPLJwcEEijGI3MJHgj0VkbIhyTXDZAhTaLyOECwKsKv368OsDYG
yP+mpoQ7nJeZr8NeNZ/9/1ryXZrHOuuhJDFM7gzAeADNPA5qla+nYOlCvrg7t0fU
tRh7VCbrQefCzkIKl5ai5AoKyE0don+gRXD3uPr+Iyqs50HySImGww2tjxB5nxUS
8hE2601HcbxKGu10IaV7ljOvaipnXcdoy+sucyfYwDNdMt8AENRwYS/W/QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFAotZzPN8aE5eqJrCVYCjE0KVu/7MB8GA1UdIwQY
MBaAFFmgbBh5U8/IEzsr7uXwGhXkXaB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2FCc0dIbFR6OGdUT3l2dTVmQWFGZVJkb0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85MTcwZTMtZTliMy00ZDZkLTg3ODct
ZTQ2ZWE4OWJmODQ5LzEvQ2kxbk04M3hvVGw2b21zSlZnS01UUXBXN19zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi85MTcwZTMtZTliMy00ZDZkLTg3ODctZTQ2ZWE4OWJmODQ5
LzEvV2FCc0dIbFR6OGdUT3l2dTVmQWFGZVJkb0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW+l4AwQA
wmjrMA0EAgACMAcDBQMqEWdAMA0GCSqGSIb3DQEBCwUAA4IBAQCrd95LqBvV/P93
pxZSavhqxpMLrih9BKstVoKR+kCNojuobcfDGUD2qEDDmWmzi1Ri9rM7eEmidvsN
XoHekud7gi30t4JSFioef5BRW8QuJMJTi19fkwv+7o6t1Os92CGG7aVRuVzxVdwL
sWnaYFE/G+KA8negLMoANkkYhDLvUfz74wAXI2fXsz0muP04hdveyyGlXFclTEU+
KazOMf3++NTuaMlrLtF9tFQOK+DUz3jz1evD5/RFFwYYZnIWOKxiRUu4r27LX2WS
DSQlJL3EvAO5JmtUUeifD8cbfljyG6IizwrAOkbbYlf7poXbnyAOhWguKLskqPFd
rbpDsavp
-----END CERTIFICATE-----
Generated at Thu May 2 21:25:47 2024 by rpki-client on console-fra.rpki-client.org