Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FfA289FFgXUzagPcmkHVV2aSE3Y.roa
File: FfA289FFgXUzagPcmkHVV2aSE3Y.roa (raw, json)
Hash identifier: rMGvxoVDTDvDBIulGjqEfMrhlbVDuOHwqCIs3ohyT6I=
Subject key identifier: 15:F0:36:F3:D1:45:81:75:33:6A:03:DC:9A:41:D5:57:66:92:13:76
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018EFC2C0E07E40AEA27C86213F7DC421844
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FfA289FFgXUzagPcmkHVV2aSE3Y.roa
Signing time: Sat 20 Apr 2024 15:42:09 +0000
ROA not before: Sat 20 Apr 2024 15:42:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 87.121.163.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
93.123.24.0/24 maxlen: 24
94.156.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fc:2c:0e:07:e4:0a:ea:27:c8:62:13:f7:dc:42:18:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 20 15:42:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15f036f3d1458175336a03dc9a41d55766921376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5c:61:89:56:a2:ab:4a:e8:6c:84:38:f2:b2:
03:f9:63:f2:5e:d7:f8:7f:51:71:48:95:84:7a:e8:
a1:87:5b:a4:1c:0e:50:4f:8f:76:61:65:2a:8f:22:
fb:1e:6d:c2:ad:31:28:4c:8b:6f:bb:84:a6:98:76:
83:34:0e:9f:53:98:2c:c5:1b:00:5b:22:df:c4:be:
a7:2b:69:74:21:18:4a:2d:3a:c5:e7:af:ae:1a:d8:
a6:b9:0d:b1:6f:2d:54:1b:f6:98:29:b8:e2:6c:dc:
66:ed:bc:15:da:0e:84:ac:33:64:6b:66:a3:90:a9:
32:8b:63:4d:b2:df:35:4b:1f:3f:82:ac:6a:e3:d1:
68:36:e1:21:24:31:3a:c4:7b:a1:d8:27:d5:a1:9d:
f0:b6:2d:be:f7:e1:76:26:ac:8a:3e:94:08:31:3d:
13:54:a7:d3:a9:99:b1:40:24:3b:c5:85:fc:25:7e:
69:ca:08:3b:d6:10:c9:24:7e:65:21:5c:0c:bf:32:
f1:02:28:87:57:6e:c9:bd:1a:8c:49:86:1c:c3:e5:
c9:52:bc:ae:25:40:e3:75:ea:67:f7:9b:dd:65:eb:
0c:c0:ec:a9:07:ff:d8:3f:9b:76:43:ef:a2:31:87:
49:d7:c7:96:04:58:b4:b0:b3:30:72:8c:c9:9c:93:
c2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F0:36:F3:D1:45:81:75:33:6A:03:DC:9A:41:D5:57:66:92:13:76
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FfA289FFgXUzagPcmkHVV2aSE3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.163.0/24
91.92.16.0/24
93.123.24.0/24
94.156.2.0/24
Signature Algorithm: sha256WithRSAEncryption
04:44:58:e3:c9:ff:28:a3:cf:0c:d0:b4:55:7e:5b:d9:3d:04:
3f:17:84:d5:bc:93:a2:41:0b:b5:2f:91:bf:c5:1d:5f:49:24:
f5:dd:1b:26:bf:29:e5:e1:b3:2a:2f:3b:09:e4:e5:58:a7:0a:
82:d8:f2:5e:f5:1a:69:1d:89:54:f0:05:60:28:05:01:bd:a0:
bf:12:e5:74:1f:60:6d:4e:4d:95:1f:bc:a9:ba:e4:5e:37:34:
f8:ff:45:34:69:40:7f:97:c7:1e:71:8c:9e:5c:90:b3:e1:90:
47:47:da:ad:5a:f9:cc:a0:bd:63:ce:65:4c:a4:eb:89:03:c7:
48:2c:ce:d3:7d:cd:e2:d5:e7:e0:e8:a1:4e:7e:f4:1f:84:f2:
99:82:2e:c3:c2:6e:77:53:06:47:a5:c3:8d:64:87:0c:f4:78:
ac:25:ff:fa:35:c4:7e:cb:39:50:78:87:f5:f5:3b:86:18:47:
bb:ee:8f:a0:77:79:d3:02:be:51:37:a6:ca:03:20:63:b2:66:
f9:b0:62:e9:4c:37:e7:cd:a5:2e:74:23:c4:b2:4d:2f:b0:fc:
64:04:85:68:93:d0:de:49:9f:6d:2e:3d:6b:17:4a:c3:2d:86:
16:60:41:6e:55:79:75:e7:83:cf:89:aa:f9:d8:91:62:81:23:
cf:ef:c8:b4
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY78LA4H5ArqJ8hiE/fcQhhEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNDIwMTU0MjA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWYwMzZmM2QxNDU4MTc1MzM2YTAzZGM5YTQxZDU1NzY2OTIxMzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFxhiVaiq0robIQ48rID+WPyXtf4
f1FxSJWEeuihh1ukHA5QT492YWUqjyL7Hm3CrTEoTItvu4SmmHaDNA6fU5gsxRsA
WyLfxL6nK2l0IRhKLTrF56+uGtimuQ2xby1UG/aYKbjibNxm7bwV2g6ErDNka2aj
kKkyi2NNst81Sx8/gqxq49FoNuEhJDE6xHuh2CfVoZ3wti2+9+F2JqyKPpQIMT0T
VKfTqZmxQCQ7xYX8JX5pygg71hDJJH5lIVwMvzLxAiiHV27JvRqMSYYcw+XJUryu
JUDjdepn95vdZesMwOypB//YP5t2Q++iMYdJ18eWBFi0sLMwcozJnJPCYwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBXwNvPRRYF1M2oD3JpB1VdmkhN2MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvRmZBMjg5RkZnWFV6YWdQY21rSFZWMmFTRTNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAV3mjAwQA
W1wQAwQAXXsYAwQAXpwCMA0GCSqGSIb3DQEBCwUAA4IBAQAERFjjyf8oo88M0LRV
flvZPQQ/F4TVvJOiQQu1L5G/xR1fSST13Rsmvynl4bMqLzsJ5OVYpwqC2PJe9Rpp
HYlU8AVgKAUBvaC/EuV0H2BtTk2VH7ypuuReNzT4/0U0aUB/l8cecYyeXJCz4ZBH
R9qtWvnMoL1jzmVMpOuJA8dILM7Tfc3i1efg6KFOfvQfhPKZgi7Dwm53UwZHpcON
ZIcM9HisJf/6NcR+yzlQeIf19TuGGEe77o+gd3nTAr5RN6bKAyBjsmb5sGLpTDfn
zaUudCPEsk0vsPxkBIVok9DeSZ9tLj1rF0rDLYYWYEFuVXl154PPiar52JFigSPP
78i0
-----END CERTIFICATE-----
Generated at Mon May 20 04:30:46 2024 by rpki-client on console-fra.rpki-client.org