Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/FwUMqKYy1KrkFjaIRZan299OthQ.roa
File: FwUMqKYy1KrkFjaIRZan299OthQ.roa (raw, json)
Hash identifier: tpRsceQ5Nox6B13b6MtCxy7g23j5fdMep7pnoERy4wE=
Subject key identifier: 17:05:0C:A8:A6:32:D4:AA:E4:16:36:88:45:96:A7:DB:DF:4E:B6:14
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018CC801359A6F8517BB05E58ADE02DD2864
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/FwUMqKYy1KrkFjaIRZan299OthQ.roa
Signing time: Tue 02 Jan 2024 02:29:31 +0000
ROA not before: Tue 02 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207689
IP address blocks: 159.148.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:35:9a:6f:85:17:bb:05:e5:8a:de:02:dd:28:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17050ca8a632d4aae41636884596a7dbdf4eb614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d9:7c:88:28:07:dd:5c:4f:43:50:55:4d:17:
30:9c:50:11:d2:51:08:97:ff:3c:55:05:ce:12:54:
ae:2a:a4:94:03:65:6c:f0:b2:9d:fc:ea:4a:d5:96:
d0:a7:ea:92:a5:4a:2a:28:f2:40:95:8f:38:a0:88:
e6:00:37:b1:bf:80:24:d7:0f:40:13:14:b7:5f:fc:
97:d2:b3:8d:b7:74:6c:8e:4c:cb:8f:66:78:2a:a1:
61:ca:e7:9a:2d:c7:cc:58:c6:7e:35:ce:4c:62:fb:
20:8b:cf:c4:4a:9f:2b:c5:94:e0:3c:6e:66:64:cb:
b4:98:d3:75:a7:07:92:96:2d:a6:60:5e:b1:79:79:
bd:94:f1:32:0f:f4:36:8e:a4:81:a1:7e:65:7f:1b:
fe:2a:97:9e:a4:3d:99:13:0b:9e:24:b1:63:ba:f0:
5d:9f:a2:13:87:ee:f1:9b:ad:45:58:4d:4d:41:3a:
f7:b8:82:ce:93:85:02:dd:00:ce:e0:b1:8e:79:45:
12:5d:94:74:ad:98:85:ea:d0:59:7d:ef:6b:fc:95:
b2:85:c3:bf:d9:ff:b6:e7:06:b8:0e:91:6b:19:da:
17:3c:a5:82:02:1b:e1:5f:fc:f9:e9:b3:c1:25:9b:
bf:ef:8a:5a:f2:79:69:82:1d:40:e5:e3:02:7e:59:
2e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:05:0C:A8:A6:32:D4:AA:E4:16:36:88:45:96:A7:DB:DF:4E:B6:14
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/FwUMqKYy1KrkFjaIRZan299OthQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.99.0/24
Signature Algorithm: sha256WithRSAEncryption
26:87:2c:97:31:14:35:80:2a:9f:7f:90:b6:27:f6:65:46:9e:
fc:3f:eb:3d:67:01:59:1e:0b:49:ff:81:34:20:0e:ed:f6:f6:
0b:b0:9d:35:ca:c2:02:f7:a4:ab:5e:0c:d7:ff:2d:fd:21:84:
fb:5a:27:c3:f4:c6:b7:06:7f:2b:76:85:f3:45:8a:14:5d:9c:
16:48:a3:69:9e:91:46:71:8a:c2:81:75:a3:60:6b:14:43:34:
a9:fd:82:a3:7f:f5:32:8d:ab:d5:e4:e5:81:b6:6d:86:24:92:
12:56:8a:25:ad:b5:db:b4:84:70:be:90:8a:df:b5:08:af:c6:
b5:2a:df:71:7b:b9:32:66:5d:21:1f:91:dd:3c:54:60:f5:3f:
43:a9:79:44:f3:11:a6:4d:d1:b4:53:a0:c7:e8:81:7b:12:6b:
4f:7e:45:4e:d0:b5:c2:31:ae:e9:f6:d4:9c:83:fc:1f:f8:7c:
a5:5a:a1:0b:24:c5:45:7b:54:c8:0c:05:db:0a:66:f4:14:85:
dd:da:8e:a3:af:23:a3:24:39:c1:e3:e7:93:c4:76:ae:7f:12:
77:a9:f6:aa:f0:68:85:ea:84:a7:e8:cf:a0:90:f2:5a:1a:a6:
ba:6c:ca:e4:c8:e3:69:55:1f:50:8a:09:e6:c0:42:82:16:91:
e6:c4:5f:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIATWab4UXuwXlit4C3ShkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjQwMTAyMDIyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzA1MGNhOGE2MzJkNGFhZTQxNjM2ODg0NTk2YTdkYmRmNGViNjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNl8iCgH3VxPQ1BVTRcwnFAR0lEI
l/88VQXOElSuKqSUA2Vs8LKd/OpK1ZbQp+qSpUoqKPJAlY84oIjmADexv4Ak1w9A
ExS3X/yX0rONt3RsjkzLj2Z4KqFhyueaLcfMWMZ+Nc5MYvsgi8/ESp8rxZTgPG5m
ZMu0mNN1pweSli2mYF6xeXm9lPEyD/Q2jqSBoX5lfxv+KpeepD2ZEwueJLFjuvBd
n6ITh+7xm61FWE1NQTr3uILOk4UC3QDO4LGOeUUSXZR0rZiF6tBZfe9r/JWyhcO/
2f+25wa4DpFrGdoXPKWCAhvhX/z56bPBJZu/74pa8nlpgh1A5eMCflkuuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBcFDKimMtSq5BY2iEWWp9vfTrYUMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvRndVTXFLWXkxS3JrRmphSVJaYW4yOTlPdGhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn5RjMA0G
CSqGSIb3DQEBCwUAA4IBAQAmhyyXMRQ1gCqff5C2J/ZlRp78P+s9ZwFZHgtJ/4E0
IA7t9vYLsJ01ysIC96SrXgzX/y39IYT7WifD9Ma3Bn8rdoXzRYoUXZwWSKNpnpFG
cYrCgXWjYGsUQzSp/YKjf/UyjavV5OWBtm2GJJISVoolrbXbtIRwvpCK37UIr8a1
Kt9xe7kyZl0hH5HdPFRg9T9DqXlE8xGmTdG0U6DH6IF7EmtPfkVO0LXCMa7p9tSc
g/wf+HylWqELJMVFe1TIDAXbCmb0FIXd2o6jryOjJDnB4+eTxHaufxJ3qfaq8GiF
6oSn6M+gkPJaGqa6bMrkyONpVR9QignmwEKCFpHmxF/f
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:22:55 2024 by rpki-client on console-ams.rpki-client.org