Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/lZNzCpvr3W7DVoN91E8LSXRt4Wg.roa
File: lZNzCpvr3W7DVoN91E8LSXRt4Wg.roa (raw, json)
Hash identifier: UsGLqcmdq6DTw4kCxca80bI385699ZM6nX1uS12vakk=
Subject key identifier: 95:93:73:0A:9B:EB:DD:6E:C3:56:83:7D:D4:4F:0B:49:74:6D:E1:68
Certificate issuer: /CN=aeaaee1f0923e14a2371f240540fdd21549b14a6
Certificate serial: 018CC94E43EEEAB8BC113BF812F72196037B
Authority key identifier: AE:AA:EE:1F:09:23:E1:4A:23:71:F2:40:54:0F:DD:21:54:9B:14:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/lZNzCpvr3W7DVoN91E8LSXRt4Wg.roa
Signing time: Tue 02 Jan 2024 08:33:18 +0000
ROA not before: Tue 02 Jan 2024 08:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51573
IP address blocks: 91.217.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:43:ee:ea:b8:bc:11:3b:f8:12:f7:21:96:03:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeaaee1f0923e14a2371f240540fdd21549b14a6
Validity
Not Before: Jan 2 08:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9593730a9bebdd6ec356837dd44f0b49746de168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b4:72:5c:4a:83:eb:a1:8d:2f:7d:1f:aa:4d:
66:a1:73:82:62:7a:1e:87:08:d4:6a:50:74:77:e7:
6b:3c:86:84:0a:39:a6:c8:f2:f0:46:7e:7b:3f:d3:
a8:39:8e:14:d6:94:1d:54:c1:16:0a:71:33:0a:5b:
ee:83:6d:03:e4:ae:ae:2c:f2:c8:0d:3a:67:8f:53:
37:c7:0b:a9:62:52:61:0a:c5:88:ed:2b:c6:0c:e7:
ec:dc:de:32:b9:e4:ed:e5:44:40:e1:51:78:c3:47:
09:0c:e7:bb:12:f7:94:81:3e:a9:08:45:6b:a2:41:
89:2b:d0:bf:17:31:fe:4f:0e:79:38:5a:51:ac:e2:
da:24:dc:0e:c4:f9:3a:e6:93:94:5f:c4:78:37:57:
f3:eb:5b:99:17:69:c0:6e:44:42:6f:b6:91:f6:bc:
b8:f0:1c:62:23:17:55:87:d1:17:cd:10:c6:8b:0a:
1f:14:f6:54:aa:69:0b:6d:7c:17:03:46:16:37:6e:
e3:5d:56:dc:b9:80:c2:e3:7e:7a:3a:17:16:04:d0:
ed:f7:d1:8b:a7:32:d8:1c:c2:6c:48:c9:3b:eb:30:
e1:86:0a:a0:5a:2a:1d:35:d5:8d:b7:ca:65:6c:ee:
bc:b7:5f:ed:8e:d0:dd:ce:34:5c:c4:19:6b:46:0b:
8c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:93:73:0A:9B:EB:DD:6E:C3:56:83:7D:D4:4F:0B:49:74:6D:E1:68
X509v3 Authority Key Identifier:
keyid:AE:AA:EE:1F:09:23:E1:4A:23:71:F2:40:54:0F:DD:21:54:9B:14:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/lZNzCpvr3W7DVoN91E8LSXRt4Wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.255.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:32:50:03:36:8e:c9:a9:ba:da:ae:b3:fc:63:10:ff:0e:9b:
bf:b6:e5:e2:b6:a1:99:61:f2:42:3a:79:ed:d6:fb:d3:58:bc:
