Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fYaxXuULCLqQM0m2Nh7BDholbj8.roa
File: fYaxXuULCLqQM0m2Nh7BDholbj8.roa (raw, json)
Hash identifier: da8YYo9ZNpzptvr9mOFfXgRkZzVQCo4C1ybYNd/oQX4=
Subject key identifier: 7D:86:B1:5E:E5:0B:08:BA:90:33:49:B6:36:1E:C1:0E:1A:25:6E:3F
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018CC56DF17A6E771B8C88D08C3ADEDA8672
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fYaxXuULCLqQM0m2Nh7BDholbj8.roa
Signing time: Mon 01 Jan 2024 14:29:25 +0000
ROA not before: Mon 01 Jan 2024 14:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202768
IP address blocks: 91.107.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f1:7a:6e:77:1b:8c:88:d0:8c:3a:de:da:86:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 14:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d86b15ee50b08ba903349b6361ec10e1a256e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:55:4a:61:a8:b8:cf:46:06:24:62:fd:ff:
b6:bf:ce:c1:5a:b6:e8:40:0d:13:c1:67:75:18:b8:
23:9f:e5:c2:c6:ce:a6:bd:96:c7:c1:16:c2:5d:a1:
0d:7d:c7:1e:77:fc:30:74:cb:ef:85:96:3e:c1:d6:
8a:03:56:25:41:7a:62:67:1f:65:71:89:b9:00:41:
87:28:e1:43:6f:b6:68:09:02:9b:60:5b:f2:e9:89:
96:10:4c:9c:f6:9f:f4:41:da:68:7c:25:b1:14:ad:
0e:d0:24:c4:a2:22:ba:1f:23:6c:26:8d:9e:9a:0c:
a6:f6:6a:25:47:6f:2d:c7:e2:c0:a3:ac:95:ea:af:
97:23:71:e8:8b:ec:94:4f:db:ed:66:93:0c:7b:d5:
34:08:41:8f:cb:87:92:d3:db:9d:84:98:5d:54:65:
8f:02:06:ac:56:98:eb:3a:9d:bb:e8:ee:8e:d1:9c:
90:26:2e:92:7b:01:dd:4f:4c:a3:db:e6:12:56:95:
c4:70:1c:c9:31:41:20:f7:60:3c:9b:82:7e:b8:e4:
86:0a:9b:d7:66:b4:2c:4c:b8:6f:eb:0b:89:a8:e8:
b1:44:92:ae:a1:eb:1e:7c:10:83:42:d2:50:ce:3c:
e9:77:45:c4:bf:00:82:21:25:61:c0:17:42:fb:5f:
3f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:86:B1:5E:E5:0B:08:BA:90:33:49:B6:36:1E:C1:0E:1A:25:6E:3F
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fYaxXuULCLqQM0m2Nh7BDholbj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.107.115.0/24
Signature Algorithm: sha256WithRSAEncryption
80:96:14:b2:f6:a7:f3:b0:31:6c:4a:14:31:8d:ba:ce:25:28:
87:2a:cf:f5:83:cc:49:3d:a7:ed:b2:36:2b:92:2a:be:d1:89:
b2:73:c6:4b:44:19:25:2e:8b:54:26:f3:b7:1b:35:af:7e:d4:
2c:6b:50:a8:f2:37:a8:3c:47:d0:0a:fb:37:df:09:ab:8d:46:
a9:17:94:da:20:45:d7:83:80:31:3e:73:95:45:90:bf:9c:35:
89:fc:3e:62:30:9d:23:cb:b7:c5:7f:0c:e2:9b:3e:e3:40:f1:
a2:94:c1:7d:4f:b2:d5:45:93:c2:53:d3:01:04:95:23:8c:94:
de:70:5e:94:86:7b:74:ee:c3:dc:76:62:d7:1d:7f:b4:21:29:
ec:a7:f6:dc:fb:13:92:39:d6:8c:39:66:1f:28:c6:88:b2:12:
30:a5:1a:99:f1:8b:0c:f1:06:1c:83:5a:1b:47:da:64:1c:cb:
1a:4f:20:15:f5:79:3c:97:24:61:8e:88:da:ca:2c:3d:ab:13:
b0:c4:3a:74:25:32:cc:d3:c6:c3:06:a5:66:75:04:ca:e8:a9:
81:ee:c1:bd:6e:d0:71:03:b2:d7:cf:73:37:bc:d9:f9:2e:b1:
e8:74:4e:4e:63:47:89:8d:74:30:25:48:35:5d:b2:ce:3f:8d:
b9:fe:e1:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbfF6bncbjIjQjDre2oZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjQwMTAxMTQyOTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDg2YjE1ZWU1MGIwOGJhOTAzMzQ5YjYzNjFlYzEwZTFhMjU2ZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSJVSmGouM9GBiRi/f+2v87BWrbo
QA0TwWd1GLgjn+XCxs6mvZbHwRbCXaENfcced/wwdMvvhZY+wdaKA1YlQXpiZx9l
cYm5AEGHKOFDb7ZoCQKbYFvy6YmWEEyc9p/0QdpofCWxFK0O0CTEoiK6HyNsJo2e
mgym9molR28tx+LAo6yV6q+XI3Hoi+yUT9vtZpMMe9U0CEGPy4eS09udhJhdVGWP
AgasVpjrOp276O6O0ZyQJi6SewHdT0yj2+YSVpXEcBzJMUEg92A8m4J+uOSGCpvX
ZrQsTLhv6wuJqOixRJKuoesefBCDQtJQzjzpd0XEvwCCISVhwBdC+18/NQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH2GsV7lCwi6kDNJtjYewQ4aJW4/MB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvZllheFh1VUxDTHFRTTBtMk5oN0JEaG9sYmo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2tzMA0G
CSqGSIb3DQEBCwUAA4IBAQCAlhSy9qfzsDFsShQxjbrOJSiHKs/1g8xJPaftsjYr
kiq+0Ymyc8ZLRBklLotUJvO3GzWvftQsa1Co8jeoPEfQCvs33wmrjUapF5TaIEXX
g4AxPnOVRZC/nDWJ/D5iMJ0jy7fFfwzimz7jQPGilMF9T7LVRZPCU9MBBJUjjJTe
cF6Uhnt07sPcdmLXHX+0ISnsp/bc+xOSOdaMOWYfKMaIshIwpRqZ8YsM8QYcg1ob
R9pkHMsaTyAV9Xk8lyRhjojayiw9qxOwxDp0JTLM08bDBqVmdQTK6KmB7sG9btBx
A7LXz3M3vNn5LrHodE5OY0eJjXQwJUg1XbLOP425/uEC
-----END CERTIFICATE-----
Generated at Fri Jun 7 23:42:27 2024 by rpki-client on console-fra.rpki-client.org