Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/gnIYDo3mNwTAoC83wy1cUtJcdGg.roa
File: gnIYDo3mNwTAoC83wy1cUtJcdGg.roa (raw, json)
Hash identifier: RE8LmU12RnUyI+6NcYnw8Plm6CgMfYERzFZzioQSpAw=
Subject key identifier: 82:72:18:0E:8D:E6:37:04:C0:A0:2F:37:C3:2D:5C:52:D2:5C:74:68
Certificate issuer: /CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97
Certificate serial: 018DD664963659FC6ED465D5B1DAF1FD3886
Authority key identifier: 68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/gnIYDo3mNwTAoC83wy1cUtJcdGg.roa
Signing time: Fri 23 Feb 2024 14:35:32 +0000
ROA not before: Fri 23 Feb 2024 14:35:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3170
IP address blocks: 91.103.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d6:64:96:36:59:fc:6e:d4:65:d5:b1:da:f1:fd:38:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97
Validity
Not Before: Feb 23 14:35:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8272180e8de63704c0a02f37c32d5c52d25c7468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:17:78:8b:59:59:63:41:6b:0a:ff:f9:42:4d:
47:12:4c:ff:96:1e:69:da:62:8b:0b:7c:bf:01:ab:
18:8a:ed:87:d8:cf:e6:24:94:37:60:3d:49:88:fc:
08:e8:5f:7c:4c:ee:56:78:eb:42:91:cc:32:e3:5b:
ba:07:70:70:7e:2a:1b:7e:61:dd:5a:44:cf:b2:1b:
4f:28:ba:81:08:04:bf:62:0c:4c:86:cc:23:da:de:
57:91:c3:09:bd:09:b1:12:0f:bc:f3:96:66:ef:91:
44:03:99:74:11:00:41:99:af:4d:5d:94:68:08:27:
98:43:4e:30:aa:e2:30:72:22:70:9a:51:f8:3d:27:
3c:1f:a5:a4:39:ba:02:ca:d9:a6:d9:4b:50:94:83:
59:98:fb:78:1a:19:ce:51:bb:93:94:ce:7c:76:5d:
5b:83:d4:e2:3a:d9:e2:e8:22:de:0b:f7:84:d4:58:
79:45:7c:6f:5c:35:98:10:56:ea:14:43:e9:08:03:
f2:1e:70:1e:02:a7:da:78:98:49:8a:6a:5e:1f:82:
53:dd:56:18:de:f9:7a:1c:0b:c8:5c:4f:3e:d9:77:
0c:aa:ae:9d:2a:da:ec:e7:44:c6:3c:14:ea:78:c5:
66:40:50:35:91:ef:ba:6f:80:5c:0f:2d:2f:4c:b9:
2a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:72:18:0E:8D:E6:37:04:C0:A0:2F:37:C3:2D:5C:52:D2:5C:74:68
X509v3 Authority Key Identifier:
keyid:68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/gnIYDo3mNwTAoC83wy1cUtJcdGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.143.0/24
Signature Algorithm: sha256WithRSAEncryption
15:4c:d5:fa:7c:2e:12:90:2f:62:2f:8c:c9:60:54:7d:bd:dd:
da:3e:27:2f:cd:33:da:2a:99:6c:00:bf:0e:3a:e4:92:8e:a5:
d3:cc:86:a7:d9:ce:3d:b8:57:5d:55:0e:a7:58:a4:66:2d:9e:
ef:65:83:23:f8:8b:e2:14:a9:97:21:49:73:0e:c7:8a:94:1c:
2d:0c:78:97:3e:f4:4a:3c:0a:60:ff:18:2c:fe:50:d6:7c:fb:
12:28:b9:15:91:2e:59:2f:39:21:ab:0b:d7:ab:58:aa:af:93:
d1:30:68:eb:1c:10:7f:60:4d:ec:cc:ac:0d:d7:d1:88:71:25:
8b:b2:47:c2:22:fe:a4:e1:ea:7c:30:d7:28:34:10:db:a4:04:
43:f3:ae:e6:6d:ee:87:89:90:09:68:a7:25:74:72:3b:e0:26:
dc:15:a0:7f:d5:d2:da:70:b7:3d:91:a4:4b:0d:32:c7:cc:84:
99:ad:64:60:1f:57:e0:29:0c:64:15:7c:07:20:b9:57:b3:48:
12:17:80:d9:69:55:51:a9:0b:ed:62:ed:bb:3e:71:d6:76:7f:
81:0b:ab:b6:d6:12:03:04:b9:bc:2b:3f:3e:be:a2:73:41:f8:
11:bd:36:99:da:24:75:6c:6a:ce:4e:af:4d:73:f8:75:72:19:
a7:4c:5a:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3WZJY2Wfxu1GXVsdrx/TiGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4N2I5MWVkYTE2YjZmMWIxZmEwMTc1ZDY3Yzc5OTRmNjkx
ZDhlOTcwHhcNMjQwMjIzMTQzNTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjcyMTgwZThkZTYzNzA0YzBhMDJmMzdjMzJkNWM1MmQyNWM3NDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhd4i1lZY0FrCv/5Qk1HEkz/lh5p
2mKLC3y/AasYiu2H2M/mJJQ3YD1JiPwI6F98TO5WeOtCkcwy41u6B3BwfiobfmHd
WkTPshtPKLqBCAS/YgxMhswj2t5XkcMJvQmxEg+885Zm75FEA5l0EQBBma9NXZRo
CCeYQ04wquIwciJwmlH4PSc8H6WkOboCytmm2UtQlINZmPt4GhnOUbuTlM58dl1b
g9TiOtni6CLeC/eE1Fh5RXxvXDWYEFbqFEPpCAPyHnAeAqfaeJhJimpeH4JT3VYY
3vl6HAvIXE8+2XcMqq6dKtrs50TGPBTqeMVmQFA1ke+6b4BcDy0vTLkq9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIJyGA6N5jcEwKAvN8MtXFLSXHRoMB8GA1UdIwQY
MBaAFGh7ke2ha28bH6AXXWfHmU9pHY6XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUh1UjdhRnJieHNmb0JkZFo4ZVpUMmtkanBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZmI4ZGYtMGU0OC00NjY1LWE5OWIt
ZGZmZTU5MDIzZTg5LzEvZ25JWURvM21Od1RBb0M4M3d5MWNVdEpjZEdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8yZmI4ZGYtMGU0OC00NjY1LWE5OWItZGZmZTU5MDIzZTg5
LzEvYUh1UjdhRnJieHNmb0JkZFo4ZVpUMmtkanBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2ePMA0G
CSqGSIb3DQEBCwUAA4IBAQAVTNX6fC4SkC9iL4zJYFR9vd3aPicvzTPaKplsAL8O
OuSSjqXTzIan2c49uFddVQ6nWKRmLZ7vZYMj+IviFKmXIUlzDseKlBwtDHiXPvRK
PApg/xgs/lDWfPsSKLkVkS5ZLzkhqwvXq1iqr5PRMGjrHBB/YE3szKwN19GIcSWL
skfCIv6k4ep8MNcoNBDbpARD867mbe6HiZAJaKcldHI74CbcFaB/1dLacLc9kaRL
DTLHzISZrWRgH1fgKQxkFXwHILlXs0gSF4DZaVVRqQvtYu27PnHWdn+BC6u21hID
BLm8Kz8+vqJzQfgRvTaZ2iR1bGrOTq9Nc/h1chmnTFrd
-----END CERTIFICATE-----
Generated at Tue May 7 03:14:51 2024 by rpki-client on console-fra.rpki-client.org