Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7e8b78-512a-439d-8ef5-c1255a91eb06/1/6jitJH0UxG9CW2BhLBnNfIXzvuY.roa
File: 6jitJH0UxG9CW2BhLBnNfIXzvuY.roa (raw, json)
Hash identifier: xzBwg5OgYZmiAzWPr8PMPE4vE4MAT3ASjGjzpQBW6Ak=
Subject key identifier: EA:38:AD:24:7D:14:C4:6F:42:5B:60:61:2C:19:CD:7C:85:F3:BE:E6
Certificate issuer: /CN=2fb7a2b85c28abcc9a02c672b43454a158866485
Certificate serial: 018CCA2BDF44164117726FC1F948EE67A266
Authority key identifier: 2F:B7:A2:B8:5C:28:AB:CC:9A:02:C6:72:B4:34:54:A1:58:86:64:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7eiuFwoq8yaAsZytDRUoViGZIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7e8b78-512a-439d-8ef5-c1255a91eb06/1/6jitJH0UxG9CW2BhLBnNfIXzvuY.roa
Signing time: Tue 02 Jan 2024 12:35:21 +0000
ROA not before: Tue 02 Jan 2024 12:35:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201933
IP address blocks: 91.193.116.0/22 maxlen: 22
91.193.118.0/24 maxlen: 24
2a06:40c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/7e8b78-512a-439d-8ef5-c1255a91eb06/1/L7eiuFwoq8yaAsZytDRUoViGZIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/7e8b78-512a-439d-8ef5-c1255a91eb06/1/L7eiuFwoq8yaAsZytDRUoViGZIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7eiuFwoq8yaAsZytDRUoViGZIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:df:44:16:41:17:72:6f:c1:f9:48:ee:67:a2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb7a2b85c28abcc9a02c672b43454a158866485
Validity
Not Before: Jan 2 12:35:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea38ad247d14c46f425b60612c19cd7c85f3bee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ce:90:32:0f:37:e4:b1:bc:76:6d:c4:f9:d2:
b9:00:5b:3d:80:4c:f1:6a:9f:72:de:04:02:a8:38:
b5:a3:aa:e0:ac:e6:dc:2c:0d:bb:8e:58:fd:4f:65:
38:b1:fc:17:5a:1a:8c:89:95:aa:3b:08:ae:bf:ec:
bf:c6:9b:65:bd:99:fa:89:2c:33:54:90:1c:15:12:
e5:a4:4b:29:ad:7d:7c:41:4b:b5:72:1c:62:27:13:
2e:cd:2c:77:39:b2:fa:68:b3:4c:04:df:c7:4d:a7:
69:1a:7d:9b:90:54:62:2b:9b:7a:09:f0:e4:a4:67:
32:1a:65:1f:4b:d4:d9:e1:c4:b1:14:41:16:2b:f8:
a6:88:c8:1e:d9:55:e8:84:e9:31:42:ae:01:2f:b0:
2e:34:dd:4e:c7:81:ab:c5:22:c4:73:db:71:d7:06:
f2:a9:ff:69:b3:4f:f2:36:c2:cb:2a:8a:c5:7a:83:
c9:ed:a9:0d:e6:a9:e0:50:51:e7:c2:ad:b5:df:b0:
3b:07:fa:18:21:05:9a:25:d3:49:a2:73:9e:a5:f1:
d0:97:01:0c:ee:e0:83:b6:ec:32:05:68:9a:e9:16:
af:69:6c:5f:74:de:c0:de:6a:3f:22:df:71:5f:80:
ac:ad:56:a8:c2:fe:ac:4f:b4:59:fa:25:ed:1c:9a:
4e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:38:AD:24:7D:14:C4:6F:42:5B:60:61:2C:19:CD:7C:85:F3:BE:E6
X509v3 Authority Key Identifier:
keyid:2F:B7:A2:B8:5C:28:AB:CC:9A:02:C6:72:B4:34:54:A1:58:86:64:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7eiuFwoq8yaAsZytDRUoViGZIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7e8b78-512a-439d-8ef5-c1255a91eb06/1/6jitJH0UxG9CW2BhLBnNfIXzvuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7e8b78-512a-439d-8ef5-c1255a91eb06/1/L7eiuFwoq8yaAsZytDRUoViGZIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.116.0/22
