Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/wBS_McyvU63apKo-g3Eo_AUpl_U.roa
File: wBS_McyvU63apKo-g3Eo_AUpl_U.roa (raw, json)
Hash identifier: qDXKLrXcsgEyBo3lXg8dWkZp2Qaz5cq4YLqWZHgBNHc=
Subject key identifier: C0:14:BF:31:CC:AF:53:AD:DA:A4:AA:3E:83:71:28:FC:05:29:97:F5
Certificate issuer: /CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Certificate serial: 018CC4246D3C9A400C14AC4DA46CC0A1AEF8
Authority key identifier: FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/wBS_McyvU63apKo-g3Eo_AUpl_U.roa
Signing time: Mon 01 Jan 2024 08:29:30 +0000
ROA not before: Mon 01 Jan 2024 08:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20676
IP address blocks: 91.208.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:6d:3c:9a:40:0c:14:ac:4d:a4:6c:c0:a1:ae:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Validity
Not Before: Jan 1 08:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c014bf31ccaf53addaa4aa3e837128fc052997f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:66:00:50:71:71:54:1d:85:27:33:92:60:02:
69:f0:08:44:0f:30:4f:23:1b:96:46:e9:64:5c:c0:
ee:6e:e4:2d:30:d2:f9:77:81:89:3a:b3:ab:f7:90:
92:0c:b4:1d:07:61:b7:04:26:4b:82:8d:79:6e:e4:
ac:39:b8:05:19:29:97:90:72:b9:6c:17:41:6b:0d:
4c:a2:af:a2:75:a3:7c:25:79:ff:7e:eb:ba:57:cb:
60:a7:b6:43:28:7a:25:72:f4:0b:20:79:64:47:3c:
34:63:32:16:68:bf:61:9e:ab:c6:82:ad:fc:b1:68:
a5:18:68:66:f8:75:11:ae:ce:5a:62:d8:42:2d:4a:
7b:a0:04:6d:79:50:aa:28:01:0a:f7:32:06:ab:06:
3d:db:00:dc:c1:f0:55:68:ec:29:f1:36:3f:25:c9:
9e:64:74:59:15:90:20:4f:9d:95:c3:76:06:7f:0d:
1a:bd:f2:4d:c2:e7:62:a8:89:6f:88:d5:af:80:e3:
68:07:cc:c4:9e:25:fa:c9:b4:9a:46:62:37:06:0a:
eb:26:0a:94:f1:28:77:cd:06:b8:5d:6a:31:57:fe:
ae:0b:a6:31:22:29:27:bf:71:00:97:48:04:c5:d3:
f7:d4:09:38:1a:4a:44:fe:23:d1:ec:d7:ea:f5:97:
7f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:14:BF:31:CC:AF:53:AD:DA:A4:AA:3E:83:71:28:FC:05:29:97:F5
X509v3 Authority Key Identifier:
keyid:FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/wBS_McyvU63apKo-g3Eo_AUpl_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.47.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f1:f8:8b:ad:b4:74:6c:50:b7:08:e4:c4:45:40:8e:4c:e8:
7e:2b:68:c9:ce:d4:5a:9d:61:04:2d:20:dd:0e:e3:0e:65:96:
f8:2b:a6:36:97:54:67:fb:15:ef:6a:69:fd:1f:ec:fd:e2:8e:
f4:c3:dd:87:3e:d6:0c:56:ea:4e:ad:ee:d8:41:10:62:a9:7b:
a4:e8:ee:04:5d:c2:37:e3:13:59:56:90:8e:2a:5c:2b:d8:c7:
f1:d0:1c:d7:20:04:7d:72:67:29:ce:45:6b:08:eb:0b:f5:81:
43:bc:34:f6:89:6f:1b:f6:75:8c:b2:1f:bc:bc:45:df:5b:c9:
2f:9c:9c:fc:64:3d:b9:9d:3b:a7:c9:e7:47:0f:07:21:56:86:
32:4c:41:8b:54:5a:0d:8a:87:be:f3:63:85:56:46:f5:58:de:
60:f3:4a:87:59:9a:5e:07:e2:b8:38:ba:6b:0f:63:a5:20:dd:
f0:a9:8f:79:11:4f:3a:9f:34:60:47:25:24:b7:78:2b:4e:eb:
d9:a3:ff:c7:92:7d:a5:a3:0e:12:a3:f1:21:4e:86:94:e1:c1:
ca:0d:8c:34:34:2e:45:d2:a4:23:02:0f:c8:b5:2b:e7:54:d9:
c8:38:de:e1:8f:59:99:36:fb:0a:3a:fb:4e:e1:4e:6f:cc:a6:
6e:01:0d:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJG08mkAMFKxNpGzAoa74MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZmM5NWYxYjg4MDExZTZkYzMzZDA0MWI5OGIzMTMwNzc2
YzQyOGYwHhcNMjQwMTAxMDgyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDE0YmYzMWNjYWY1M2FkZGFhNGFhM2U4MzcxMjhmYzA1Mjk5N2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWYAUHFxVB2FJzOSYAJp8AhEDzBP
IxuWRulkXMDubuQtMNL5d4GJOrOr95CSDLQdB2G3BCZLgo15buSsObgFGSmXkHK5
bBdBaw1Moq+idaN8JXn/fuu6V8tgp7ZDKHolcvQLIHlkRzw0YzIWaL9hnqvGgq38
sWilGGhm+HURrs5aYthCLUp7oARteVCqKAEK9zIGqwY92wDcwfBVaOwp8TY/Jcme
ZHRZFZAgT52Vw3YGfw0avfJNwudiqIlviNWvgONoB8zEniX6ybSaRmI3BgrrJgqU
8Sh3zQa4XWoxV/6uC6YxIiknv3EAl0gExdP31Ak4GkpE/iPR7Nfq9Zd/6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMAUvzHMr1Ot2qSqPoNxKPwFKZf1MB8GA1UdIwQY
MBaAFPz8lfG4gBHm3DPQQbmLMTB3bEKPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1B5VjhiaUFFZWJjTTlCQnVZc3hNSGRzUW84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zNzJkMjktMDc1ZS00N2ZhLTljOGYt
OGY0YjA2NDVkNjA0LzEvd0JTX01jeXZVNjNhcEtvLWczRW9fQVVwbF9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8zNzJkMjktMDc1ZS00N2ZhLTljOGYtOGY0YjA2NDVkNjA0
LzEvX1B5VjhiaUFFZWJjTTlCQnVZc3hNSGRzUW84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9AvMA0G
CSqGSIb3DQEBCwUAA4IBAQBw8fiLrbR0bFC3COTERUCOTOh+K2jJztRanWEELSDd
DuMOZZb4K6Y2l1Rn+xXvamn9H+z94o70w92HPtYMVupOre7YQRBiqXuk6O4EXcI3
4xNZVpCOKlwr2Mfx0BzXIAR9cmcpzkVrCOsL9YFDvDT2iW8b9nWMsh+8vEXfW8kv
nJz8ZD25nTunyedHDwchVoYyTEGLVFoNioe+82OFVkb1WN5g80qHWZpeB+K4OLpr
D2OlIN3wqY95EU86nzRgRyUkt3grTuvZo//Hkn2low4So/EhToaU4cHKDYw0NC5F
0qQjAg/ItSvnVNnION7hj1mZNvsKOvtO4U5vzKZuAQ2J
-----END CERTIFICATE-----
Generated at Sat Jun 1 14:02:30 2024 by rpki-client on console-ams.rpki-client.org