Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/91qMe9a8NS-0klv2Y_JijQ9zIHg.roa
File: 91qMe9a8NS-0klv2Y_JijQ9zIHg.roa (raw, json)
Hash identifier: 4rTfF6YH7XnFRtNf9YprI3kPV/pyqvRHxaOMs+b/59M=
Subject key identifier: F7:5A:8C:7B:D6:BC:35:2F:B4:92:5B:F6:63:F2:62:8D:0F:73:20:78
Certificate issuer: /CN=22c5feb2d25fac4dd8baa4f71d8dc2268186a039
Certificate serial: 01921E05C9764547F3C6DF765B48391FF5E9
Authority key identifier: 22:C5:FE:B2:D2:5F:AC:4D:D8:BA:A4:F7:1D:8D:C2:26:81:86:A0:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/91qMe9a8NS-0klv2Y_JijQ9zIHg.roa
Signing time: Mon 23 Sep 2024 08:35:48 +0000
ROA not before: Mon 23 Sep 2024 08:35:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48399
IP address blocks: 45.15.254.0/24 maxlen: 24
45.93.13.0/24 maxlen: 24
85.193.70.0/23 maxlen: 23
178.170.223.0/24 maxlen: 24
185.190.116.0/23 maxlen: 23
185.190.118.0/23 maxlen: 23
192.70.196.0/23 maxlen: 23
192.70.198.0/23 maxlen: 23
2a07:ecc0::/30 maxlen: 30
2a07:ecc4::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1e:05:c9:76:45:47:f3:c6:df:76:5b:48:39:1f:f5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c5feb2d25fac4dd8baa4f71d8dc2268186a039
Validity
Not Before: Sep 23 08:35:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f75a8c7bd6bc352fb4925bf663f2628d0f732078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:73:c0:a6:ad:4b:c0:cd:66:db:66:90:49:
8b:dc:87:50:c3:a1:bb:f5:6f:28:a3:74:0b:69:f0:
e2:a4:8e:2c:bc:48:fb:09:58:5a:f7:13:2f:33:9e:
28:1d:3f:bc:94:56:20:b7:d9:ee:9a:62:c2:fe:18:
bf:65:c5:52:ce:d8:7c:77:28:c7:67:05:a3:1f:4a:
f2:95:4f:a4:3a:53:be:98:c5:be:fd:ff:d9:29:4e:
64:45:b4:53:31:fb:2d:19:ab:56:26:44:bd:61:16:
cc:d0:36:69:bb:cd:7e:a2:72:16:70:70:ef:d7:2d:
34:8e:7d:57:0c:3c:f7:32:26:8e:c0:78:3b:35:b5:
c3:f5:14:97:74:db:a1:dd:dd:c7:96:23:52:b8:dc:
d6:4f:85:6e:32:c2:d4:fa:13:26:9f:56:f2:ce:a9:
a2:7a:33:ab:86:27:07:2e:e9:36:e0:3a:a7:c1:54:
c5:08:9c:50:14:cd:a8:62:89:9f:17:39:b5:d4:08:
b1:6c:04:2e:43:4e:70:18:19:32:11:4a:56:0d:fd:
64:6d:45:7f:48:63:5c:bc:fc:39:04:a2:32:65:bc:
5e:45:1a:88:a5:97:a9:09:6b:69:23:3e:35:58:fa:
03:ec:87:d1:22:8e:06:e8:4d:f0:ae:c2:5e:4a:c1:
43:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5A:8C:7B:D6:BC:35:2F:B4:92:5B:F6:63:F2:62:8D:0F:73:20:78
X509v3 Authority Key Identifier:
keyid:22:C5:FE:B2:D2:5F:AC:4D:D8:BA:A4:F7:1D:8D:C2:26:81:86:A0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/91qMe9a8NS-0klv2Y_JijQ9zIHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.254.0/24
45.93.13.0/24
85.193.70.0/23
178.170.223.0/24
185.190.116.0/22
192.70.196.0/22
IPv6:
2a07:ecc0::/29