IPv6:
2a06:40c0::/29
Signature Algorithm: sha256WithRSAEncryption
99:ea:6a:88:33:d0:93:16:77:88:71:fb:4f:0c:21:d0:3e:0a:
52:ee:dd:5f:12:29:0a:c1:f9:b5:77:1b:32:6e:a2:f2:81:ef:
bd:98:7b:7b:97:b4:69:37:24:d1:7d:a1:18:d1:6f:93:96:b4:
c6:10:67:20:f7:dc:63:1b:b8:23:9d:df:1d:17:c0:3f:a8:24:
86:af:88:3f:5f:0b:63:5d:e1:e1:e4:31:77:96:b5:c9:12:e5:
98:b5:10:36:f5:06:3f:20:33:ea:65:1f:c9:1f:73:ee:da:17:
0e:58:04:26:22:56:60:75:67:d6:d5:25:e8:39:99:b5:c4:bc:
48:68:cd:49:2c:e6:0d:12:36:bf:f6:7c:48:af:16:0d:00:96:
09:f3:d6:13:8f:97:8a:51:8d:fb:23:c6:a8:96:ee:60:cf:c8:
ae:b4:4a:0c:41:99:66:45:c0:f0:0f:83:5e:04:a9:6c:02:47:
97:e5:c3:b1:00:6d:0c:02:e4:db:69:1e:1f:16:65:4a:98:ef:
8b:74:09:a5:7f:cb:60:a2:98:c8:cb:c7:f6:ce:c9:64:35:d5:
9d:e6:a1:48:2f:b7:ac:60:40:17:a4:c0:cb:fc:92:ae:28:cf:
71:d7:33:63:ad:33:36:91:28:31:02:91:1a:c9:12:e0:8f:2d:
e2:99:06:0d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzKK99EFkEXcm/B+UjuZ6JmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYjdhMmI4NWMyOGFiY2M5YTAyYzY3MmI0MzQ1NGExNTg4
NjY0ODUwHhcNMjQwMTAyMTIzNTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTM4YWQyNDdkMTRjNDZmNDI1YjYwNjEyYzE5Y2Q3Yzg1ZjNiZWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn86QMg835LG8dm3E+dK5AFs9gEzx
ap9y3gQCqDi1o6rgrObcLA27jlj9T2U4sfwXWhqMiZWqOwiuv+y/xptlvZn6iSwz
VJAcFRLlpEsprX18QUu1chxiJxMuzSx3ObL6aLNMBN/HTadpGn2bkFRiK5t6CfDk
pGcyGmUfS9TZ4cSxFEEWK/imiMge2VXohOkxQq4BL7AuNN1Ox4GrxSLEc9tx1wby
qf9ps0/yNsLLKorFeoPJ7akN5qngUFHnwq2137A7B/oYIQWaJdNJonOepfHQlwEM
7uCDtuwyBWia6RavaWxfdN7A3mo/It9xX4CsrVaowv6sT7RZ+iXtHJpOrQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOo4rSR9FMRvQltgYSwZzXyF877mMB8GA1UdIwQY
MBaAFC+3orhcKKvMmgLGcrQ0VKFYhmSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDdlaXVGd29xOHlhQXNaeXREUlVvVmlHWklVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS83ZThiNzgtNTEyYS00MzlkLThlZjUt
YzEyNTVhOTFlYjA2LzEvNmppdEpIMFV4RzlDVzJCaExCbk5mSVh6dnVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS83ZThiNzgtNTEyYS00MzlkLThlZjUtYzEyNTVhOTFlYjA2
LzEvTDdlaXVGd29xOHlhQXNaeXREUlVvVmlHWklVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCW8F0MA0E
AgACMAcDBQMqBkDAMA0GCSqGSIb3DQEBCwUAA4IBAQCZ6mqIM9CTFneIcftPDCHQ
PgpS7t1fEikKwfm1dxsybqLyge+9mHt7l7RpNyTRfaEY0W+TlrTGEGcg99xjG7gj
nd8dF8A/qCSGr4g/XwtjXeHh5DF3lrXJEuWYtRA29QY/IDPqZR/JH3Pu2hcOWAQm
IlZgdWfW1SXoOZm1xLxIaM1JLOYNEja/9nxIrxYNAJYJ89YTj5eKUY37I8aolu5g
z8iutEoMQZlmRcDwD4NeBKlsAkeX5cOxAG0MAuTbaR4fFmVKmO+LdAmlf8tgopjI
y8f2zslkNdWd5qFIL7esYEAXpMDL/JKuKM9x1zNjrTM2kSgxApEayRLgjy3imQYN
-----END CERTIFICATE-----
Generated at Tue Jun 25 10:35:38 2024 by rpki-client on console.sobornost.net