Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0c8512-b6c2-4782-9fed-ff176ad8e0a6/1/Ni7u1JtJoIPhdbjBKxpHJHmFAZE.roa
File: Ni7u1JtJoIPhdbjBKxpHJHmFAZE.roa (raw, json)
Hash identifier: OpaImTk2wp4C7oDbuKEKMLmCcDyB3rcpb6c7ocx1Bp8=
Subject key identifier: 36:2E:EE:D4:9B:49:A0:83:E1:75:B8:C1:2B:1A:47:24:79:85:01:91
Certificate issuer: /CN=3edd927f0662c5f15e854931ce735fc03a62f4c9
Certificate serial: 018DA78B3A0640B37FACA35583187E2EA48E
Authority key identifier: 3E:DD:92:7F:06:62:C5:F1:5E:85:49:31:CE:73:5F:C0:3A:62:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt2SfwZixfFehUkxznNfwDpi9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0c8512-b6c2-4782-9fed-ff176ad8e0a6/1/Ni7u1JtJoIPhdbjBKxpHJHmFAZE.roa
Signing time: Wed 14 Feb 2024 12:15:35 +0000
ROA not before: Wed 14 Feb 2024 12:15:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24794
IP address blocks: 91.199.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0c8512-b6c2-4782-9fed-ff176ad8e0a6/1/Pt2SfwZixfFehUkxznNfwDpi9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0c8512-b6c2-4782-9fed-ff176ad8e0a6/1/Pt2SfwZixfFehUkxznNfwDpi9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pt2SfwZixfFehUkxznNfwDpi9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:8b:3a:06:40:b3:7f:ac:a3:55:83:18:7e:2e:a4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edd927f0662c5f15e854931ce735fc03a62f4c9
Validity
Not Before: Feb 14 12:15:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=362eeed49b49a083e175b8c12b1a472479850191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:35:d0:92:02:e4:34:f9:ca:7b:6b:71:f0:42:
ff:93:1c:87:b4:c2:f6:16:d3:76:cb:4f:b1:62:2c:
29:fe:ce:7b:78:3b:1c:04:25:e9:70:00:14:03:20:
6a:68:57:39:a6:84:b4:56:3d:97:00:7b:f7:ac:ac:
5f:08:63:3a:84:0b:a4:79:8b:ee:b5:69:8b:2a:62:
f2:d9:19:25:dd:4a:09:86:35:db:88:1a:bc:08:fd:
c6:b5:ee:07:c5:55:54:61:6d:15:4c:bb:8c:af:2b:
b0:6b:c3:94:f0:78:ed:d9:0a:29:96:6e:06:21:6f:
73:a7:b5:c3:0a:84:4a:f2:f9:03:ab:22:0a:48:1e:
80:88:20:ee:3f:ae:07:49:45:4a:c4:68:1a:95:b8:
a0:3f:af:be:30:a4:c1:c2:9f:cc:a2:e2:af:9c:9a:
84:3e:89:32:c9:81:53:ce:65:73:30:62:93:08:f4:
9a:d2:71:42:54:6f:1c:53:06:49:27:22:20:df:ef:
8d:d0:29:76:f7:9c:f9:af:ac:c8:b9:d8:76:ef:25:
f2:88:0c:53:bf:45:a0:a0:33:64:48:9c:a7:c4:d9:
ec:34:33:56:a8:43:bd:19:3d:ac:dc:1a:d8:1d:98:
4a:c1:c8:32:c4:7e:7d:87:91:ff:d2:9d:63:7f:32:
5f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2E:EE:D4:9B:49:A0:83:E1:75:B8:C1:2B:1A:47:24:79:85:01:91
X509v3 Authority Key Identifier:
keyid:3E:DD:92:7F:06:62:C5:F1:5E:85:49:31:CE:73:5F:C0:3A:62:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt2SfwZixfFehUkxznNfwDpi9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0c8512-b6c2-4782-9fed-ff176ad8e0a6/1/Ni7u1JtJoIPhdbjBKxpHJHmFAZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0c8512-b6c2-4782-9fed-ff176ad8e0a6/1/Pt2SfwZixfFehUkxznNfwDpi9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.155.0/24
