Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/9j70uMmPQc4mzLwC1-j1UW7i8UY.roa
File: 9j70uMmPQc4mzLwC1-j1UW7i8UY.roa (raw, json)
Hash identifier: fj3BqLAKDHMJEYBmTkEdaj8E/oaGM8QDpr4E5fbCCSc=
Subject key identifier: F6:3E:F4:B8:C9:8F:41:CE:26:CC:BC:02:D7:E8:F5:51:6E:E2:F1:46
Certificate issuer: /CN=d1df4803e54b084a99cb7bb044bf791327594b73
Certificate serial: 01911939331A6257CCF43396773FED3F9DC5
Authority key identifier: D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/9j70uMmPQc4mzLwC1-j1UW7i8UY.roa
Signing time: Sat 03 Aug 2024 17:11:04 +0000
ROA not before: Sat 03 Aug 2024 17:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 91.142.133.0/24 maxlen: 24
91.193.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:19:39:33:1a:62:57:cc:f4:33:96:77:3f:ed:3f:9d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1df4803e54b084a99cb7bb044bf791327594b73
Validity
Not Before: Aug 3 17:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f63ef4b8c98f41ce26ccbc02d7e8f5516ee2f146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:6e:66:a4:ca:77:13:dd:66:83:d7:57:b3:
ea:3e:34:09:bf:8f:e2:a5:8a:a6:f3:02:68:a7:5b:
da:7a:e2:5e:81:96:03:ba:9c:89:86:f0:39:55:09:
9b:ac:64:3a:b1:c9:5d:04:dc:42:6c:9d:28:3c:d9:
3d:3b:74:a4:ac:a5:05:83:6f:d1:5e:2e:7d:67:1f:
2b:0d:f9:04:bf:49:db:45:01:75:e3:f0:32:77:c3:
50:bb:1d:e0:01:f7:c5:8e:82:e7:03:ca:43:34:77:
c3:41:c7:77:8b:6a:bf:ff:b4:2c:f4:3d:c7:6d:4b:
3d:7b:bd:1c:46:62:19:f4:84:12:6f:a7:8b:48:99:
69:69:d0:9b:4c:f6:f7:92:d7:70:0b:b3:51:77:02:
e0:18:06:e0:39:b5:a9:f1:40:d4:02:b6:b8:ce:04:
69:7a:c9:de:64:3a:73:15:df:fd:a8:0d:6b:75:31:
3f:de:04:6e:87:b3:90:8e:bd:f0:0e:3e:1f:ee:56:
1a:c6:34:ee:25:92:63:88:55:4f:54:8c:b8:b4:c5:
19:71:47:b9:28:60:4b:9d:48:45:af:aa:d3:7f:64:
aa:dc:47:8b:12:5f:5c:dd:92:49:f2:f5:a1:ea:b7:
b3:8b:14:be:40:06:8f:e0:60:85:6d:ae:98:3e:26:
58:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3E:F4:B8:C9:8F:41:CE:26:CC:BC:02:D7:E8:F5:51:6E:E2:F1:46
X509v3 Authority Key Identifier:
keyid:D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/9j70uMmPQc4mzLwC1-j1UW7i8UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.133.0/24
91.193.74.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:bb:92:a8:0a:77:6a:16:f2:e4:e5:3e:4e:9e:3b:bf:0b:e1:
4c:ef:c8:92:92:93:b2:49:d8:26:ce:7f:7d:a6:7b:72:3f:84:
e8:5b:c6:1e:c6:c3:f4:8a:23:7d:ee:de:83:d3:35:4e:ff:d2:
