Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/rLgWYwedERQV0qquse9NPvj21ic.roa
File: rLgWYwedERQV0qquse9NPvj21ic.roa (raw, json)
Hash identifier: o4P6sBI2iJS/agPQobDRCN6/+HiXbNxUl0749ZhdYK8=
Subject key identifier: AC:B8:16:63:07:9D:11:14:15:D2:AA:AE:B1:EF:4D:3E:F8:F6:D6:27
Certificate issuer: /CN=a20cc67154b403145d139469886127ab629eb928
Certificate serial: 018CC56DFB06913FA6036A2D57587DB7AD65
Authority key identifier: A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/rLgWYwedERQV0qquse9NPvj21ic.roa
Signing time: Mon 01 Jan 2024 14:29:28 +0000
ROA not before: Mon 01 Jan 2024 14:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216306
IP address blocks: 91.208.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:fb:06:91:3f:a6:03:6a:2d:57:58:7d:b7:ad:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20cc67154b403145d139469886127ab629eb928
Validity
Not Before: Jan 1 14:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=acb81663079d111415d2aaaeb1ef4d3ef8f6d627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:da:49:67:b6:d6:62:9a:cb:8e:b3:c5:07:aa:
6c:e3:34:10:fa:fb:af:d3:af:62:08:5b:37:c3:7e:
a6:ee:30:81:00:a9:41:cc:bd:ea:71:b5:70:53:ef:
47:ab:62:4d:24:c1:b7:89:10:0e:88:23:8f:16:ab:
a6:03:6c:f2:c8:ce:aa:15:93:ac:4e:79:43:f5:69:
2d:b1:06:d8:99:99:4a:83:49:09:8e:ea:c5:fd:3f:
63:6a:3d:a5:41:af:b5:88:f6:e0:c1:14:c8:c0:27:
66:d2:f9:54:bd:f8:ff:23:de:8d:2e:95:9b:69:c1:
01:fc:4f:7e:6a:86:7d:28:ed:8e:65:2b:ca:83:40:
40:db:4b:85:31:ad:dd:fc:da:e7:7f:e6:ce:1d:96:
1b:7b:23:90:b8:b9:a8:15:e1:7b:d7:df:d1:51:54:
19:37:cb:2c:10:70:78:47:23:9d:d6:6f:93:c9:9f:
00:1f:97:b0:51:f7:6f:db:9b:66:21:37:8e:cd:3f:
d7:54:68:13:4c:dd:34:3e:71:a6:08:8e:c6:48:6a:
a8:31:40:e0:b2:72:f2:6c:03:57:91:a8:d8:af:ce:
48:01:e9:13:b2:4b:0b:ca:4b:7b:60:fb:0f:98:5b:
25:d7:41:be:bf:23:ba:41:aa:3c:b8:f1:ca:ee:0d:
0c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B8:16:63:07:9D:11:14:15:D2:AA:AE:B1:EF:4D:3E:F8:F6:D6:27
X509v3 Authority Key Identifier:
keyid:A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/rLgWYwedERQV0qquse9NPvj21ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.118.0/24
Signature Algorithm: sha256WithRSAEncryption
11:0b:6e:9f:ed:34:71:89:9c:c8:34:1b:60:2a:26:b6:e7:6f:
d1:46:25:ec:84:5a:fc:ca:da:7a:e8:ef:8d:f0:59:7b:be:60:
c5:ae:bc:da:5d:99:82:62:85:6e:5f:33:ed:9e:b0:a5:61:01:
af:a2:7d:49:d8:38:22:87:31:d6:01:7b:33:32:16:f4:1f:c4:
84:30:72:49:69:65:51:12:7c:53:d0:2e:dc:98:a6:ad:0f:9e:
86:f1:72:1f:ea:1b:41:0b:0f:1e:ee:38:92:e0:81:ab:28:55:
37:98:f6:a2:60:a7:20:37:84:cf:11:34:fc:40:ad:b4:64:2e:
32:8f:59:b6:d9:fe:1e:05:03:e1:0f:02:90:c2:af:c8:07:ea:
7c:84:5e:21:65:48:1a:a1:72:2e:23:6f:aa:e9:27:a0:46:c1:
99:77:2a:1a:e5:e6:5a:0e:c8:9c:cc:10:8b:19:84:98:2e:6b:
1e:a8:d6:9d:d3:1c:16:7e:c8:0f:16:b3:e7:a3:4d:3b:22:4d:
0d:0c:00:8e:41:a5:38:61:b3:02:aa:70:33:84:be:ee:dc:7b:
fa:dd:6b:0b:07:2e:bd:51:e9:e0:1c:b1:ee:aa:7b:b3:d2:2c:
f8:91:5d:c4:6d:8e:b9:51:ad:87:ba:eb:2b:6d:c9:27:e3:17:
1c:97:ba:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbfsGkT+mA2otV1h9t61lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMGNjNjcxNTRiNDAzMTQ1ZDEzOTQ2OTg4NjEyN2FiNjI5
ZWI5MjgwHhcNMjQwMTAxMTQyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2I4MTY2MzA3OWQxMTE0MTVkMmFhYWViMWVmNGQzZWY4ZjZkNjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptpJZ7bWYprLjrPFB6ps4zQQ+vuv
069iCFs3w36m7jCBAKlBzL3qcbVwU+9Hq2JNJMG3iRAOiCOPFqumA2zyyM6qFZOs
TnlD9WktsQbYmZlKg0kJjurF/T9jaj2lQa+1iPbgwRTIwCdm0vlUvfj/I96NLpWb
acEB/E9+aoZ9KO2OZSvKg0BA20uFMa3d/Nrnf+bOHZYbeyOQuLmoFeF719/RUVQZ
N8ssEHB4RyOd1m+TyZ8AH5ewUfdv25tmITeOzT/XVGgTTN00PnGmCI7GSGqoMUDg
snLybANXkajYr85IAekTsksLykt7YPsPmFsl10G+vyO6Qao8uPHK7g0M3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKy4FmMHnREUFdKqrrHvTT749tYnMB8GA1UdIwQY
MBaAFKIMxnFUtAMUXROUaYhhJ6tinrkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2d6R2NWUzBBeFJkRTVScGlHRW5xMktldVNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kZDg4NzgtMjk0MS00YzE1LWIyMDQt
OGZjMzM3MzdjZWFiLzEvckxnV1l3ZWRFUlFWMHFxdXNlOU5QdmoyMWljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kZDg4NzgtMjk0MS00YzE1LWIyMDQtOGZjMzM3MzdjZWFi
LzEvb2d6R2NWUzBBeFJkRTVScGlHRW5xMktldVNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9B2MA0G
CSqGSIb3DQEBCwUAA4IBAQARC26f7TRxiZzINBtgKia252/RRiXshFr8ytp66O+N
8Fl7vmDFrrzaXZmCYoVuXzPtnrClYQGvon1J2DgihzHWAXszMhb0H8SEMHJJaWVR
EnxT0C7cmKatD56G8XIf6htBCw8e7jiS4IGrKFU3mPaiYKcgN4TPETT8QK20ZC4y
j1m22f4eBQPhDwKQwq/IB+p8hF4hZUgaoXIuI2+q6SegRsGZdyoa5eZaDsiczBCL
GYSYLmseqNad0xwWfsgPFrPno007Ik0NDACOQaU4YbMCqnAzhL7u3Hv63WsLBy69
UengHLHuqnuz0iz4kV3EbY65Ua2Huusrbckn4xccl7qt
-----END CERTIFICATE-----
Generated at Sat Jun 8 10:20:18 2024 by rpki-client on console-fra.rpki-client.org