Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/bmXoxtmCNo1XHTMaL67pCieF7Bo.roa
File: bmXoxtmCNo1XHTMaL67pCieF7Bo.roa (raw, json)
Hash identifier: Se6uwbf9CNxVSpqcMLMWFUvFV1hodHA/l6PnC59kty8=
Subject key identifier: 6E:65:E8:C6:D9:82:36:8D:57:1D:33:1A:2F:AE:E9:0A:27:85:EC:1A
Certificate issuer: /CN=2dece72fbbaf7bd0975edda6763b68077364e202
Certificate serial: 018CC64B2824BCA2CDC1B2B4192ECEF69942
Authority key identifier: 2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/bmXoxtmCNo1XHTMaL67pCieF7Bo.roa
Signing time: Mon 01 Jan 2024 18:31:03 +0000
ROA not before: Mon 01 Jan 2024 18:31:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24858
IP address blocks: 91.232.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:28:24:bc:a2:cd:c1:b2:b4:19:2e:ce:f6:99:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dece72fbbaf7bd0975edda6763b68077364e202
Validity
Not Before: Jan 1 18:31:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e65e8c6d982368d571d331a2faee90a2785ec1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a9:ea:98:7b:99:ea:71:83:37:7c:cd:df:ed:
e0:ef:3c:8c:1d:6e:04:41:ba:9b:ab:c5:cd:29:af:
fa:ac:8b:fd:dd:a1:d1:5f:2d:f5:47:36:bf:29:63:
f8:f2:b4:3f:06:22:fa:6a:21:c9:85:8c:ae:98:2e:
67:7a:8f:be:fd:06:2f:32:60:57:ef:14:6b:5a:29:
ad:39:3f:4b:ae:f7:9f:7d:3c:11:93:f3:c4:bd:8f:
6c:d6:03:51:a7:6a:bb:3e:1b:b5:0e:6b:d4:4d:54:
f0:0a:24:94:bb:a3:29:81:2f:fc:54:ae:ae:5c:a7:
5c:36:98:1d:32:5a:6c:e1:8c:52:0c:0d:ae:e4:c6:
62:52:e5:4f:6d:64:51:11:50:a7:c7:0b:86:9c:86:
6b:a2:43:ac:78:c6:9c:de:45:18:54:c2:58:2f:57:
9d:a5:20:c5:f7:f7:2c:08:b9:4e:cf:e5:3b:63:9c:
77:0f:4b:15:40:db:f5:73:82:f0:59:e5:eb:82:f1:
ba:7e:d7:95:eb:14:4d:77:52:33:52:2f:21:f5:26:
fc:b1:af:f2:76:c3:40:13:fc:a1:e8:5b:91:75:72:
7e:d9:5d:85:6d:38:46:98:fd:e9:a6:9b:50:b0:5c:
b6:d9:c3:53:78:5c:98:51:da:b9:27:a8:8b:cd:f0:
ff:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:65:E8:C6:D9:82:36:8D:57:1D:33:1A:2F:AE:E9:0A:27:85:EC:1A
X509v3 Authority Key Identifier:
keyid:2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/bmXoxtmCNo1XHTMaL67pCieF7Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.98.0/24
Signature Algorithm: sha256WithRSAEncryption
26:91:9a:b7:77:a2:f0:83:e3:a9:76:da:a1:84:88:74:7e:c5:
11:e4:2e:0c:c5:57:48:84:ef:3b:f9:a1:96:62:76:eb:2a:8d:
c9:ea:5c:2d:7a:f2:df:92:19:5b:bb:f0:68:a1:21:6d:08:fd:
