Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/9vCpgsHrEgna5tpTGlp2rIwdEjk.roa
File: 9vCpgsHrEgna5tpTGlp2rIwdEjk.roa (raw, json)
Hash identifier: MLGfbBUelZoZqOJUXnrgfdvgj7PB29OsnRXMaVj/eok=
Subject key identifier: F6:F0:A9:82:C1:EB:12:09:DA:E6:DA:53:1A:5A:76:AC:8C:1D:12:39
Certificate issuer: /CN=6299cfdfc01dae67fa6ee3179480770c452bac22
Certificate serial: 018CCA99671431536432C6BD0286ECA87DCD
Authority key identifier: 62:99:CF:DF:C0:1D:AE:67:FA:6E:E3:17:94:80:77:0C:45:2B:AC:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/9vCpgsHrEgna5tpTGlp2rIwdEjk.roa
Signing time: Tue 02 Jan 2024 14:35:00 +0000
ROA not before: Tue 02 Jan 2024 14:35:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51459
IP address blocks: 91.217.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:67:14:31:53:64:32:c6:bd:02:86:ec:a8:7d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6299cfdfc01dae67fa6ee3179480770c452bac22
Validity
Not Before: Jan 2 14:35:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6f0a982c1eb1209dae6da531a5a76ac8c1d1239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4a:43:6a:fd:09:7a:94:82:54:ac:df:ea:63:
b4:d8:db:2e:70:08:0a:15:82:2a:62:ba:66:db:fe:
f2:6a:14:d8:e0:e9:c1:ad:16:07:9a:9d:9e:6e:fb:
7f:13:5c:6d:d4:1e:70:2f:03:87:97:47:5d:10:1c:
a0:b3:41:30:cb:3a:9a:31:fb:70:69:92:38:6c:b8:
79:fd:54:6f:6b:09:dd:3c:43:4c:93:0f:c4:0a:79:
2d:09:bc:fc:e7:01:f9:5f:32:32:ef:5f:a1:c2:dc:
d4:59:1c:37:18:6d:b4:91:96:52:b7:11:3e:f8:5c:
5e:6e:b8:32:60:33:20:74:44:46:44:b4:76:72:ef:
74:d4:09:bf:7c:db:fe:44:45:56:0e:82:6f:08:47:
c6:95:8d:93:57:4d:e5:28:80:8f:ab:74:ea:bd:e2:
8d:de:32:07:61:a1:ba:2a:a9:66:ed:38:29:61:e6:
bd:7f:85:3c:25:56:89:82:bb:45:6d:b4:45:29:4b:
38:6e:fb:43:ce:ff:8b:61:02:ce:87:c0:16:c9:b2:
2c:12:ff:e5:30:80:2d:a2:a0:81:d0:af:f3:11:b7:
94:c7:59:17:01:56:9a:09:91:61:94:31:4d:16:28:
26:2b:ad:ab:c2:6e:1b:76:69:aa:64:d8:e2:77:2a:
22:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F0:A9:82:C1:EB:12:09:DA:E6:DA:53:1A:5A:76:AC:8C:1D:12:39
X509v3 Authority Key Identifier:
keyid:62:99:CF:DF:C0:1D:AE:67:FA:6E:E3:17:94:80:77:0C:45:2B:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/9vCpgsHrEgna5tpTGlp2rIwdEjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.172.0/24
Signature Algorithm: sha256WithRSAEncryption
50:53:11:37:40:ae:16:45:5b:77:47:e2:23:12:42:c6:fe:34:
06:24:6d:66:f4:38:bf:80:20:b5:90:8d:55:1e:04:22:7e:1a:
d0:00:8c:07:b8:13:9e:86:39:04:8e:39:1e:3c:28:3e:fd:ce:
1a:d1:77:a0:07:8b:de:14:40:09:9f:e1:50:25:38:f4:24:0e:
ed:ed:a2:18:07:73:0b:9e:6e:85:ca:bc:8f:85:17:a0:be:ec:
b3:a6:5e:6e:1c:40:67:8b:9d:7c:83:d0:22:7a:90:75:be:90:
06:cc:ab:42:19:f9:80:3d:5d:38:f3:0e:7c:7d:cc:03:88:bd:
9b:55:d2:c3:2f:95:c2:88:64:a4:d4:a1:aa:f1:80:51:be:15:
5c:b5:a4:35:3f:fd:d9:ad:bc:5f:e7:f8:d1:2a:07:42:d0:4c:
31:d9:03:48:d8:48:b6:99:f6:ef:b2:de:24:b0:a8:cf:c6:d8:
95:20:2a:9d:66:a1:f7:f1:65:7e:22:dc:e0:7a:98:53:b3:06:
a7:b9:5d:5f:a3:1e:a1:fc:05:03:82:5f:fa:4e:cd:7b:bc:88:
e0:92:27:7d:06:39:08:4e:de:45:8b:58:a5:c9:31:d6:11:ab:
b4:33:87:53:7d:39:9c:1c:6a:f4:76:eb:2a:e8:c2:76:c6:89:
1c:aa:01:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKmWcUMVNkMsa9AobsqH3NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyOTljZmRmYzAxZGFlNjdmYTZlZTMxNzk0ODA3NzBjNDUy
YmFjMjIwHhcNMjQwMTAyMTQzNTAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmYwYTk4MmMxZWIxMjA5ZGFlNmRhNTMxYTVhNzZhYzhjMWQxMjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUpDav0JepSCVKzf6mO02NsucAgK
FYIqYrpm2/7yahTY4OnBrRYHmp2ebvt/E1xt1B5wLwOHl0ddEBygs0EwyzqaMftw
aZI4bLh5/VRvawndPENMkw/ECnktCbz85wH5XzIy71+hwtzUWRw3GG20kZZStxE+
+FxebrgyYDMgdERGRLR2cu901Am/fNv+REVWDoJvCEfGlY2TV03lKICPq3TqveKN
3jIHYaG6Kqlm7TgpYea9f4U8JVaJgrtFbbRFKUs4bvtDzv+LYQLOh8AWybIsEv/l
MIAtoqCB0K/zEbeUx1kXAVaaCZFhlDFNFigmK62rwm4bdmmqZNjidyoiiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPbwqYLB6xIJ2ubaUxpadqyMHRI5MB8GA1UdIwQY
MBaAFGKZz9/AHa5n+m7jF5SAdwxFK6wiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXBuUDM4QWRybWY2YnVNWGxJQjNERVVyckNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jOGJmYjgtZjQ3ZS00MzBlLWFlM2Ut
NjhhMTRjZTQyZmE2LzEvOXZDcGdzSHJFZ25hNXRwVEdscDJySXdkRWprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9jOGJmYjgtZjQ3ZS00MzBlLWFlM2UtNjhhMTRjZTQyZmE2
LzEvWXBuUDM4QWRybWY2YnVNWGxJQjNERVVyckNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9msMA0G
CSqGSIb3DQEBCwUAA4IBAQBQUxE3QK4WRVt3R+IjEkLG/jQGJG1m9Di/gCC1kI1V
HgQifhrQAIwHuBOehjkEjjkePCg+/c4a0XegB4veFEAJn+FQJTj0JA7t7aIYB3ML
nm6FyryPhRegvuyzpl5uHEBni518g9AiepB1vpAGzKtCGfmAPV048w58fcwDiL2b
VdLDL5XCiGSk1KGq8YBRvhVctaQ1P/3Zrbxf5/jRKgdC0Ewx2QNI2Ei2mfbvst4k
sKjPxtiVICqdZqH38WV+ItzgephTswanuV1fox6h/AUDgl/6Ts17vIjgkid9BjkI
Tt5Fi1ilyTHWEau0M4dTfTmcHGr0dusq6MJ2xokcqgHN
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:41:00 2024 by rpki-client on console-fra.rpki-client.org