Signature Algorithm: sha256WithRSAEncryption
17:4c:2c:5b:42:be:7a:17:d6:0b:f9:d7:37:ed:f7:25:b6:df:
b6:1a:0c:fe:8f:7d:bc:16:66:ca:ad:a9:4e:1c:77:27:ba:15:
5f:65:77:79:7e:f0:76:f9:5c:2b:8f:f0:19:2e:d0:53:71:e9:
c5:6e:04:14:07:c9:a8:e0:a2:ee:a8:79:20:1a:ea:94:c4:a3:
bb:f2:15:c6:aa:f4:8f:9a:b0:60:27:b6:0b:03:94:c8:8b:18:
9f:0b:d7:fa:b2:30:5b:cb:1a:0c:98:73:3d:e2:48:32:4b:c6:
85:28:fa:98:40:ed:28:74:53:4c:91:62:58:45:e2:a8:ee:56:
b8:66:52:a2:70:14:45:04:18:42:46:40:66:83:6f:f7:c2:df:
27:cf:5d:30:fb:4f:25:eb:69:62:2c:2f:73:84:75:96:24:27:
9a:84:d8:0c:b3:c7:38:9a:ec:8c:d6:c5:0a:7d:b0:bd:63:a6:
1b:6b:ea:c8:c0:0a:72:7a:5b:bc:bd:cf:1c:f5:5d:3a:de:75:
44:3b:a3:59:de:e2:f3:fa:b9:57:2e:ba:b2:de:35:b4:39:ad:
49:f1:5f:7f:b0:7f:07:57:72:93:8c:89:c8:52:84:df:ef:93:
6a:82:1c:80:64:76:f9:ba:d0:55:8d:c5:45:73:3b:5c:e7:62:
08:c7:15:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2nizoGQLN/rKNVgxh+LqSOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZGQ5MjdmMDY2MmM1ZjE1ZTg1NDkzMWNlNzM1ZmMwM2E2
MmY0YzkwHhcNMjQwMjE0MTIxNTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjJlZWVkNDliNDlhMDgzZTE3NWI4YzEyYjFhNDcyNDc5ODUwMTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDXQkgLkNPnKe2tx8EL/kxyHtML2
FtN2y0+xYiwp/s57eDscBCXpcAAUAyBqaFc5poS0Vj2XAHv3rKxfCGM6hAukeYvu
tWmLKmLy2Rkl3UoJhjXbiBq8CP3Gte4HxVVUYW0VTLuMryuwa8OU8Hjt2Qoplm4G
IW9zp7XDCoRK8vkDqyIKSB6AiCDuP64HSUVKxGgalbigP6++MKTBwp/MouKvnJqE
PokyyYFTzmVzMGKTCPSa0nFCVG8cUwZJJyIg3++N0Cl295z5r6zIudh27yXyiAxT
v0WgoDNkSJynxNnsNDNWqEO9GT2s3BrYHZhKwcgyxH59h5H/0p1jfzJf2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDYu7tSbSaCD4XW4wSsaRyR5hQGRMB8GA1UdIwQY
MBaAFD7dkn8GYsXxXoVJMc5zX8A6YvTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHQyU2Z3Wml4ZkZlaFVreHpuTmZ3RHBpOU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wYzg1MTItYjZjMi00NzgyLTlmZWQt
ZmYxNzZhZDhlMGE2LzEvTmk3dTFKdEpvSVBoZGJqQkt4cEhKSG1GQVpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wYzg1MTItYjZjMi00NzgyLTlmZWQtZmYxNzZhZDhlMGE2
LzEvUHQyU2Z3Wml4ZkZlaFVreHpuTmZ3RHBpOU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8ebMA0G
CSqGSIb3DQEBCwUAA4IBAQAXTCxbQr56F9YL+dc37fcltt+2Ggz+j328FmbKralO
HHcnuhVfZXd5fvB2+Vwrj/AZLtBTcenFbgQUB8mo4KLuqHkgGuqUxKO78hXGqvSP
mrBgJ7YLA5TIixifC9f6sjBbyxoMmHM94kgyS8aFKPqYQO0odFNMkWJYReKo7la4
ZlKicBRFBBhCRkBmg2/3wt8nz10w+08l62liLC9zhHWWJCeahNgMs8c4muyM1sUK
fbC9Y6Yba+rIwApyelu8vc8c9V063nVEO6NZ3uLz+rlXLrqy3jW0Oa1J8V9/sH8H
V3KTjInIUoTf75NqghyAZHb5utBVjcVFcztc52IIxxWS
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:54:54 2024 by rpki-client on console-ams.rpki-client.org