Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/Ah9wqMvEOM1dCxgW5U56W0TpTss.roa
File: Ah9wqMvEOM1dCxgW5U56W0TpTss.roa (raw, json)
Hash identifier: 0/GhANhsHFzvJEm1yX5Ubv1iMBCLxfcVc3OcP1xvMmc=
Subject key identifier: 02:1F:70:A8:CB:C4:38:CD:5D:0B:18:16:E5:4E:7A:5B:44:E9:4E:CB
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018D78EB2F521ED891B5B359EAE6E8ECD6AF
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/Ah9wqMvEOM1dCxgW5U56W0TpTss.roa
Signing time: Mon 05 Feb 2024 10:58:15 +0000
ROA not before: Mon 05 Feb 2024 10:58:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216050
IP address blocks: 92.61.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:78:eb:2f:52:1e:d8:91:b5:b3:59:ea:e6:e8:ec:d6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Feb 5 10:58:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=021f70a8cbc438cd5d0b1816e54e7a5b44e94ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:8d:38:f3:0f:4b:70:2d:5c:0f:09:a7:b5:
21:1a:4b:dc:fd:00:8e:90:af:f5:a3:44:46:d3:a5:
6c:4f:66:90:d2:72:b5:8d:5a:83:2b:f4:97:e5:f9:
0f:49:6e:7a:c1:11:26:e5:aa:b2:98:d8:b3:a9:82:
b6:c4:85:30:04:cd:64:7a:45:52:2e:bd:04:4b:59:
2e:88:b2:e1:c0:38:25:5d:8f:f7:3b:e1:fb:c9:32:
44:5e:17:87:95:d0:c0:09:63:57:88:c8:d5:ef:85:
ae:e1:68:ad:e1:c1:4c:70:9e:0e:d6:35:5d:80:5c:
7c:b4:ac:16:c3:11:21:d0:a3:2a:9f:70:8a:b9:ca:
b8:72:6b:b0:c3:e1:4e:5c:56:aa:25:30:74:ef:28:
9b:c8:f4:e8:05:4b:86:17:45:7d:17:c9:8f:c5:a3:
3f:32:72:a6:13:06:0a:11:89:0e:4b:54:62:f1:fa:
33:8b:1b:75:3c:fb:ba:b4:df:42:5f:9b:8f:c1:a6:
12:93:e0:9c:d8:bd:36:c3:08:ec:33:8e:ee:23:6f:
3a:f0:9e:a5:c9:c5:ae:35:36:98:10:df:8b:d8:7f:
6d:e6:d7:4a:79:c7:9e:90:63:e8:0b:08:6d:60:c8:
84:d7:3c:ab:d0:da:3e:0c:32:53:4d:83:ac:66:05:
d0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1F:70:A8:CB:C4:38:CD:5D:0B:18:16:E5:4E:7A:5B:44:E9:4E:CB
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/Ah9wqMvEOM1dCxgW5U56W0TpTss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.111.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:42:24:da:fe:60:67:71:2a:72:57:3f:d8:0f:f1:73:58:10:
69:a8:d8:83:c2:c5:9f:8c:48:c9:15:24:1f:3a:fc:c4:f7:f4:
9f:2b:91:93:ab:1a:c8:64:d9:20:42:86:50:b1:2a:1c:38:9a:
88:80:d9:e2:cb:32:49:94:66:08:84:ee:e0:be:74:a4:ec:9a:
6b:4b:6a:ce:e5:f8:07:f0:b8:19:ec:a1:76:86:d8:bb:28:9f:
01:06:4c:80:b3:23:17:a1:45:b4:91:2a:a7:4c:84:0c:45:20:
45:ce:41:7c:8a:2c:29:3f:e8:f8:01:5e:3d:7c:ce:d9:fe:c4:
7b:05:4b:b6:8a:88:e6:a5:dd:2a:73:d7:69:6d:50:ec:8f:0d:
b0:fc:65:ba:73:f4:a2:41:fc:dd:11:81:1b:93:01:00:9a:a0:
4c:ff:4f:46:ff:d1:2b:75:18:98:9f:da:e8:dc:76:b4:d3:0c:
46:7a:91:16:30:1f:82:b3:ee:14:11:9e:4c:42:82:8b:65:9c:
aa:99:6b:eb:65:0a:26:2e:f5:1e:a5:68:32:e6:b4:8b:bc:61:
f8:da:c8:98:c3:9a:73:67:09:39:bd:1a:49:37:28:bd:19:9d:
c5:f3:a2:59:7b:db:a5:b4:21:95:1f:17:6c:d0:5a:33:04:b8:
d6:37:45:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY146y9SHtiRtbNZ6ubo7NavMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw
YzZmYzMwHhcNMjQwMjA1MTA1ODE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjFmNzBhOGNiYzQzOGNkNWQwYjE4MTZlNTRlN2E1YjQ0ZTk0ZWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApciNOPMPS3AtXA8Jp7UhGkvc/QCO
kK/1o0RG06VsT2aQ0nK1jVqDK/SX5fkPSW56wREm5aqymNizqYK2xIUwBM1kekVS
Lr0ES1kuiLLhwDglXY/3O+H7yTJEXheHldDACWNXiMjV74Wu4Wit4cFMcJ4O1jVd
gFx8tKwWwxEh0KMqn3CKucq4cmuww+FOXFaqJTB07yibyPToBUuGF0V9F8mPxaM/
MnKmEwYKEYkOS1Ri8fozixt1PPu6tN9CX5uPwaYSk+Cc2L02wwjsM47uI2868J6l
ycWuNTaYEN+L2H9t5tdKeceekGPoCwhtYMiE1zyr0No+DDJTTYOsZgXQQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAIfcKjLxDjNXQsYFuVOeltE6U7LMB8GA1UdIwQY
MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt
ZjFjMzNhYTJmZDUwLzEvQWg5d3FNdkVPTTFkQ3hnVzVVNTZXMFRwVHNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw
LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD1vMA0G
CSqGSIb3DQEBCwUAA4IBAQC3QiTa/mBncSpyVz/YD/FzWBBpqNiDwsWfjEjJFSQf
OvzE9/SfK5GTqxrIZNkgQoZQsSocOJqIgNniyzJJlGYIhO7gvnSk7JprS2rO5fgH
8LgZ7KF2hti7KJ8BBkyAsyMXoUW0kSqnTIQMRSBFzkF8iiwpP+j4AV49fM7Z/sR7
BUu2iojmpd0qc9dpbVDsjw2w/GW6c/SiQfzdEYEbkwEAmqBM/09G/9ErdRiYn9ro
3Ha00wxGepEWMB+Cs+4UEZ5MQoKLZZyqmWvrZQomLvUepWgy5rSLvGH42siYw5pz
Zwk5vRpJNyi9GZ3F86JZe9ultCGVHxds0FozBLjWN0WM
-----END CERTIFICATE-----
Generated at Mon May 20 18:21:42 2024 by rpki-client on console-fra.rpki-client.org