Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/2rulCH5oS7DP-RLxRrmwWBgG2W0.roa
File: 2rulCH5oS7DP-RLxRrmwWBgG2W0.roa (raw, json)
Hash identifier: gsD4LNU8KVAaJ8R68hB47spxFrcdCA1iO3tzsGYaMWw=
Subject key identifier: DA:BB:A5:08:7E:68:4B:B0:CF:F9:12:F1:46:B9:B0:58:18:06:D9:6D
Certificate issuer: /CN=548f757a56d17680d6d6690b19d9f39061980033
Certificate serial: 018CCA2AE0C21782B729AED41D559E7B10D6
Authority key identifier: 54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/2rulCH5oS7DP-RLxRrmwWBgG2W0.roa
Signing time: Tue 02 Jan 2024 12:34:16 +0000
ROA not before: Tue 02 Jan 2024 12:34:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49372
IP address blocks: 91.234.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:e0:c2:17:82:b7:29:ae:d4:1d:55:9e:7b:10:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=548f757a56d17680d6d6690b19d9f39061980033
Validity
Not Before: Jan 2 12:34:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dabba5087e684bb0cff912f146b9b0581806d96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d2:04:1b:0d:63:19:38:4f:be:2d:41:00:d7:
bb:6c:cc:1c:9b:b1:84:3f:c6:09:13:a7:38:bf:0d:
c6:af:be:3c:45:42:c2:f9:eb:a3:9a:c1:39:39:e9:
82:5d:05:5b:fa:56:49:c3:69:28:09:63:ea:5c:40:
cc:b7:af:4f:55:17:4c:23:90:b7:5d:9f:5a:ad:5c:
7a:e6:4b:7a:0b:5d:0f:2b:8a:d7:45:c3:37:ca:e2:
2d:92:ee:aa:d6:2e:71:56:9a:fa:e5:db:d8:04:24:
a4:3f:ed:86:e0:c6:63:3f:61:ca:42:15:12:23:58:
c1:cc:90:ab:2d:f7:f4:46:62:ae:a4:4b:ee:26:65:
a0:e0:e5:7f:bf:38:63:5f:cc:64:58:9e:b2:9e:d2:
81:ea:96:d9:b1:59:6e:10:ea:69:be:ab:2c:ce:20:
51:bd:fb:5b:94:69:b2:7b:89:70:b3:ca:7d:d0:68:
71:6a:d7:18:69:d2:50:8a:52:92:1a:a0:c9:a0:b5:
76:0b:cc:cf:5f:00:4a:bc:d0:68:92:22:c7:96:62:
7e:01:53:e5:ba:4d:68:e8:b6:34:0b:09:05:1a:7c:
c4:7e:e3:78:14:07:a5:41:6c:68:3b:c4:67:fa:46:
eb:53:9b:fc:80:94:a9:f5:0b:06:d8:c1:9f:f6:1c:
5b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BB:A5:08:7E:68:4B:B0:CF:F9:12:F1:46:B9:B0:58:18:06:D9:6D
X509v3 Authority Key Identifier:
keyid:54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/2rulCH5oS7DP-RLxRrmwWBgG2W0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.196.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:c6:23:19:b0:53:10:95:ff:81:74:1d:c5:76:c6:eb:fa:b1:
f6:b2:aa:da:5e:c0:de:0f:41:00:c7:2a:6d:95:f2:85:34:6f:
86:0d:55:3a:6a:fa:20:2a:fd:b7:49:77:aa:63:5f:0d:30:c7:
