Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/fb16bHMJNlBskVA8uKAOPhyOPVY.roa
File: fb16bHMJNlBskVA8uKAOPhyOPVY.roa (raw, json)
Hash identifier: X7USfTd5Qi/IJT/Lh4HhHyPDB9FKnfohgNCbUoZLYFY=
Subject key identifier: 7D:BD:7A:6C:73:09:36:50:6C:91:50:3C:B8:A0:0E:3E:1C:8E:3D:56
Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial: 018CC3B69D4E0BE2B8AF8C23841EF22CE0B6
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/fb16bHMJNlBskVA8uKAOPhyOPVY.roa
Signing time: Mon 01 Jan 2024 06:29:34 +0000
ROA not before: Mon 01 Jan 2024 06:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56440
IP address blocks: 91.224.158.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:9d:4e:0b:e2:b8:af:8c:23:84:1e:f2:2c:e0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
Validity
Not Before: Jan 1 06:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dbd7a6c730936506c91503cb8a00e3e1c8e3d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:03:76:e1:b5:fc:a8:93:85:db:2f:c6:87:37:
17:26:8d:cb:57:da:a5:cc:e2:01:a1:f2:ce:9e:18:
25:e8:30:6e:78:e5:f6:b1:21:b8:10:37:6f:3a:1a:
88:69:d7:8c:75:86:c2:64:63:70:a8:a4:de:f3:84:
97:a2:9c:6a:7e:d4:59:57:58:8a:37:d1:f8:cd:39:
70:0e:11:c4:ac:20:a6:5b:16:17:3b:63:dc:53:e0:
28:f5:62:2a:f2:14:ba:f1:f8:4e:c8:41:fc:55:f8:
a3:4e:1d:95:47:87:8e:7c:c0:a4:0e:63:10:d8:19:
d8:02:d5:7b:74:46:b2:64:32:db:59:cf:b5:fb:04:
86:4b:a8:66:df:19:a3:34:f1:3e:21:69:7c:29:49:
e4:86:b7:91:5a:90:09:03:7a:ad:cb:a4:99:18:a2:
cb:e1:e9:08:1d:d1:99:cb:0b:12:7c:f6:91:3f:f6:
d7:72:49:97:44:0e:85:eb:5b:84:99:35:aa:22:b8:
13:c9:2e:d8:02:5c:d7:aa:1d:4a:0b:1c:f3:33:7b:
cc:b9:88:87:2c:dc:ab:1c:5b:e9:49:b9:83:b7:86:
5b:0f:b0:1b:6b:7a:89:e7:cb:f5:33:13:f8:30:da:
ab:6a:7b:52:ca:c7:71:d3:8c:eb:52:93:c1:37:da:
fc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BD:7A:6C:73:09:36:50:6C:91:50:3C:B8:A0:0E:3E:1C:8E:3D:56
X509v3 Authority Key Identifier:
keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/fb16bHMJNlBskVA8uKAOPhyOPVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.158.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:05:20:c8:fb:86:cf:2c:43:38:ee:bf:c3:dc:ec:98:61:b8:
3b:6d:6c:5b:55:df:f6:8e:c9:59:94:3f:27:00:bd:d1:84:25:
af:51:7c:1a:ff:2a:f5:60:98:32:47:c9:ef:21:44:41:1c:24:
5f:00:f7:aa:9f:3a:26:30:9a:8f:ce:ec:75:77:61:49:94:14:
37:18:76:86:28:7a:dd:1a:22:aa:64:21:a7:cb:36:cd:d0:69:
fb:8c:d1:74:64:5c:70:59:5f:89:63:7f:83:61:96:81:0c:9b:
14:2a:89:b4:b8:cf:44:b5:33:f8:63:b8:98:49:90:b5:12:d6:
4f:7c:bf:20:7e:99:51:b6:44:9f:82:55:d4:33:6b:74:92:a2:
3e:9b:1b:11:95:02:cb:50:3c:1e:78:48:7f:33:c0:a1:d7:e3:
b7:f1:b7:5d:39:a8:17:b2:7e:2d:8c:e2:57:61:1a:c4:32:ba:
0d:7e:24:fe:9d:5d:e8:34:5b:af:75:40:64:c7:d3:c9:52:60:
86:e6:c1:1b:83:e1:29:46:c9:fe:89:0a:3e:05:d6:ce:1e:fb:
22:a0:02:9d:5b:aa:ef:a5:98:b8:d3:0f:97:92:bf:cd:1a:5a:
39:6f:1a:0a:16:84:c5:6a:4b:fc:2f:f0:7b:a2:e6:1c:ff:34:
30:fd:22:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtp1OC+K4r4wjhB7yLOC2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNjIwNjM4Y2ExZDgzNTY1MGUwOGRkY2YzNjNmMTA3ODli
NTMwNTcwHhcNMjQwMTAxMDYyOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGJkN2E2YzczMDkzNjUwNmM5MTUwM2NiOGEwMGUzZTFjOGUzZDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwN24bX8qJOF2y/GhzcXJo3LV9ql
zOIBofLOnhgl6DBueOX2sSG4EDdvOhqIadeMdYbCZGNwqKTe84SXopxqftRZV1iK
N9H4zTlwDhHErCCmWxYXO2PcU+Ao9WIq8hS68fhOyEH8VfijTh2VR4eOfMCkDmMQ
2BnYAtV7dEayZDLbWc+1+wSGS6hm3xmjNPE+IWl8KUnkhreRWpAJA3qty6SZGKLL
4ekIHdGZywsSfPaRP/bXckmXRA6F61uEmTWqIrgTyS7YAlzXqh1KCxzzM3vMuYiH
LNyrHFvpSbmDt4ZbD7Aba3qJ58v1MxP4MNqrantSysdx04zrUpPBN9r8CQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH29emxzCTZQbJFQPLigDj4cjj1WMB8GA1UdIwQY
MBaAFJBiBjjKHYNWUOCN3PNj8QeJtTBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80MWFmMmQtZjNkZS00NWQ1LTk0MWMt
YzQzYWM0MjllNTNmLzEvZmIxNmJITUpObEJza1ZBOHVLQU9QaHlPUFZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS80MWFmMmQtZjNkZS00NWQ1LTk0MWMtYzQzYWM0MjllNTNm
LzEva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+CeMA0G
CSqGSIb3DQEBCwUAA4IBAQCxBSDI+4bPLEM47r/D3OyYYbg7bWxbVd/2jslZlD8n
AL3RhCWvUXwa/yr1YJgyR8nvIURBHCRfAPeqnzomMJqPzux1d2FJlBQ3GHaGKHrd
GiKqZCGnyzbN0Gn7jNF0ZFxwWV+JY3+DYZaBDJsUKom0uM9EtTP4Y7iYSZC1EtZP
fL8gfplRtkSfglXUM2t0kqI+mxsRlQLLUDweeEh/M8Ch1+O38bddOagXsn4tjOJX
YRrEMroNfiT+nV3oNFuvdUBkx9PJUmCG5sEbg+EpRsn+iQo+BdbOHvsioAKdW6rv
pZi40w+Xkr/NGlo5bxoKFoTFakv8L/B7ouYc/zQw/SLb
-----END CERTIFICATE-----
Generated at Sat Jun 1 05:52:41 2024 by rpki-client on console-ams.rpki-client.org