Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/kwb3yWWJDwbC3R4Cqa0UFwMiHZg.roa
File: kwb3yWWJDwbC3R4Cqa0UFwMiHZg.roa (raw, json)
Hash identifier: diORq9pB83L7td7lwIzOXlrzwvMM7/j2OPmge0OgN7g=
Subject key identifier: 93:06:F7:C9:65:89:0F:06:C2:DD:1E:02:A9:AD:14:17:03:22:1D:98
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 019077F849801C81FFE34FAE836A04262CB7
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/kwb3yWWJDwbC3R4Cqa0UFwMiHZg.roa
Signing time: Wed 03 Jul 2024 09:41:18 +0000
ROA not before: Wed 03 Jul 2024 09:41:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34918
IP address blocks: 217.60.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jul 2024 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:77:f8:49:80:1c:81:ff:e3:4f:ae:83:6a:04:26:2c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jul 3 09:41:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9306f7c965890f06c2dd1e02a9ad141703221d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5a:dd:bf:8a:04:15:c0:c3:68:89:51:9e:70:
1c:97:a3:e4:6d:69:18:f6:fb:bb:83:80:03:dc:11:
53:38:c5:d3:2c:e1:c6:78:8e:e1:df:f5:a5:56:c0:
c6:0a:dd:c9:db:0b:cf:19:b9:3f:82:ce:47:65:07:
3e:98:3a:0f:74:57:3c:8d:f0:6c:a1:4f:6c:ca:34:
6c:ea:0d:dd:13:30:44:3d:07:31:56:8b:fb:09:3c:
79:88:a5:bc:5c:f2:43:81:12:9f:36:55:a4:c4:e5:
2a:a7:9e:b0:ce:b0:34:88:02:43:83:fe:29:af:92:
58:9e:2e:ef:a0:e0:74:50:76:fe:9c:be:7f:f4:7d:
27:97:02:ad:4e:00:26:a3:51:1f:a3:8b:d0:25:ba:
2d:b7:ce:8b:6c:5b:5a:8c:6b:fc:4a:73:1d:39:3e:
ad:35:8e:60:e4:89:ef:5e:7c:2c:94:59:49:1b:ef:
b0:28:72:a0:43:95:76:e7:9e:50:7d:4a:b4:5a:28:
d9:97:37:f2:1c:e8:6c:03:69:be:94:f5:74:11:04:
d9:df:ac:c9:2b:e6:a3:19:4d:8e:88:6a:a1:4b:55:
86:04:4f:48:0b:4a:9b:1b:cc:dd:72:06:da:24:5e:
72:00:ee:3d:78:6f:c7:81:3b:a1:ad:63:fd:df:30:
d3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:06:F7:C9:65:89:0F:06:C2:DD:1E:02:A9:AD:14:17:03:22:1D:98
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/kwb3yWWJDwbC3R4Cqa0UFwMiHZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.238.0/24
Signature Algorithm: sha256WithRSAEncryption
88:7f:c3:75:e7:dc:41:ac:70:27:dc:ef:32:35:2a:81:85:00:
c3:d1:f1:4c:c9:f8:2b:d1:61:91:a1:a6:45:95:6f:6a:4a:64:
c3:f3:e0:b4:32:2b:81:f6:df:49:04:dd:b4:00:b9:2f:fc:01:
3c:36:23:4c:90:89:14:09:a8:e8:03:3a:ea:e3:74:50:cc:e0:
e2:47:77:3c:bb:b1:a1:c0:eb:f0:41:80:77:ce:2a:52:3d:8f:
b7:f2:58:0c:41:3d:ff:41:21:77:25:a0:76:d9:a5:14:ff:c2:
40:42:70:a3:43:a1:0e:52:6c:06:11:83:ca:a1:c9:d4:6e:47:
94:79:4f:ca:21:3e:1a:de:71:d1:28:9c:80:a3:31:5c:4e:d9:
94:87:6a:76:03:34:48:94:d4:c2:fb:91:06:29:e9:a1:82:43:
5c:18:05:64:96:13:a3:fa:30:8f:15:6a:c9:f4:db:e1:f5:f5:
36:84:df:14:32:a6:84:a3:ff:b1:19:ed:07:ab:13:e1:54:4c:
65:b7:33:fb:53:8c:7a:81:e7:61:6f:4d:66:2d:e1:33:3b:73:
64:b9:82:76:41:cd:01:7d:0c:76:8f:fb:4d:5f:d0:ef:9f:69:
ab:1a:9e:99:f0:76:c7:7b:55:02:b3:77:c3:3b:fa:52:1d:f5:
25:5b:aa:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZB3+EmAHIH/40+ug2oEJiy3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy
ZGM2NmUwHhcNMjQwNzAzMDk0MTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzA2ZjdjOTY1ODkwZjA2YzJkZDFlMDJhOWFkMTQxNzAzMjIxZDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylrdv4oEFcDDaIlRnnAcl6PkbWkY
9vu7g4AD3BFTOMXTLOHGeI7h3/WlVsDGCt3J2wvPGbk/gs5HZQc+mDoPdFc8jfBs
oU9syjRs6g3dEzBEPQcxVov7CTx5iKW8XPJDgRKfNlWkxOUqp56wzrA0iAJDg/4p
r5JYni7voOB0UHb+nL5/9H0nlwKtTgAmo1Efo4vQJbott86LbFtajGv8SnMdOT6t
NY5g5InvXnwslFlJG++wKHKgQ5V2555QfUq0WijZlzfyHOhsA2m+lPV0EQTZ36zJ
K+ajGU2OiGqhS1WGBE9IC0qbG8zdcgbaJF5yAO49eG/HgTuhrWP93zDTiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJMG98lliQ8Gwt0eAqmtFBcDIh2YMB8GA1UdIwQY
MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt
MGJlZTA2MTI2YjFhLzEva3diM3lXV0pEd2JDM1I0Q3FhMFVGd01pSFpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh
LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2TzuMA0G
CSqGSIb3DQEBCwUAA4IBAQCIf8N159xBrHAn3O8yNSqBhQDD0fFMyfgr0WGRoaZF
lW9qSmTD8+C0MiuB9t9JBN20ALkv/AE8NiNMkIkUCajoAzrq43RQzODiR3c8u7Gh
wOvwQYB3zipSPY+38lgMQT3/QSF3JaB22aUU/8JAQnCjQ6EOUmwGEYPKocnUbkeU
eU/KIT4a3nHRKJyAozFcTtmUh2p2AzRIlNTC+5EGKemhgkNcGAVklhOj+jCPFWrJ
9Nvh9fU2hN8UMqaEo/+xGe0HqxPhVExltzP7U4x6gedhb01mLeEzO3NkuYJ2Qc0B
fQx2j/tNX9Dvn2mrGp6Z8HbHe1UCs3fDO/pSHfUlW6r2
-----END CERTIFICATE-----
Generated at Thu Jul 4 03:39:48 2024 by rpki-client on console.sobornost.net