b1:a7:91:fe:f5:1d:48:87:d1:51:88:54:00:68:28:42:11:b5:
3c:5f:a6:9c:a7:b9:f0:44:87:4c:d8:f1:94:ad:7d:c6:0c:a0:
3d:b5:e8:72:33:e5:e8:14:71:4d:f2:ca:22:08:88:94:94:74:
99:2d:27:bc:b3:a5:6a:5b:35:c3:93:8f:1b:56:4f:7e:e8:5f:
d7:75:96:19:28:4d:43:9c:98:ee:85:92:1d:04:9b:a6:27:80:
72:fe:38:9e:ba:66:02:4d:4c:20:f2:51:8d:e3:0c:26:0a:45:
71:ab:a3:04:a5:09:93:fb:5d:06:5e:87:8a:1e:74:4c:b6:ed:
fa:ec:ad:d2:e6:67:75:70:3f:c4:88:04:5a:c0:4e:5a:d1:3a:
a1:f4:3a:f3:0f:88:f1:ae:9e:a6:29:20:6c:6c:b5:f9:63:21:
0e:6f:6f:f5:5e:17:43:83:a3:11:b4:7d:59:cc:9b:14:ef:15:
31:c5:6a:3f:6a:8e:45:2f:d3:f4:83:6a:45:79:82:7b:0f:98:
77:a2:c1:b5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZEZOTMaYlfM9DOWdz/tP53FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGY0ODAzZTU0YjA4NGE5OWNiN2JiMDQ0YmY3OTEzMjc1
OTRiNzMwHhcNMjQwODAzMTcxMTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjNlZjRiOGM5OGY0MWNlMjZjY2JjMDJkN2U4ZjU1MTZlZTJmMTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskZuZqTKdxPdZoPXV7PqPjQJv4/i
pYqm8wJop1vaeuJegZYDupyJhvA5VQmbrGQ6scldBNxCbJ0oPNk9O3SkrKUFg2/R
Xi59Zx8rDfkEv0nbRQF14/Ayd8NQux3gAffFjoLnA8pDNHfDQcd3i2q//7Qs9D3H
bUs9e70cRmIZ9IQSb6eLSJlpadCbTPb3ktdwC7NRdwLgGAbgObWp8UDUAra4zgRp
esneZDpzFd/9qA1rdTE/3gRuh7OQjr3wDj4f7lYaxjTuJZJjiFVPVIy4tMUZcUe5
KGBLnUhFr6rTf2Sq3EeLEl9c3ZJJ8vWh6rezixS+QAaP4GCFba6YPiZYmwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPY+9LjJj0HOJsy8Atfo9VFu4vFGMB8GA1UdIwQY
MBaAFNHfSAPlSwhKmct7sES/eRMnWUtzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGQ5SUEtVkxDRXFaeTN1d1JMOTVFeWRaUzNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8wZDVmNTMtOTY1My00N2ZiLWE5Nzct
NDhmNWU4NzY3ZDAyLzEvOWo3MHVNbVBRYzRtekx3QzEtajFVVzdpOFVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8wZDVmNTMtOTY1My00N2ZiLWE5NzctNDhmNWU4NzY3ZDAy
LzEvMGQ5SUEtVkxDRXFaeTN1d1JMOTVFeWRaUzNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW46FAwQA
W8FKMA0GCSqGSIb3DQEBCwUAA4IBAQCiu5KoCndqFvLk5T5Onju/C+FM78iSkpOy
Sdgmzn99pntyP4ToW8YexsP0iiN97t6D0zVO/9Kxp5H+9R1Ih9FRiFQAaChCEbU8
X6acp7nwRIdM2PGUrX3GDKA9tehyM+XoFHFN8soiCIiUlHSZLSe8s6VqWzXDk48b
Vk9+6F/XdZYZKE1DnJjuhZIdBJumJ4By/jieumYCTUwg8lGN4wwmCkVxq6MEpQmT
+10GXoeKHnRMtu367K3S5md1cD/EiARawE5a0Tqh9DrzD4jxrp6mKSBsbLX5YyEO
b2/1XhdDg6MRtH1ZzJsU7xUxxWo/ao5FL9P0g2pFeYJ7D5h3osG1
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:04:01 2024 by rpki-client on console-fra.rpki-client.org