Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/Au6DgRRxXOC5_uEHAY5BHYrESl4.roa
File: Au6DgRRxXOC5_uEHAY5BHYrESl4.roa (raw, json)
Hash identifier: xLoQPk2MtSaIuM8/5pUN+xQjyA+PWA0jzmidIehb6CE=
Subject key identifier: 02:EE:83:81:14:71:5C:E0:B9:FE:E1:07:01:8E:41:1D:8A:C4:4A:5E
Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial: 018CC5DD3A181D867BA78069382472234A83
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/Au6DgRRxXOC5_uEHAY5BHYrESl4.roa
Signing time: Mon 01 Jan 2024 16:30:58 +0000
ROA not before: Mon 01 Jan 2024 16:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47891
IP address blocks: 185.90.96.0/22 maxlen: 24
91.206.156.0/23 maxlen: 24
91.229.230.0/23 maxlen: 24
2a05:df00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:3a:18:1d:86:7b:a7:80:69:38:24:72:23:4a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
Validity
Not Before: Jan 1 16:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02ee838114715ce0b9fee107018e411d8ac44a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:84:68:cc:ba:33:98:06:00:a4:47:43:92:95:
8f:9d:4e:87:65:05:3d:f7:5a:7e:be:d6:ee:43:4f:
a7:ea:ac:d1:d4:30:59:20:36:c3:a9:aa:f6:62:aa:
c8:25:75:70:59:e7:3f:3a:4a:e2:11:b8:52:67:34:
25:94:d8:5c:28:f8:fb:97:dc:0b:9a:7f:7b:57:c2:
ee:68:40:b1:f2:c5:73:e5:e7:6e:0a:29:d0:33:21:
cf:70:40:c7:c0:4a:27:19:f9:ab:5c:c3:e4:f7:0b:
5a:77:7e:bc:a9:95:45:21:bc:6b:44:a1:7c:a7:4d:
74:5b:2b:03:83:4a:c7:c7:65:90:13:d1:4d:06:cd:
a0:7b:8b:d0:c8:b0:8d:a1:f0:dd:09:cb:58:50:38:
b8:09:03:56:78:a5:79:9b:f9:93:21:c2:f5:ab:3e:
f4:9c:3e:a7:9e:a3:1f:eb:5b:b9:cc:6e:a8:da:ee:
ca:53:62:67:9f:76:39:9e:e1:d5:86:b5:ba:07:91:
c6:9f:f7:be:5b:3c:59:da:c9:78:8d:ec:96:63:2f:
dd:74:a4:04:0c:a9:11:47:45:4a:54:e2:df:96:1d:
56:b4:52:9e:d8:e8:bc:c6:6d:f9:92:f9:15:3c:84:
08:ff:b3:1e:06:e2:84:04:98:d0:57:40:d7:aa:56:
c6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EE:83:81:14:71:5C:E0:B9:FE:E1:07:01:8E:41:1D:8A:C4:4A:5E
X509v3 Authority Key Identifier:
keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/Au6DgRRxXOC5_uEHAY5BHYrESl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.156.0/23
91.229.230.0/23
185.90.96.0/22
IPv6:
2a05:df00::/29
Signature Algorithm: sha256WithRSAEncryption
78:ca:1f:05:0b:62:24:20:33:e3:d1:77:85:6e:ff:9b:80:35:
20:27:00:9c:b8:59:57:97:3b:bc:3b:27:ff:0b:43:ef:d1:59:
bb:a0:25:d9:1a:e2:0e:ab:92:5f:99:96:6f:f3:11:87:f6:a1:
38:09:05:00:34:44:2f:c1:88:3b:2e:3d:b6:ca:4c:0f:2d:95:
74:20:e1:f6:c7:e2:85:e1:50:43:fe:bb:95:36:74:a5:de:07:
2a:c1:7c:fe:a2:46:d2:28:52:9f:fe:a5:4c:a9:f5:ac:6d:60:
06:56:ce:eb:b1:cf:50:a5:cf:18:b2:8a:6c:17:12:bd:bd:99:
be:fa:c1:77:47:18:47:29:d9:79:5f:96:4b:fa:7f:8d:7d:44:
1b:64:04:e4:6e:2e:e4:c0:3b:63:34:c6:e4:a4:af:13:d7:0f:
c1:8a:4f:cd:01:58:5b:05:00:9c:6d:9c:c4:8b:d1:40:6a:db:
a5:66:0c:25:42:2f:24:ab:2f:bf:f3:fc:25:18:20:6f:ed:de:
6b:a4:0a:65:5c:c0:d5:84:84:38:8b:99:50:da:ac:c8:cd:7d:
62:0f:52:03:ea:17:6c:87:4c:6b:0c:34:25:11:f6:98:d6:d0:
13:a1:77:eb:58:45:99:14:3c:6f:34:02:fa:cd:08:7f:2d:06:
13:9b:9c:12
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYzF3ToYHYZ7p4BpOCRyI0qDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3
ODZlZjUwHhcNMjQwMTAxMTYzMDU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmVlODM4MTE0NzE1Y2UwYjlmZWUxMDcwMThlNDExZDhhYzQ0YTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4RozLozmAYApEdDkpWPnU6HZQU9
91p+vtbuQ0+n6qzR1DBZIDbDqar2YqrIJXVwWec/OkriEbhSZzQllNhcKPj7l9wL
mn97V8LuaECx8sVz5eduCinQMyHPcEDHwEonGfmrXMPk9wtad368qZVFIbxrRKF8
p010WysDg0rHx2WQE9FNBs2ge4vQyLCNofDdCctYUDi4CQNWeKV5m/mTIcL1qz70
nD6nnqMf61u5zG6o2u7KU2Jnn3Y5nuHVhrW6B5HGn/e+WzxZ2sl4jeyWYy/ddKQE
DKkRR0VKVOLflh1WtFKe2Oi8xm35kvkVPIQI/7MeBuKEBJjQV0DXqlbGPQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFALug4EUcVzguf7hBwGOQR2KxEpeMB8GA1UdIwQY
MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It
NjFlN2Y0MGQ1ZGQ2LzEvQXU2RGdSUnhYT0M1X3VFSEFZNUJIWXJFU2w0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2
LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBW86cAwQB
W+XmAwQCuVpgMA0EAgACMAcDBQMqBd8AMA0GCSqGSIb3DQEBCwUAA4IBAQB4yh8F
C2IkIDPj0XeFbv+bgDUgJwCcuFlXlzu8Oyf/C0Pv0Vm7oCXZGuIOq5JfmZZv8xGH
9qE4CQUANEQvwYg7Lj22ykwPLZV0IOH2x+KF4VBD/ruVNnSl3gcqwXz+okbSKFKf
/qVMqfWsbWAGVs7rsc9Qpc8YsopsFxK9vZm++sF3RxhHKdl5X5ZL+n+NfUQbZATk
bi7kwDtjNMbkpK8T1w/Bik/NAVhbBQCcbZzEi9FAatulZgwlQi8kqy+/8/wlGCBv
7d5rpAplXMDVhIQ4i5lQ2qzIzX1iD1ID6hdsh0xrDDQlEfaY1tAToXfrWEWZFDxv
NAL6zQh/LQYTm5wS
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:46:23 2024 by rpki-client on console-ams.rpki-client.org