Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/15Kk4IQJn65-EaAViFEJDMSlUOY.roa
File: 15Kk4IQJn65-EaAViFEJDMSlUOY.roa (raw, json)
Hash identifier: urIvA7cne+XWjwAPrNBq16HR+t+bz0wxLi6C+9BEaCE=
Subject key identifier: D7:92:A4:E0:84:09:9F:AE:7E:11:A0:15:88:51:09:0C:C4:A5:50:E6
Certificate issuer: /CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
Certificate serial: 018CC492E58EA972B2F73EBF71A19B52366A
Authority key identifier: 6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/15Kk4IQJn65-EaAViFEJDMSlUOY.roa
Signing time: Mon 01 Jan 2024 10:30:10 +0000
ROA not before: Mon 01 Jan 2024 10:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51654
IP address blocks: 91.220.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:e5:8e:a9:72:b2:f7:3e:bf:71:a1:9b:52:36:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
Validity
Not Before: Jan 1 10:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d792a4e084099fae7e11a0158851090cc4a550e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:aa:f2:70:65:c8:71:47:6a:0d:ce:e3:26:93:
06:9d:d1:b1:58:c6:04:db:f3:d0:d5:5c:aa:50:86:
ba:75:79:08:e8:f4:e4:5f:ed:ab:f5:da:91:7d:2c:
e2:2c:a0:7f:1b:ec:b7:e9:56:5e:ce:be:9e:78:49:
df:68:41:1e:20:b8:59:57:5d:b9:e9:9e:b5:26:0a:
54:ac:7a:8b:4b:da:02:22:b1:ab:9f:c7:92:5c:5a:
53:b1:e7:ab:81:fd:3d:11:d1:cd:9e:92:9b:6c:f0:
f4:80:cc:c7:43:90:0c:ae:d2:e5:48:a8:db:44:df:
8a:e4:1c:b5:0c:cc:d7:4d:8e:3e:63:16:8e:c2:69:
6c:65:72:c3:7d:c4:d2:0f:31:e9:58:7e:cf:ff:88:
6a:5c:12:bf:2b:e7:df:f9:27:35:a9:a5:54:51:2d:
25:04:1d:61:cd:0e:ba:4f:88:79:4e:ae:d5:12:72:
d2:e6:94:7b:ab:ef:a6:75:5e:a7:eb:51:f9:79:9d:
e7:01:ba:5e:39:25:1c:6c:e1:ab:6b:ee:03:f3:d7:
37:12:65:2a:c5:ba:55:cb:8b:4a:43:24:73:4e:f5:
4f:8f:16:a7:83:53:e0:83:5a:65:57:d7:87:51:42:
69:07:c6:2d:d2:9c:7a:ff:7d:31:b4:90:b2:8f:ea:
8b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:92:A4:E0:84:09:9F:AE:7E:11:A0:15:88:51:09:0C:C4:A5:50:E6
X509v3 Authority Key Identifier:
keyid:6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/15Kk4IQJn65-EaAViFEJDMSlUOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.26.0/24
Signature Algorithm: sha256WithRSAEncryption
92:17:14:e3:f3:42:44:5d:72:bd:e8:b1:30:b3:ad:78:ac:12:
24:72:8c:dd:85:47:f3:3d:92:83:cc:d2:cd:48:b1:f4:6e:87:
96:c3:b1:b4:82:29:39:1f:f7:91:1b:da:1e:88:ad:f5:b1:67:
85:27:c4:68:41:2f:73:0b:d7:6c:32:c8:c9:4a:0f:e5:0d:d7:
c2:9c:c9:78:92:8e:d6:bb:b0:59:88:03:7c:21:f8:97:1e:43:
40:32:97:23:ea:38:c0:66:a1:7f:c5:9f:1d:6b:2b:b1:e9:9a:
66:36:14:ca:fa:4a:57:b6:e4:b0:d4:0f:dc:88:11:05:9c:da:
b5:bf:24:32:83:28:de:92:2a:3f:b3:c0:6b:d9:88:f5:ec:c4:
cc:c5:3e:a7:86:62:0b:cb:bb:ba:4a:73:1f:f9:a0:b2:aa:c5:
84:75:7b:f0:2c:ca:2d:a3:08:68:23:b3:d0:04:6e:d8:ba:d8:
4d:cc:c7:cb:9d:26:c0:52:f9:dd:f0:05:e5:da:ab:71:a0:5d:
36:bd:ec:e3:d8:6f:ba:35:00:64:8e:51:3d:5b:1b:27:5b:a3:
ca:63:e6:07:7c:df:8f:d6:4e:5c:5e:02:a5:0b:0d:13:f5:fc:
c9:4e:9f:74:8e:6c:b9:bd:55:f7:76:31:77:9e:0a:df:8e:45:
9e:ef:4c:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkuWOqXKy9z6/caGbUjZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYjg2YjdiYjAwYTQ0MmUwOGNiM2I4NWE2M2U3YjQ4NDg3
NDJlNzYwHhcNMjQwMTAxMTAzMDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzkyYTRlMDg0MDk5ZmFlN2UxMWEwMTU4ODUxMDkwY2M0YTU1MGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmarycGXIcUdqDc7jJpMGndGxWMYE
2/PQ1VyqUIa6dXkI6PTkX+2r9dqRfSziLKB/G+y36VZezr6eeEnfaEEeILhZV125
6Z61JgpUrHqLS9oCIrGrn8eSXFpTseergf09EdHNnpKbbPD0gMzHQ5AMrtLlSKjb
RN+K5By1DMzXTY4+YxaOwmlsZXLDfcTSDzHpWH7P/4hqXBK/K+ff+Sc1qaVUUS0l
BB1hzQ66T4h5Tq7VEnLS5pR7q++mdV6n61H5eZ3nAbpeOSUcbOGra+4D89c3EmUq
xbpVy4tKQyRzTvVPjxang1Pgg1plV9eHUUJpB8Yt0px6/30xtJCyj+qLGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNeSpOCECZ+ufhGgFYhRCQzEpVDmMB8GA1UdIwQY
MBaAFG64a3uwCkQuCMs7haY+e0hIdC52MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnJocmU3QUtSQzRJeXp1RnBqNTdTRWgwTG5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iODFlNmUtMmZlZi00NjRjLTg5MzUt
MDc3OTAyOWFlMjIyLzEvMTVLazRJUUpuNjUtRWFBVmlGRUpETVNsVU9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iODFlNmUtMmZlZi00NjRjLTg5MzUtMDc3OTAyOWFlMjIy
LzEvYnJocmU3QUtSQzRJeXp1RnBqNTdTRWgwTG5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9waMA0G
CSqGSIb3DQEBCwUAA4IBAQCSFxTj80JEXXK96LEws614rBIkcozdhUfzPZKDzNLN
SLH0boeWw7G0gik5H/eRG9oeiK31sWeFJ8RoQS9zC9dsMsjJSg/lDdfCnMl4ko7W
u7BZiAN8IfiXHkNAMpcj6jjAZqF/xZ8dayux6ZpmNhTK+kpXtuSw1A/ciBEFnNq1
vyQygyjekio/s8Br2Yj17MTMxT6nhmILy7u6SnMf+aCyqsWEdXvwLMotowhoI7PQ
BG7YuthNzMfLnSbAUvnd8AXl2qtxoF02vezj2G+6NQBkjlE9WxsnW6PKY+YHfN+P
1k5cXgKlCw0T9fzJTp90jmy5vVX3djF3ngrfjkWe70xE
-----END CERTIFICATE-----
Generated at Sat Jun 8 07:31:02 2024 by rpki-client on console-ams.rpki-client.org