Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/bOntjlufwx7fXskK-v7-QRhNAdw.roa
File: bOntjlufwx7fXskK-v7-QRhNAdw.roa (raw, json)
Hash identifier: 2HHoADx4q9Bnzi3PpawLbKRg0kYzfgofRmousErULRw=
Subject key identifier: 6C:E9:ED:8E:5B:9F:C3:1E:DF:5E:C9:0A:FA:FE:FE:41:18:4D:01:DC
Certificate issuer: /CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Certificate serial: 018CC79334DC80F9FD3CF6A5333B939B45D6
Authority key identifier: 0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/bOntjlufwx7fXskK-v7-QRhNAdw.roa
Signing time: Tue 02 Jan 2024 00:29:22 +0000
ROA not before: Tue 02 Jan 2024 00:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213157
IP address blocks: 91.218.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 May 2024 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:34:dc:80:f9:fd:3c:f6:a5:33:3b:93:9b:45:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Validity
Not Before: Jan 2 00:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ce9ed8e5b9fc31edf5ec90afafefe41184d01dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:74:c0:ff:9c:0f:bc:51:78:74:f8:80:d0:f0:
1d:f5:74:bd:4e:8a:a8:e8:dd:b8:70:79:bf:01:76:
ad:bb:f8:45:ad:4b:24:60:54:40:7c:65:c5:0a:b5:
fc:5e:22:b5:19:40:b9:ea:a0:e2:9a:cd:e5:18:e0:
41:d9:4c:a7:50:4e:68:16:15:ca:24:2c:13:fa:db:
03:a9:54:7b:3e:d9:b7:40:38:51:a8:15:8b:17:0d:
5b:37:b7:a5:1e:38:51:f6:07:c2:e1:a5:a0:e8:f1:
97:f7:cd:80:5d:b9:10:ed:10:e4:3a:92:34:2d:45:
a1:e3:97:8c:64:55:a6:a5:d6:95:23:22:84:6a:d5:
09:97:f9:f9:eb:cb:e4:8a:ed:95:b3:a5:71:ac:2f:
63:58:94:eb:80:88:b0:14:32:dd:ea:58:6c:91:95:
b7:0d:3f:b3:94:af:5f:dd:33:aa:cc:bb:78:e8:16:
d0:6a:77:ec:71:38:54:fb:64:11:cc:d7:a6:e8:bc:
84:e5:02:70:f1:07:2f:d7:b2:90:ff:54:d1:a2:4d:
07:d7:fc:be:14:73:e3:1a:4c:e5:a8:db:ea:3f:4e:
63:cf:71:ab:0e:f6:06:37:94:2d:ae:9b:b1:d4:e4:
5f:57:d4:a5:25:62:1f:5d:17:ef:cc:32:d7:69:8c:
a7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E9:ED:8E:5B:9F:C3:1E:DF:5E:C9:0A:FA:FE:FE:41:18:4D:01:DC
X509v3 Authority Key Identifier:
keyid:0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/bOntjlufwx7fXskK-v7-QRhNAdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.21.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a3:9d:28:15:0f:23:fe:63:3c:40:4d:31:2d:64:e0:b8:e1:
6e:bc:8f:17:b2:c1:4d:d9:76:a4:4a:ea:5c:ff:5f:05:c5:2f:
ae:fd:64:ac:1f:05:07:ae:45:56:98:cb:b7:fc:02:3e:f9:82:
3d:e8:f6:24:3b:a3:6a:93:ec:8f:ee:d2:35:2e:7f:00:20:20:
5f:c4:a6:0a:b5:0b:6b:14:5f:a6:36:2e:3a:be:94:9f:98:b5:
3c:69:27:d2:20:38:99:32:08:8d:f5:1f:b8:a4:1d:a3:5b:3e:
2e:62:0e:a2:c8:2b:d8:f6:a2:9d:7d:8e:69:ea:21:e4:7d:d2:
6a:00:b0:cd:29:3e:d6:b6:1a:cc:d2:59:0c:1f:a4:53:97:fb:
5a:9c:48:a7:b1:4d:1c:31:06:ec:c0:f5:37:cb:fa:c0:16:2c:
ec:e4:18:ca:09:f4:eb:22:e8:db:cf:d5:6f:dc:ad:ab:bd:53:
69:58:47:e3:a4:98:6a:6a:ca:6e:85:39:71:2f:c9:c5:c0:6c:
86:06:92:a5:8e:b0:b8:21:08:46:c9:9b:38:03:ac:ad:e1:8f:
9a:0b:e5:00:76:42:43:3f:79:47:53:f8:f0:cf:6a:18:ce:0d:
8a:8c:2c:a1:2e:0a:de:79:5d:c6:a4:b7:bb:72:53:0e:43:9a:
42:0c:17:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHkzTcgPn9PPalMzuTm0XWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOTBiODBiM2Q0ODkzYzljMWVjN2QwMWMyOWJmM2I0NTBi
Yjg1MWQwHhcNMjQwMTAyMDAyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2U5ZWQ4ZTViOWZjMzFlZGY1ZWM5MGFmYWZlZmU0MTE4NGQwMWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznTA/5wPvFF4dPiA0PAd9XS9Toqo
6N24cHm/AXatu/hFrUskYFRAfGXFCrX8XiK1GUC56qDims3lGOBB2UynUE5oFhXK
JCwT+tsDqVR7Ptm3QDhRqBWLFw1bN7elHjhR9gfC4aWg6PGX982AXbkQ7RDkOpI0
LUWh45eMZFWmpdaVIyKEatUJl/n568vkiu2Vs6VxrC9jWJTrgIiwFDLd6lhskZW3
DT+zlK9f3TOqzLt46BbQanfscThU+2QRzNem6LyE5QJw8Qcv17KQ/1TRok0H1/y+
FHPjGkzlqNvqP05jz3GrDvYGN5Qtrpux1ORfV9SlJWIfXRfvzDLXaYyn1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGzp7Y5bn8Me317JCvr+/kEYTQHcMB8GA1UdIwQY
MBaAFA+QuAs9SJPJwex9AcKb87RQu4UdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDVDNEN6MUlrOG5CN0gwQndwdnp0RkM3aFIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy85OWEyYjEtMTE0NC00ZjljLThmZGYt
NDNlNGQ1NmQ0MDQzLzEvYk9udGpsdWZ3eDdmWHNrSy12Ny1RUmhOQWR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy85OWEyYjEtMTE0NC00ZjljLThmZGYtNDNlNGQ1NmQ0MDQz
LzEvRDVDNEN6MUlrOG5CN0gwQndwdnp0RkM3aFIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9oVMA0G
CSqGSIb3DQEBCwUAA4IBAQAWo50oFQ8j/mM8QE0xLWTguOFuvI8XssFN2XakSupc
/18FxS+u/WSsHwUHrkVWmMu3/AI++YI96PYkO6Nqk+yP7tI1Ln8AICBfxKYKtQtr
FF+mNi46vpSfmLU8aSfSIDiZMgiN9R+4pB2jWz4uYg6iyCvY9qKdfY5p6iHkfdJq
ALDNKT7WthrM0lkMH6RTl/tanEinsU0cMQbswPU3y/rAFizs5BjKCfTrIujbz9Vv
3K2rvVNpWEfjpJhqaspuhTlxL8nFwGyGBpKljrC4IQhGyZs4A6yt4Y+aC+UAdkJD
P3lHU/jwz2oYzg2KjCyhLgreeV3GpLe7clMOQ5pCDBcU
-----END CERTIFICATE-----
Generated at Sun May 26 23:36:10 2024 by rpki-client on console-ams.rpki-client.org