e9:7d:ac:e9:47:31:34:0b:ff:b4:70:eb:1c:a9:27:3a:6f:04:
f1:d9:69:86:9b:84:38:26:06:dd:91:7e:f2:9c:ab:d8:83:7e:
5c:3d:ab:a7:27:5a:f0:58:3f:64:36:23:dd:b1:8c:af:46:25:
f6:aa:1b:bb:c8:62:6d:fd:d8:58:4c:f1:0f:2b:22:08:a3:23:
9e:78:4c:62:9d:6e:ca:14:c6:41:65:2a:a0:21:f1:a3:1a:33:
84:0d:fe:bb:70:e6:80:cc:c4:69:85:c4:f4:21:08:c0:97:af:
7e:03:fb:77:ec:f7:8b:48:81:8d:d3:b3:1b:87:d8:06:49:4f:
dd:c4:9f:4f:29:8a:a7:f9:c7:88:3c:ae:c2:d4:28:d6:6b:bd:
8f:7d:f2:6d:ab:3a:df:2b:a9:dd:17:62:ec:a9:6d:23:21:0b:
ed:7c:d4:cd:ac:b6:85:f1:b4:f7:f4:ef:e9:e8:c6:31:6c:f2:
97:cf:97:47:95:e3:64:4d:86:43:ba:fd:b1:bb:6b:f4:ea:5f:
08:ec:34:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSygkvKLNwbK0GS7O9plCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZWNlNzJmYmJhZjdiZDA5NzVlZGRhNjc2M2I2ODA3NzM2
NGUyMDIwHhcNMjQwMTAxMTgzMTAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTY1ZThjNmQ5ODIzNjhkNTcxZDMzMWEyZmFlZTkwYTI3ODVlYzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0anqmHuZ6nGDN3zN3+3g7zyMHW4E
Qbqbq8XNKa/6rIv93aHRXy31Rza/KWP48rQ/BiL6aiHJhYyumC5neo++/QYvMmBX
7xRrWimtOT9LrveffTwRk/PEvY9s1gNRp2q7Phu1DmvUTVTwCiSUu6MpgS/8VK6u
XKdcNpgdMlps4YxSDA2u5MZiUuVPbWRREVCnxwuGnIZrokOseMac3kUYVMJYL1ed
pSDF9/csCLlOz+U7Y5x3D0sVQNv1c4LwWeXrgvG6fteV6xRNd1IzUi8h9Sb8sa/y
dsNAE/yh6FuRdXJ+2V2FbThGmP3ppptQsFy22cNTeFyYUdq5J6iLzfD/QwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG5l6MbZgjaNVx0zGi+u6QonhewaMB8GA1UdIwQY
MBaAFC3s5y+7r3vQl17dpnY7aAdzZOICMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGV6bkw3dXZlOUNYWHQybWRqdG9CM05rNGdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wMjZjYjEtNGMwZi00N2Q4LWI3MDAt
ZDUxYWU0YWExMjdiLzEvYm1Yb3h0bUNObzFYSFRNYUw2N3BDaWVGN0JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8wMjZjYjEtNGMwZi00N2Q4LWI3MDAtZDUxYWU0YWExMjdi
LzEvTGV6bkw3dXZlOUNYWHQybWRqdG9CM05rNGdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+hiMA0G
CSqGSIb3DQEBCwUAA4IBAQAmkZq3d6Lwg+OpdtqhhIh0fsUR5C4MxVdIhO87+aGW
YnbrKo3J6lwtevLfkhlbu/BooSFtCP3pfazpRzE0C/+0cOscqSc6bwTx2WmGm4Q4
JgbdkX7ynKvYg35cPaunJ1rwWD9kNiPdsYyvRiX2qhu7yGJt/dhYTPEPKyIIoyOe
eExinW7KFMZBZSqgIfGjGjOEDf67cOaAzMRphcT0IQjAl69+A/t37PeLSIGN07Mb
h9gGSU/dxJ9PKYqn+ceIPK7C1CjWa72PffJtqzrfK6ndF2LsqW0jIQvtfNTNrLaF
8bT39O/p6MYxbPKXz5dHleNkTYZDuv2xu2v06l8I7DRE
-----END CERTIFICATE-----
Generated at Sat Jun 8 11:30:30 2024 by rpki-client on console-ams.rpki-client.org