Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/ERH0M8rBZY63h5hGwmwrgI0jkUQ.roa
File: ERH0M8rBZY63h5hGwmwrgI0jkUQ.roa (raw, json)
Hash identifier: 2AULkqQRDVYaR9FJ2OUk2FKylspp1AqXmGZcuJi6gsw=
Subject key identifier: 11:11:F4:33:CA:C1:65:8E:B7:87:98:46:C2:6C:2B:80:8D:23:91:44
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 018CCA2BDF870CDFB77C53141385C42577A2
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/ERH0M8rBZY63h5hGwmwrgI0jkUQ.roa
Signing time: Tue 02 Jan 2024 12:35:22 +0000
ROA not before: Tue 02 Jan 2024 12:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206092
IP address blocks: 91.193.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:df:87:0c:df:b7:7c:53:14:13:85:c4:25:77:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jan 2 12:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1111f433cac1658eb7879846c26c2b808d239144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ac:0c:7a:2c:5a:e3:9a:f6:67:40:30:63:c8:
b8:46:d4:16:be:a0:ac:c9:29:bb:72:16:84:85:d0:
c4:e8:fe:b8:5e:e4:25:eb:59:d3:3c:a6:58:5b:02:
d1:3b:17:64:ab:fa:91:4f:9c:97:bf:5c:8a:3b:ad:
08:3d:9e:4c:cf:21:0d:42:19:41:06:f3:ac:f2:c6:
f8:44:47:68:dd:27:58:61:1a:7f:21:73:95:c8:21:
a6:35:74:fc:f2:2d:09:43:2f:1b:36:57:22:7e:94:
9c:07:b3:d4:6b:de:84:1a:11:e6:82:0d:84:c2:c8:
c0:4e:87:9d:b3:56:5f:09:cd:ac:b8:7a:b9:88:1f:
c0:1c:61:71:4d:bc:b5:d8:6c:49:4b:77:d8:b3:42:
0a:87:20:e2:86:d4:da:77:5a:29:ca:6d:a0:1d:88:
41:99:f7:bc:00:8d:03:1f:a3:1d:ff:5c:d8:a9:33:
7e:45:49:32:a7:9e:c4:eb:4a:7c:ce:62:66:ad:f4:
0e:c9:db:ee:d9:bf:8d:24:23:f6:93:5f:56:0d:dd:
ef:06:fd:59:64:01:82:01:46:9f:81:4b:70:6e:ea:
b3:51:50:22:6e:60:e9:70:70:06:83:46:3d:00:16:
b7:a6:b0:b1:8c:11:67:c4:a3:58:19:44:14:a3:d1:
22:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:11:F4:33:CA:C1:65:8E:B7:87:98:46:C2:6C:2B:80:8D:23:91:44
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/ERH0M8rBZY63h5hGwmwrgI0jkUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.233.0/24
Signature Algorithm: sha256WithRSAEncryption
27:52:1b:ec:f7:f0:3f:97:4d:ae:48:cb:a9:70:14:28:20:87:
a1:c0:97:48:4d:6e:a3:91:95:b9:b6:98:6e:85:79:34:33:eb:
43:9f:40:d5:d1:e7:d4:f8:96:c3:af:fe:32:77:5e:a6:b6:94:
0c:6c:e3:0f:3f:4b:ad:3a:00:ca:0d:1b:75:69:0a:24:6b:6a:
1a:eb:35:75:14:ad:f4:95:e8:fc:16:c6:da:5a:6e:d0:f5:0f:
4d:a4:b6:8a:57:8e:d1:2a:73:52:21:c5:bc:2e:43:13:e5:ba:
d9:d2:61:ec:93:00:00:6a:f5:c5:b0:5f:23:2b:d5:0c:b5:d3:
f5:bc:eb:c1:3f:00:aa:d4:8e:f1:c3:ad:32:69:67:c6:63:47:
b5:84:02:ce:81:4b:a7:ee:69:7e:3e:a9:46:a5:2a:7b:41:a3:
26:2e:f3:83:7a:83:79:ff:74:10:e7:5a:10:cc:bf:eb:6e:ba:
e9:ba:8c:d5:98:32:59:79:92:88:ba:33:da:70:4d:b3:d9:d8:
1f:c6:97:05:51:e1:5e:52:21:99:f4:81:b4:6f:89:2d:cb:74:
f2:e3:0b:61:2c:99:97:ec:fa:d1:fe:13:0a:ab:7c:aa:4e:8d:
04:90:16:ac:f0:bd:5e:b1:52:c5:34:bf:9b:07:89:ce:df:c3:
47:9e:d9:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKK9+HDN+3fFMUE4XEJXeiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy
NTdkYzQwHhcNMjQwMTAyMTIzNTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTExZjQzM2NhYzE2NThlYjc4Nzk4NDZjMjZjMmI4MDhkMjM5MTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKwMeixa45r2Z0AwY8i4RtQWvqCs
ySm7chaEhdDE6P64XuQl61nTPKZYWwLROxdkq/qRT5yXv1yKO60IPZ5MzyENQhlB
BvOs8sb4REdo3SdYYRp/IXOVyCGmNXT88i0JQy8bNlcifpScB7PUa96EGhHmgg2E
wsjAToeds1ZfCc2suHq5iB/AHGFxTby12GxJS3fYs0IKhyDihtTad1opym2gHYhB
mfe8AI0DH6Md/1zYqTN+RUkyp57E60p8zmJmrfQOydvu2b+NJCP2k19WDd3vBv1Z
ZAGCAUafgUtwbuqzUVAibmDpcHAGg0Y9ABa3prCxjBFnxKNYGUQUo9EiMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBER9DPKwWWOt4eYRsJsK4CNI5FEMB8GA1UdIwQY
MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt
OTk5MGUyZDllYWZlLzEvRVJIME04ckJaWTYzaDVoR3dtd3JnSTBqa1VRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl
LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8HpMA0G
CSqGSIb3DQEBCwUAA4IBAQAnUhvs9/A/l02uSMupcBQoIIehwJdITW6jkZW5tphu
hXk0M+tDn0DV0efU+JbDr/4yd16mtpQMbOMPP0utOgDKDRt1aQoka2oa6zV1FK30
lej8FsbaWm7Q9Q9NpLaKV47RKnNSIcW8LkMT5brZ0mHskwAAavXFsF8jK9UMtdP1
vOvBPwCq1I7xw60yaWfGY0e1hALOgUun7ml+PqlGpSp7QaMmLvODeoN5/3QQ51oQ
zL/rbrrpuozVmDJZeZKIujPacE2z2dgfxpcFUeFeUiGZ9IG0b4kty3Ty4wthLJmX
7PrR/hMKq3yqTo0EkBas8L1esVLFNL+bB4nO38NHntk6
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:32:24 2024 by rpki-client on console-ams.rpki-client.org