Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/27PfQYyzhqUO2LyTKopUpQsUoKk.roa
File: 27PfQYyzhqUO2LyTKopUpQsUoKk.roa (raw, json)
Hash identifier: DHjFUqBN9WX9l5lnMCS7m80ctEK7uSJ2l2PpkJgAIRc=
Subject key identifier: DB:B3:DF:41:8C:B3:86:A5:0E:D8:BC:93:2A:8A:54:A5:0B:14:A0:A9
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 018CC6B920E59546B712A4062A8F08B5C7B0
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/27PfQYyzhqUO2LyTKopUpQsUoKk.roa
Signing time: Mon 01 Jan 2024 20:31:10 +0000
ROA not before: Mon 01 Jan 2024 20:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29684
IP address blocks: 91.202.250.0/24 maxlen: 24
91.202.251.0/24 maxlen: 24
91.202.248.0/22 maxlen: 24
91.202.248.0/24 maxlen: 24
91.202.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:20:e5:95:46:b7:12:a4:06:2a:8f:08:b5:c7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Jan 1 20:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbb3df418cb386a50ed8bc932a8a54a50b14a0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:df:f8:08:a4:6c:73:f7:af:b8:26:de:0f:9e:
58:53:51:18:db:28:a9:be:e8:f3:0d:56:0a:df:98:
98:1d:2e:7f:4c:d5:16:09:03:f9:00:96:74:ba:d0:
82:11:58:48:96:67:58:03:f4:73:c5:56:55:4e:65:
65:c0:40:88:ea:7f:c9:5f:0a:3b:bc:1c:1b:ad:20:
01:9c:06:42:ec:5f:3e:ea:da:36:03:e8:b1:bd:30:
be:f6:08:fb:8f:12:02:47:b1:a5:a6:5e:8b:c5:47:
0b:5d:c0:9d:7a:c9:68:1f:8a:69:a4:a7:e3:35:01:
42:7e:5d:6a:f3:3a:b5:01:e1:53:bd:6a:7d:0e:1c:
6a:ed:e8:5c:2c:69:6c:73:df:66:f3:2b:fd:7b:00:
10:f0:fd:87:5a:f9:70:30:bb:f0:a1:93:72:6a:8d:
16:0f:6c:a8:0f:da:a7:a8:ee:6e:f8:e7:2b:08:38:
7d:47:96:24:c9:1c:ff:2b:c7:ad:69:7d:d6:77:17:
2a:02:6d:97:3e:6a:66:f7:fb:0e:24:79:f1:37:ec:
c4:cc:91:9e:d4:a8:ea:cf:f9:df:56:6d:56:0e:21:
37:d7:86:1d:d3:ec:16:86:f3:de:db:b6:ee:38:b3:
8f:98:bb:52:a2:0c:67:98:89:af:44:23:06:01:0b:
8a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B3:DF:41:8C:B3:86:A5:0E:D8:BC:93:2A:8A:54:A5:0B:14:A0:A9
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/27PfQYyzhqUO2LyTKopUpQsUoKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.248.0/22
Signature Algorithm: sha256WithRSAEncryption
51:67:8e:24:8f:84:3e:d5:54:42:41:b2:63:19:bf:89:64:e9:
b7:7e:50:ed:21:2e:f0:73:70:2b:91:56:93:c5:91:99:c4:4d:
85:ce:25:ea:75:3b:a5:fe:da:e0:37:57:48:10:b3:28:1a:d7:
da:82:77:aa:79:37:2d:9b:b7:d8:55:a1:80:b7:ae:b6:9f:0a:
de:b6:ad:b0:a7:fc:ed:d6:f1:1a:4c:7c:4d:5e:6d:ea:1d:f7:
ab:d3:e3:49:42:c3:14:5f:8d:78:8f:f5:7d:12:08:12:5c:b0:
94:91:11:7b:13:a8:50:08:b7:0b:b8:32:46:3a:75:23:4c:79:
3f:54:93:de:ff:a9:83:66:a0:d4:61:f0:9c:ca:70:90:13:0f:
9c:26:70:b1:31:10:f6:7e:cb:05:a7:99:f8:43:b1:bf:cc:db:
cd:95:8b:46:8a:de:c8:17:e4:09:78:1a:b9:7c:d3:de:49:9e:
b7:f8:f0:e9:ad:6a:fb:52:52:bd:00:92:6f:61:28:de:2e:75:
90:57:56:7e:e0:c9:88:d1:33:50:b3:e5:d0:47:b4:a2:2a:05:
a9:df:0a:dd:fa:11:b5:33:21:d8:d0:74:b1:af:2a:9d:ed:e6:
fe:48:7c:c0:b7:b0:48:57:72:ec:8b:a0:2a:45:31:00:5a:2b:
62:d3:10:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuSDllUa3EqQGKo8ItcewMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NjM3MDgxY2E3YzJlYmE0MTAxMGFiZWFhZDY0YTdjNjFm
NmExMTMwHhcNMjQwMTAxMjAzMTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmIzZGY0MThjYjM4NmE1MGVkOGJjOTMyYThhNTRhNTBiMTRhMGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd/4CKRsc/evuCbeD55YU1EY2yip
vujzDVYK35iYHS5/TNUWCQP5AJZ0utCCEVhIlmdYA/RzxVZVTmVlwECI6n/JXwo7
vBwbrSABnAZC7F8+6to2A+ixvTC+9gj7jxICR7Glpl6LxUcLXcCdesloH4pppKfj
NQFCfl1q8zq1AeFTvWp9Dhxq7ehcLGlsc99m8yv9ewAQ8P2HWvlwMLvwoZNyao0W
D2yoD9qnqO5u+OcrCDh9R5YkyRz/K8etaX3WdxcqAm2XPmpm9/sOJHnxN+zEzJGe
1Kjqz/nfVm1WDiE314Yd0+wWhvPe27buOLOPmLtSogxnmImvRCMGAQuKiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNuz30GMs4alDti8kyqKVKULFKCpMB8GA1UdIwQY
MBaAFGhjcIHKfC66QQEKvqrWSnxh9qETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82ZjMyNjktNTg3ZC00Yjg3LThkM2Et
ZTY2NzllN2I3OTVhLzEvMjdQZlFZeXpocVVPMkx5VEtvcFVwUXNVb0trLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82ZjMyNjktNTg3ZC00Yjg3LThkM2EtZTY2NzllN2I3OTVh
LzEvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8r4MA0G
CSqGSIb3DQEBCwUAA4IBAQBRZ44kj4Q+1VRCQbJjGb+JZOm3flDtIS7wc3ArkVaT
xZGZxE2FziXqdTul/trgN1dIELMoGtfagneqeTctm7fYVaGAt662nwretq2wp/zt
1vEaTHxNXm3qHfer0+NJQsMUX414j/V9EggSXLCUkRF7E6hQCLcLuDJGOnUjTHk/
VJPe/6mDZqDUYfCcynCQEw+cJnCxMRD2fssFp5n4Q7G/zNvNlYtGit7IF+QJeBq5
fNPeSZ63+PDprWr7UlK9AJJvYSjeLnWQV1Z+4MmI0TNQs+XQR7SiKgWp3wrd+hG1
MyHY0HSxryqd7eb+SHzAt7BIV3Lsi6AqRTEAWiti0xDT
-----END CERTIFICATE-----
Generated at Tue May 7 15:28:40 2024 by rpki-client on console-ams.rpki-client.org