Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/L-NdJr_kM4xoMqSgUM291jyJMxk.roa
File: L-NdJr_kM4xoMqSgUM291jyJMxk.roa (raw, json)
Hash identifier: xM264OKCKIVAPvXztNwbe5+bxr6KAvHi4usHl50K0qg=
Subject key identifier: 2F:E3:5D:26:BF:E4:33:8C:68:32:A4:A0:50:CD:BD:D6:3C:89:33:19
Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial: 018FA00E9AA9ED61B5CF2AFA625D2AE69F14
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/L-NdJr_kM4xoMqSgUM291jyJMxk.roa
Signing time: Wed 22 May 2024 11:27:42 +0000
ROA not before: Wed 22 May 2024 11:27:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 91.206.156.0/23 maxlen: 24
91.229.230.0/23 maxlen: 24
185.90.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Jun 2024 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a0:0e:9a:a9:ed:61:b5:cf:2a:fa:62:5d:2a:e6:9f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
Validity
Not Before: May 22 11:27:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fe35d26bfe4338c6832a4a050cdbdd63c893319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:ec:85:43:ad:87:43:d3:90:aa:82:95:b7:
5d:f7:4f:cf:fe:0c:fe:8e:37:d9:92:29:ce:5e:7b:
0c:c4:b4:ef:96:4d:ed:28:87:5b:d3:ea:aa:da:57:
45:fd:c9:39:e1:95:bc:2c:0a:57:e9:fe:f7:f3:59:
bb:0f:17:df:bd:cd:f7:b3:13:14:98:5f:9c:d3:f0:
c0:9a:f8:54:40:02:d4:e7:04:ed:b8:fa:be:c5:ef:
c9:35:70:e6:eb:a9:56:96:48:b7:d2:ea:9b:20:0f:
4a:d3:6b:01:7b:1a:16:db:c4:77:73:2f:1e:6d:e8:
b7:c4:b3:5b:6b:05:8b:5c:f6:5e:05:2f:68:78:77:
b9:e8:cb:cb:af:2a:c5:a4:88:0c:7e:b5:2c:31:aa:
89:d3:d3:e9:4d:d1:0c:95:19:a4:d5:42:ce:4a:3a:
b6:f9:22:cf:2a:be:e5:61:e7:f5:36:e3:1b:75:96:
6b:37:65:f0:f6:3e:57:c9:c1:2d:a1:84:26:4b:1e:
90:65:32:2d:1c:35:7a:ba:67:10:7e:60:38:2e:7c:
f0:ea:e4:31:77:44:1a:58:7b:b8:d9:c4:bb:6a:df:
d0:25:ac:22:e0:ce:ea:26:d4:84:00:b8:86:a9:fe:
80:c9:90:9a:71:3d:4c:3d:00:da:c6:12:8c:07:8b:
59:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E3:5D:26:BF:E4:33:8C:68:32:A4:A0:50:CD:BD:D6:3C:89:33:19
X509v3 Authority Key Identifier:
keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/L-NdJr_kM4xoMqSgUM291jyJMxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.156.0/23
91.229.230.0/23
185.90.96.0/22
Signature Algorithm: sha256WithRSAEncryption
48:4b:ac:0d:24:96:85:17:84:c3:82:7c:26:e5:2d:5f:75:22:
2a:a2:02:50:aa:b5:51:e6:75:3b:4b:d3:28:ca:61:70:a1:7c:
df:14:0b:e5:da:70:d1:c7:ef:12:d5:ac:ed:e5:3f:dc:30:e5:
81:46:04:03:d1:81:17:ee:81:d4:5d:36:af:3e:88:03:6f:24:
78:68:a3:46:c4:04:9e:43:20:7e:39:7e:60:81:1a:67:4b:57:
f4:bf:36:8e:ab:22:b4:b0:41:a4:67:b1:f0:f5:45:05:2c:2c:
c5:f2:3c:3b:90:4b:9e:32:18:ef:b4:3b:06:77:77:3c:49:6f:
e8:f2:fa:a9:c0:82:ab:49:62:d5:0f:6f:84:c2:97:91:1c:8e:
da:d9:fa:0f:eb:65:c0:2b:79:42:73:a1:fc:d7:eb:ab:13:fe:
e4:61:0c:2c:8f:49:51:8d:7a:23:17:a5:ba:27:45:20:b8:a7:
17:c2:ef:94:8f:4b:a8:9a:11:8a:07:30:c7:2f:6c:00:43:1c:
ce:53:95:cd:d4:75:0f:58:3a:7e:78:ad:da:71:97:c9:ae:34:
54:16:37:0d:cf:f0:5f:69:7a:d3:c6:78:16:ff:c3:fb:f3:6a:
58:05:b2:cc:98:3d:59:0a:43:4a:c1:a5:53:84:39:7e:71:63:
4e:c9:d2:ab
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY+gDpqp7WG1zyr6Yl0q5p8UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3
ODZlZjUwHhcNMjQwNTIyMTEyNzQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmUzNWQyNmJmZTQzMzhjNjgzMmE0YTA1MGNkYmRkNjNjODkzMzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqXshUOth0PTkKqClbdd90/P/gz+
jjfZkinOXnsMxLTvlk3tKIdb0+qq2ldF/ck54ZW8LApX6f7381m7Dxffvc33sxMU
mF+c0/DAmvhUQALU5wTtuPq+xe/JNXDm66lWlki30uqbIA9K02sBexoW28R3cy8e
bei3xLNbawWLXPZeBS9oeHe56MvLryrFpIgMfrUsMaqJ09PpTdEMlRmk1ULOSjq2
+SLPKr7lYef1NuMbdZZrN2Xw9j5XycEtoYQmSx6QZTItHDV6umcQfmA4Lnzw6uQx
d0QaWHu42cS7at/QJawi4M7qJtSEALiGqf6AyZCacT1MPQDaxhKMB4tZjQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFC/jXSa/5DOMaDKkoFDNvdY8iTMZMB8GA1UdIwQY
MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It
NjFlN2Y0MGQ1ZGQ2LzEvTC1OZEpyX2tNNHhvTXFTZ1VNMjkxanlKTXhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2
LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW86cAwQB
W+XmAwQCuVpgMA0GCSqGSIb3DQEBCwUAA4IBAQBIS6wNJJaFF4TDgnwm5S1fdSIq
ogJQqrVR5nU7S9MoymFwoXzfFAvl2nDRx+8S1azt5T/cMOWBRgQD0YEX7oHUXTav
PogDbyR4aKNGxASeQyB+OX5ggRpnS1f0vzaOqyK0sEGkZ7Hw9UUFLCzF8jw7kEue
MhjvtDsGd3c8SW/o8vqpwIKrSWLVD2+EwpeRHI7a2foP62XAK3lCc6H81+urE/7k
YQwsj0lRjXojF6W6J0UguKcXwu+Uj0uomhGKBzDHL2wAQxzOU5XN1HUPWDp+eK3a
cZfJrjRUFjcNz/BfaXrTxngW/8P782pYBbLMmD1ZCkNKwaVThDl+cWNOydKr
-----END CERTIFICATE-----
Generated at Thu Jun 13 16:00:36 2024 by rpki-client on console-ams.rpki-client.org