ef:ec:25:97:1a:a2:c3:a9:a3:d5:35:32:85:70:09:87:71:d3:
d0:0e:cd:95:49:e5:06:2b:49:73:1d:a6:d6:64:90:56:46:6e:
9c:ab:e8:4e:4c:09:d0:80:37:13:96:6b:67:af:05:4f:ed:db:
7c:bd:a2:9e:91:12:27:dd:89:82:9f:3c:68:ae:ec:ca:ad:12:
73:4d:61:37:f0:3a:05:2d:7c:d7:08:65:2c:f8:6a:cc:fa:d1:
50:9a:d8:17:a7:23:5d:1d:c5:ca:fe:4c:b5:dd:46:40:75:c3:
b0:1b:1a:48:d7:83:1a:e9:47:35:95:99:69:6d:e3:6f:14:06:
36:8c:72:bc:f7:28:5c:00:c8:0d:53:fb:c4:c4:89:2d:17:1d:
f1:f9:6b:7b:0e:04:3b:16:0f:6d:f7:7b:1d:a2:14:8e:d5:6e:
64:2b:b1:ef:ba:b1:4d:85:59:97:bc:02:7e:84:ee:6a:79:50:
44:d8:8c:c1:53:39:ca:74:8f:57:c7:5a:d1:18:5d:38:9e:70:
7e:52:44:7d:32:c7:1b:c4:cd:32:ab:e6:f2:fa:e2:10:3f:2e:
15:18:1d:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTkPu6ri8ETv4EvchlgN7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYWFlZTFmMDkyM2UxNGEyMzcxZjI0MDU0MGZkZDIxNTQ5
YjE0YTYwHhcNMjQwMTAyMDgzMzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTkzNzMwYTliZWJkZDZlYzM1NjgzN2RkNDRmMGI0OTc0NmRlMTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7RyXEqD66GNL30fqk1moXOCYnoe
hwjUalB0d+drPIaECjmmyPLwRn57P9OoOY4U1pQdVMEWCnEzClvug20D5K6uLPLI
DTpnj1M3xwupYlJhCsWI7SvGDOfs3N4yueTt5URA4VF4w0cJDOe7EveUgT6pCEVr
okGJK9C/FzH+Tw55OFpRrOLaJNwOxPk65pOUX8R4N1fz61uZF2nAbkRCb7aR9ry4
8BxiIxdVh9EXzRDGiwofFPZUqmkLbXwXA0YWN27jXVbcuYDC4356OhcWBNDt99GL
pzLYHMJsSMk76zDhhgqgWiodNdWNt8plbO68t1/tjtDdzjRcxBlrRguMQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJWTcwqb691uw1aDfdRPC0l0beFoMB8GA1UdIwQY
MBaAFK6q7h8JI+FKI3HyQFQP3SFUmxSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnFydUh3a2o0VW9qY2ZKQVZBX2RJVlNiRktZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ODZhYjktMWE4MS00Mjg0LWI0YjIt
Y2Q4YjBjNGJlMjE1LzEvbFpOekNwdnIzVzdEVm9OOTFFOExTWFJ0NFdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81ODZhYjktMWE4MS00Mjg0LWI0YjItY2Q4YjBjNGJlMjE1
LzEvcnFydUh3a2o0VW9qY2ZKQVZBX2RJVlNiRktZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9n/MA0G
CSqGSIb3DQEBCwUAA4IBAQCfMlADNo7JqbrarrP8YxD/Dpu/tuXitqGZYfJCOnnt
1vvTWLzv7CWXGqLDqaPVNTKFcAmHcdPQDs2VSeUGK0lzHabWZJBWRm6cq+hOTAnQ
gDcTlmtnrwVP7dt8vaKekRIn3YmCnzxoruzKrRJzTWE38DoFLXzXCGUs+GrM+tFQ
mtgXpyNdHcXK/ky13UZAdcOwGxpI14Ma6Uc1lZlpbeNvFAY2jHK89yhcAMgNU/vE
xIktFx3x+Wt7DgQ7Fg9t93sdohSO1W5kK7HvurFNhVmXvAJ+hO5qeVBE2IzBUznK
dI9Xx1rRGF04nnB+UkR9MscbxM0yq+by+uIQPy4VGB1o
-----END CERTIFICATE-----
Generated at Sat Jun 8 07:30:43 2024 by rpki-client on console-ams.rpki-client.org