Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/mJ9EuSVxnYuPn2d4IUhpsFMYoos.roa
File: mJ9EuSVxnYuPn2d4IUhpsFMYoos.roa (raw, json)
Hash identifier: VpMC4gYJIJ0aS8kUrnALzBJ3xZ7lH3AE2xDnN3GueNs=
Subject key identifier: 98:9F:44:B9:25:71:9D:8B:8F:9F:67:78:21:48:69:B0:53:18:A2:8B
Certificate issuer: /CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Certificate serial: 018CC5DC82FFFA70AA8EEDF1B0966251C686
Authority key identifier: 59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/mJ9EuSVxnYuPn2d4IUhpsFMYoos.roa
Signing time: Mon 01 Jan 2024 16:30:12 +0000
ROA not before: Mon 01 Jan 2024 16:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199898
IP address blocks: 91.238.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:82:ff:fa:70:aa:8e:ed:f1:b0:96:62:51:c6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Validity
Not Before: Jan 1 16:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=989f44b925719d8b8f9f6778214869b05318a28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:1f:44:97:7b:26:d3:32:4d:0d:f1:8c:23:
9b:b8:8a:b3:e4:b5:7d:91:be:af:5f:94:f8:dd:58:
e3:e8:76:bd:9b:03:d5:20:08:23:fc:5c:94:70:50:
5a:36:f3:7a:03:a5:bb:6a:f8:d3:31:4a:f3:92:6f:
ef:39:53:c5:c4:a9:a9:54:78:ac:7d:71:58:60:c9:
9d:da:07:36:e3:4c:68:5d:a3:c8:e8:76:99:b2:14:
20:63:8f:cc:96:3d:f4:ad:6a:90:8a:50:05:91:84:
53:d5:83:3b:97:63:47:af:be:44:80:ba:c9:fa:62:
70:72:1c:b6:71:8c:09:67:da:16:58:87:b2:d4:16:
1e:17:cc:ed:a8:2f:95:fe:f6:5f:5f:b9:0b:5b:a1:
69:c5:82:59:28:31:54:19:64:7e:2f:d8:37:c9:3a:
31:2e:cd:bd:2c:7f:b9:c1:a6:de:cd:8a:79:61:0b:
10:87:ae:c7:69:85:27:f7:9b:46:a3:90:87:63:45:
60:8b:f4:d9:7f:10:4d:30:4a:f6:ad:60:66:19:ff:
27:33:c3:da:61:40:e9:47:ba:b3:5e:62:18:23:80:
ff:54:14:f2:eb:45:a4:29:3c:3b:c3:6f:5f:f4:b3:
4a:da:b2:a2:a4:f6:6c:da:2c:cb:f2:52:47:22:6e:
24:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9F:44:B9:25:71:9D:8B:8F:9F:67:78:21:48:69:B0:53:18:A2:8B
X509v3 Authority Key Identifier:
keyid:59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/mJ9EuSVxnYuPn2d4IUhpsFMYoos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.251.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:51:4b:2f:99:33:54:18:dd:13:70:83:b4:d0:3b:fb:62:df:
5c:e5:1b:c8:4a:4e:96:4f:0f:8c:d5:65:dc:7d:f9:03:d7:a2:
83:b9:f7:5c:d5:70:f3:43:84:10:bf:dd:24:39:2e:15:d5:b4:
cf:f5:45:ba:ee:00:a1:14:55:1a:69:1f:67:02:1d:db:e2:24:
59:5c:46:4a:01:d1:7f:00:66:62:eb:5e:2b:13:f9:a7:f7:40:
21:b1:c8:be:2b:ff:da:05:be:6a:9a:78:ab:94:54:4b:03:3a:
21:1a:be:18:55:a2:87:6e:01:0e:4f:0a:5d:55:0e:26:0e:49:
8e:04:26:db:ee:75:65:14:b9:44:37:d0:ac:58:a4:68:60:f0:
97:fc:a0:15:a2:82:86:fa:c0:78:1d:0b:5d:0e:ca:d5:a1:f3:
11:ed:17:98:5b:cd:63:e9:53:33:43:98:ba:71:78:44:51:fc:
e1:a6:cf:16:23:1a:c2:1c:e9:11:0b:73:3d:e8:41:1d:d2:c9:
e0:69:a8:1b:9f:49:1e:c6:fa:cd:78:5a:97:e3:3a:23:f6:10:
a3:38:de:f4:f6:80:74:bc:72:7c:bc:a3:22:98:2d:39:96:a0:
96:9a:b2:a9:30:d2:da:08:bf:62:5e:fc:e6:b1:73:14:3b:74:
c9:dc:51:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3IL/+nCqju3xsJZiUcaGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZjI1ZjgyNmNhMzgzYTBiN2E1YzAzNjdhZDc4MWZlMjc3
ZjY3Y2YwHhcNMjQwMTAxMTYzMDEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODlmNDRiOTI1NzE5ZDhiOGY5ZjY3NzgyMTQ4NjliMDUzMThhMjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4sfRJd7JtMyTQ3xjCObuIqz5LV9
kb6vX5T43Vjj6Ha9mwPVIAgj/FyUcFBaNvN6A6W7avjTMUrzkm/vOVPFxKmpVHis
fXFYYMmd2gc240xoXaPI6HaZshQgY4/Mlj30rWqQilAFkYRT1YM7l2NHr75EgLrJ
+mJwchy2cYwJZ9oWWIey1BYeF8ztqC+V/vZfX7kLW6FpxYJZKDFUGWR+L9g3yTox
Ls29LH+5wabezYp5YQsQh67HaYUn95tGo5CHY0Vgi/TZfxBNMEr2rWBmGf8nM8Pa
YUDpR7qzXmIYI4D/VBTy60WkKTw7w29f9LNK2rKipPZs2izL8lJHIm4kKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJifRLklcZ2Lj59neCFIabBTGKKLMB8GA1UdIwQY
MBaAFFnyX4Jso4Ogt6XANnrXgf4nf2fPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2ZKZmdteWpnNkMzcGNBMmV0ZUJfaWRfWjg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wZjA2ZmItYTgyMi00NWU1LTk3M2Ut
NjQyNWU0MzgyMzMzLzEvbUo5RXVTVnhuWXVQbjJkNElVaHBzRk1Zb29zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8wZjA2ZmItYTgyMi00NWU1LTk3M2UtNjQyNWU0MzgyMzMz
LzEvV2ZKZmdteWpnNkMzcGNBMmV0ZUJfaWRfWjg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+77MA0G
CSqGSIb3DQEBCwUAA4IBAQCpUUsvmTNUGN0TcIO00Dv7Yt9c5RvISk6WTw+M1WXc
ffkD16KDufdc1XDzQ4QQv90kOS4V1bTP9UW67gChFFUaaR9nAh3b4iRZXEZKAdF/
AGZi614rE/mn90Ahsci+K//aBb5qmnirlFRLAzohGr4YVaKHbgEOTwpdVQ4mDkmO
BCbb7nVlFLlEN9CsWKRoYPCX/KAVooKG+sB4HQtdDsrVofMR7ReYW81j6VMzQ5i6
cXhEUfzhps8WIxrCHOkRC3M96EEd0sngaagbn0kexvrNeFqX4zoj9hCjON709oB0
vHJ8vKMimC05lqCWmrKpMNLaCL9iXvzmsXMUO3TJ3FEI
-----END CERTIFICATE-----
Generated at Sun Jun 2 09:36:39 2024 by rpki-client on console-ams.rpki-client.org