Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/Ii_nZibreA4zPgOzWYtIwEXo45I.roa
File: Ii_nZibreA4zPgOzWYtIwEXo45I.roa (raw, json)
Hash identifier: v+DStGZePNPbHvGA29HWKcoilE0w96X/9RcfwbiVpFs=
Subject key identifier: 22:2F:E7:66:26:EB:78:0E:33:3E:03:B3:59:8B:48:C0:45:E8:E3:92
Certificate issuer: /CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Certificate serial: 01935405DAA9B6B5E070F2B584367CF3B870
Authority key identifier: BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/Ii_nZibreA4zPgOzWYtIwEXo45I.roa
Signing time: Fri 22 Nov 2024 13:18:09 +0000
ROA not before: Fri 22 Nov 2024 13:18:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9002
IP address blocks: 91.199.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:05:da:a9:b6:b5:e0:70:f2:b5:84:36:7c:f3:b8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Validity
Not Before: Nov 22 13:18:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=222fe76626eb780e333e03b3598b48c045e8e392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:06:54:de:a8:ce:f6:b2:92:a5:30:7d:fb:25:
2f:5a:fa:d1:01:e5:ab:a8:fe:06:9c:a7:20:5f:2a:
88:a4:2c:2a:1f:6d:1d:dd:7e:be:bc:4c:30:f2:81:
1d:7a:54:60:e7:49:f7:5e:4a:1f:ec:9d:b5:a6:44:
96:93:30:f8:02:56:21:b0:c3:2b:73:5a:24:0d:01:
e1:41:ba:dd:fb:37:ce:32:87:7c:54:13:0e:f6:08:
99:46:01:6e:06:49:5b:fb:57:d0:4d:90:11:6d:40:
36:83:d0:92:60:2f:fd:49:53:96:67:8e:6e:0d:4b:
df:a4:9d:13:af:1c:8e:14:85:2f:c8:63:3b:5c:cc:
5d:9a:07:35:64:31:c2:ee:63:b1:bc:be:54:13:db:
57:82:f1:6b:56:d4:03:0c:b2:c2:b0:34:b7:6a:71:
3f:bb:b3:b1:fb:c3:81:98:fc:2f:b0:5e:72:bb:75:
11:39:23:2c:c4:00:01:4c:2d:6d:a6:53:e6:29:a5:
b9:a3:83:1f:77:26:52:3f:93:49:d5:05:20:99:6f:
5a:5d:85:cd:c7:13:b5:81:9c:83:12:7a:ff:a7:12:
d2:ee:c6:b3:1d:c9:1a:f1:2b:bb:f4:41:49:80:ad:
1d:5f:77:32:7b:4f:64:a7:38:82:92:78:7e:c6:49:
de:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2F:E7:66:26:EB:78:0E:33:3E:03:B3:59:8B:48:C0:45:E8:E3:92
X509v3 Authority Key Identifier:
keyid:BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/Ii_nZibreA4zPgOzWYtIwEXo45I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.16.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:dc:83:30:5a:59:12:1c:e4:f5:ba:7d:e1:a4:12:3d:72:c5:
d2:4e:02:ca:4a:2c:a0:5e:7c:af:5a:e1:0a:e8:28:07:f6:57:
cf:5f:62:73:ed:7e:bc:e1:88:ed:de:d6:9a:e3:32:ed:14:3a:
a9:23:ec:ed:95:80:b0:37:e4:d5:19:50:d5:01:e6:fa:1c:28:
70:52:d7:35:b5:58:08:0a:db:cc:2c:9f:64:ab:d9:e7:1d:2f:
03:b1:78:69:e2:9d:d7:1a:8c:ec:c7:7b:67:d1:1e:e9:72:89:
a9:70:33:d7:b6:56:21:5e:67:7a:0f:2b:0b:da:40:f3:56:54:
0e:a7:fc:1f:ab:de:25:ae:87:a5:4f:8e:a3:80:61:96:47:ef:
c0:5c:34:49:d6:33:04:80:56:3e:f5:e9:76:4f:cc:9b:ce:11:
17:18:46:56:55:82:d1:7b:56:46:81:03:5b:5c:67:07:23:ef:
3d:74:fb:b6:4b:84:2f:97:5f:0a:b4:5a:1f:f0:fa:00:ba:35:
d5:aa:92:ff:fa:f4:3c:59:67:37:22:5d:16:c4:23:0d:a1:87:
cc:f5:49:e0:89:dd:a0:bb:4a:22:3e:f3:18:82:23:1c:84:e5:
22:2f:29:23:9e:ea:de:2f:69:0d:09:63:fd:fb:55:e7:79:ba:
25:33:c3:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNUBdqptrXgcPK1hDZ887hwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNTZkYjc5NmRlZjBkYmRiNGM3OGYyNDQ1YWJlY2MxNTcw
YTZmZDkwHhcNMjQxMTIyMTMxODA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjJmZTc2NjI2ZWI3ODBlMzMzZTAzYjM1OThiNDhjMDQ1ZThlMzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAZU3qjO9rKSpTB9+yUvWvrRAeWr
qP4GnKcgXyqIpCwqH20d3X6+vEww8oEdelRg50n3Xkof7J21pkSWkzD4AlYhsMMr
c1okDQHhQbrd+zfOMod8VBMO9giZRgFuBklb+1fQTZARbUA2g9CSYC/9SVOWZ45u
DUvfpJ0TrxyOFIUvyGM7XMxdmgc1ZDHC7mOxvL5UE9tXgvFrVtQDDLLCsDS3anE/
u7Ox+8OBmPwvsF5yu3UROSMsxAABTC1tplPmKaW5o4MfdyZSP5NJ1QUgmW9aXYXN
xxO1gZyDEnr/pxLS7sazHcka8Su79EFJgK0dX3cye09kpziCknh+xkne9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCIv52Ym63gOMz4Ds1mLSMBF6OOSMB8GA1UdIwQY
MBaAFLxW23lt7w29tMePJEWr7MFXCm/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkZiYmVXM3ZEYjIweDQ4a1JhdnN3VmNLYjlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC84YjliZDktM2Y2Mi00ZTMwLTgwODUt
MWVjNzIxZmEyYTMwLzEvSWlfblppYnJlQTR6UGdPeldZdEl3RVhvNDVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC84YjliZDktM2Y2Mi00ZTMwLTgwODUtMWVjNzIxZmEyYTMw
LzEvdkZiYmVXM3ZEYjIweDQ4a1JhdnN3VmNLYjlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8cQMA0G
CSqGSIb3DQEBCwUAA4IBAQBb3IMwWlkSHOT1un3hpBI9csXSTgLKSiygXnyvWuEK
6CgH9lfPX2Jz7X684Yjt3taa4zLtFDqpI+ztlYCwN+TVGVDVAeb6HChwUtc1tVgI
CtvMLJ9kq9nnHS8DsXhp4p3XGozsx3tn0R7pcompcDPXtlYhXmd6DysL2kDzVlQO
p/wfq94lroelT46jgGGWR+/AXDRJ1jMEgFY+9el2T8ybzhEXGEZWVYLRe1ZGgQNb
XGcHI+89dPu2S4Qvl18KtFof8PoAujXVqpL/+vQ8WWc3Il0WxCMNoYfM9Ungid2g
u0oiPvMYgiMchOUiLykjnureL2kNCWP9+1XnebolM8OT
-----END CERTIFICATE-----
Generated at Sat Nov 23 20:57:42 2024 by rpki-client on console-ams.rpki-client.org