Signature Algorithm: sha256WithRSAEncryption
46:e9:a7:89:e8:41:3d:ca:14:20:e8:4d:51:6b:f0:74:ff:52:
5a:a8:fd:4c:e3:29:ab:43:1e:38:68:2a:b4:0e:ae:2a:25:d1:
3a:38:e6:7f:6f:ff:1d:5e:06:59:e5:95:75:fa:94:33:2a:30:
ec:cc:ac:8b:73:df:dc:a3:07:93:63:13:7d:cd:53:73:d4:cb:
50:18:4d:44:76:ae:df:62:c3:d7:e5:35:df:ba:87:4b:e1:8c:
9d:96:50:dc:9a:a1:2e:10:85:0a:98:23:b5:ad:68:29:4c:ac:
c9:f8:b7:bd:b4:08:9a:22:d2:6d:57:38:8e:4b:91:32:3f:64:
1e:45:8a:4d:57:ea:b7:d0:b6:e0:d3:b7:f1:0a:07:01:6f:f2:
18:ec:15:ad:e2:16:ff:f4:de:dd:92:8d:80:72:af:b9:89:c7:
b9:a2:99:c8:3f:ae:32:d1:fb:4f:3d:9f:1d:d1:25:a9:72:7f:
29:2f:2f:d2:74:90:79:92:76:20:2d:de:07:f4:33:ba:dc:7d:
b7:f1:7c:08:7a:ec:0e:0b:58:f8:be:2d:00:fa:54:fb:45:bb:
b6:3b:95:66:aa:c9:3c:34:e2:f1:ae:45:2a:70:9f:97:d5:95:
d8:96:56:5a:2d:e0:be:c9:08:82:b0:5e:98:7d:ca:0c:8c:c6:
d6:99:96:53
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZIeBcl2RUfzxt92W0g5H/XpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzVmZWIyZDI1ZmFjNGRkOGJhYTRmNzFkOGRjMjI2ODE4
NmEwMzkwHhcNMjQwOTIzMDgzNTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzVhOGM3YmQ2YmMzNTJmYjQ5MjViZjY2M2YyNjI4ZDBmNzMyMDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubdzwKatS8DNZttmkEmL3IdQw6G7
9W8oo3QLafDipI4svEj7CVha9xMvM54oHT+8lFYgt9nummLC/hi/ZcVSzth8dyjH
ZwWjH0rylU+kOlO+mMW+/f/ZKU5kRbRTMfstGatWJkS9YRbM0DZpu81+onIWcHDv
1y00jn1XDDz3MiaOwHg7NbXD9RSXdNuh3d3HliNSuNzWT4VuMsLU+hMmn1byzqmi
ejOrhicHLuk24DqnwVTFCJxQFM2oYomfFzm11AixbAQuQ05wGBkyEUpWDf1kbUV/
SGNcvPw5BKIyZbxeRRqIpZepCWtpIz41WPoD7IfRIo4G6E3wrsJeSsFDiwIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFPdajHvWvDUvtJJb9mPyYo0PcyB4MB8GA1UdIwQY
MBaAFCLF/rLSX6xN2Lqk9x2NwiaBhqA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNYLXN0SmZyRTNZdXFUM0hZM0NKb0dHb0RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kMjE2ZWQtOWE3Ni00YTkzLWI2YTkt
NDY4ZjQ5OGZhZjFjLzEvOTFxTWU5YThOUy0wa2x2MllfSmlqUTl6SUhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9kMjE2ZWQtOWE3Ni00YTkzLWI2YTktNDY4ZjQ5OGZhZjFj
LzEvSXNYLXN0SmZyRTNZdXFUM0hZM0NKb0dHb0RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQALQ/+AwQA
LV0NAwQBVcFGAwQAsqrfAwQCub50AwQCwEbEMA0EAgACMAcDBQMqB+zAMA0GCSqG
SIb3DQEBCwUAA4IBAQBG6aeJ6EE9yhQg6E1Ra/B0/1JaqP1M4ymrQx44aCq0Dq4q
JdE6OOZ/b/8dXgZZ5ZV1+pQzKjDszKyLc9/coweTYxN9zVNz1MtQGE1Edq7fYsPX
5TXfuodL4YydllDcmqEuEIUKmCO1rWgpTKzJ+Le9tAiaItJtVziOS5EyP2QeRYpN
V+q30Lbg07fxCgcBb/IY7BWt4hb/9N7dko2Acq+5ice5opnIP64y0ftPPZ8d0SWp
cn8pLy/SdJB5knYgLd4H9DO63H238XwIeuwOC1j4vi0A+lT7Rbu2O5Vmqsk8NOLx
rkUqcJ+X1ZXYllZaLeC+yQiCsF6YfcoMjMbWmZZT
-----END CERTIFICATE-----
Generated at Tue Nov 26 23:17:18 2024 by rpki-client on console-fra.rpki-client.org