6a:31:95:b1:4b:b4:bb:c1:5e:42:05:d1:70:6c:ff:4b:26:7e:
9c:9b:27:5c:52:7e:ef:8b:e5:ab:e8:ea:ea:c7:49:c6:3c:0d:
a8:f7:19:60:84:c0:f0:14:33:66:11:56:44:ef:a9:ed:f3:ff:
ab:5a:ca:b1:78:aa:c5:a3:0e:ae:f0:17:da:0b:00:7f:f4:01:
2f:7c:95:a5:de:ec:bb:f9:09:ca:89:9f:0d:eb:6c:02:11:ca:
6b:c6:aa:cf:e9:15:3c:d7:e3:11:47:34:72:c2:68:57:a0:b5:
f5:1b:c1:f1:d0:f2:20:e7:d2:9e:48:d7:eb:f7:b4:49:84:26:
32:82:38:09:4d:cf:a2:ac:8b:b4:66:77:5a:bd:f0:17:50:79:
9d:8d:5c:00:70:42:17:eb:9e:4f:4d:23:e8:c9:ef:9d:2a:76:
6c:dc:1e:71:3d:38:33:22:0d:2c:1c:25:b7:35:7e:21:c5:66:
b1:1d:a2:a5:34:e0:be:4f:02:eb:f7:7c:cb:87:73:4c:7b:f3:
ff:7d:50:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKuDCF4K3Ka7UHVWeexDWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OGY3NTdhNTZkMTc2ODBkNmQ2NjkwYjE5ZDlmMzkwNjE5
ODAwMzMwHhcNMjQwMTAyMTIzNDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWJiYTUwODdlNjg0YmIwY2ZmOTEyZjE0NmI5YjA1ODE4MDZkOTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9IEGw1jGThPvi1BANe7bMwcm7GE
P8YJE6c4vw3Gr748RULC+eujmsE5OemCXQVb+lZJw2koCWPqXEDMt69PVRdMI5C3
XZ9arVx65kt6C10PK4rXRcM3yuItku6q1i5xVpr65dvYBCSkP+2G4MZjP2HKQhUS
I1jBzJCrLff0RmKupEvuJmWg4OV/vzhjX8xkWJ6yntKB6pbZsVluEOppvqssziBR
vftblGmye4lws8p90GhxatcYadJQilKSGqDJoLV2C8zPXwBKvNBokiLHlmJ+AVPl
uk1o6LY0CwkFGnzEfuN4FAelQWxoO8Rn+kbrU5v8gJSp9QsG2MGf9hxb3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNq7pQh+aEuwz/kS8Ua5sFgYBtltMB8GA1UdIwQY
MBaAFFSPdXpW0XaA1tZpCxnZ85BhmAAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkk5MWVsYlJkb0RXMW1rTEdkbnprR0dZQURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jZjkzYWMtZGVkZC00MTMwLWIzNjUt
YjhlNjU2NmEyNzlhLzEvMnJ1bENINW9TN0RQLVJMeFJybXdXQmdHMlcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9jZjkzYWMtZGVkZC00MTMwLWIzNjUtYjhlNjU2NmEyNzlh
LzEvVkk5MWVsYlJkb0RXMW1rTEdkbnprR0dZQURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+rEMA0G
CSqGSIb3DQEBCwUAA4IBAQA8xiMZsFMQlf+BdB3Fdsbr+rH2sqraXsDeD0EAxypt
lfKFNG+GDVU6avogKv23SXeqY18NMMdqMZWxS7S7wV5CBdFwbP9LJn6cmydcUn7v
i+Wr6Orqx0nGPA2o9xlghMDwFDNmEVZE76nt8/+rWsqxeKrFow6u8BfaCwB/9AEv
fJWl3uy7+QnKiZ8N62wCEcprxqrP6RU81+MRRzRywmhXoLX1G8Hx0PIg59KeSNfr
97RJhCYygjgJTc+irIu0ZndavfAXUHmdjVwAcEIX655PTSPoye+dKnZs3B5xPTgz
Ig0sHCW3NX4hxWaxHaKlNOC+TwLr93zLh3NMe/P/fVAa
-----END CERTIFICATE-----
Generated at Sat Jun 8 10:12:02 2024 by rpki-client on console-fra.rpki-client.org