Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/fwjNSP6UjalqKtflc8cDGIRq3V8.roa
File: fwjNSP6UjalqKtflc8cDGIRq3V8.roa (raw, json)
Hash identifier: F5R6DAx/X32aNX0GZT5lcF4Ge+9KFvQgTBfPI9+SOGg=
Subject key identifier: 7F:08:CD:48:FE:94:8D:A9:6A:2A:D7:E5:73:C7:03:18:84:6A:DD:5F
Certificate issuer: /CN=52e71b39d7c49430bbc77bb65952e4021a025316
Certificate serial: 018CC9BBF60B88CEE4E65535EB684DBFD856
Authority key identifier: 52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/fwjNSP6UjalqKtflc8cDGIRq3V8.roa
Signing time: Tue 02 Jan 2024 10:33:07 +0000
ROA not before: Tue 02 Jan 2024 10:33:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39530
IP address blocks: 185.255.232.0/22 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:f6:0b:88:ce:e4:e6:55:35:eb:68:4d:bf:d8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e71b39d7c49430bbc77bb65952e4021a025316
Validity
Not Before: Jan 2 10:33:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f08cd48fe948da96a2ad7e573c70318846add5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7b:a6:f5:78:7a:ad:cf:31:71:55:8e:bf:46:
84:64:23:3a:f6:98:54:ee:e8:f3:e0:38:9c:27:99:
10:aa:13:03:fc:5e:b2:95:aa:ba:3c:ba:43:5a:d9:
fd:d8:a6:38:49:e3:58:4c:2d:18:56:a0:e0:48:e7:
71:5c:0e:43:a1:53:37:7d:91:ff:13:a1:bf:2f:2b:
73:93:5a:bb:14:a6:e3:68:72:87:34:56:64:4c:95:
1e:e8:b6:56:0c:ce:fd:90:3b:8d:9c:e7:5f:d1:cb:
44:d6:41:c1:20:52:4c:42:82:ce:37:c2:05:98:a7:
ec:57:0c:68:31:83:79:6e:fc:f8:29:86:ad:90:b0:
b6:a5:2f:6f:e7:f4:7e:85:ed:fd:0e:47:26:91:ab:
b0:99:2b:73:cc:45:30:5d:32:81:b1:b0:e0:a0:db:
95:51:4f:b4:e0:2a:93:1f:96:07:db:d8:53:43:f1:
d7:78:aa:75:ee:cb:e9:53:fe:70:42:f3:f3:5c:38:
02:c3:3a:4d:87:ca:64:e6:b5:d4:e1:fc:a4:f7:4a:
db:3c:b4:ff:cb:c7:e2:2a:83:b0:8d:ec:56:3d:3d:
db:d0:c9:cb:e7:29:7e:7f:c6:f7:17:3e:a0:5b:15:
b8:31:40:17:5a:13:13:6b:b8:bb:8e:6b:c6:de:c0:
bd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:08:CD:48:FE:94:8D:A9:6A:2A:D7:E5:73:C7:03:18:84:6A:DD:5F
X509v3 Authority Key Identifier:
keyid:52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/fwjNSP6UjalqKtflc8cDGIRq3V8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.232.0/22
Signature Algorithm: sha256WithRSAEncryption
02:f5:c0:44:40:36:f0:b9:b9:12:46:5b:61:71:8f:49:50:28:
4b:bc:6c:9c:ac:a7:39:b4:bf:b5:f7:48:b8:63:0f:7f:8b:0e:
4b:40:27:5a:2e:10:dd:5d:c5:ec:f1:d1:fa:f7:2f:26:c9:47:
a0:4a:a3:cb:67:33:65:7a:de:b9:ed:2f:25:53:ce:cf:ec:94:
d4:06:5e:f4:12:bf:7f:8d:99:ef:ee:e6:d7:ec:04:b8:53:3e:
eb:bb:9a:7d:3e:3e:07:7f:33:29:54:de:69:e3:09:1c:98:6d:
c9:ae:67:7b:4f:0f:71:bf:10:78:0d:e4:80:0a:bc:c5:7c:6a:
6d:43:56:85:73:88:6c:12:9c:92:69:c0:70:d4:d3:c8:61:b3:
a2:e8:cf:91:91:ff:3f:9f:d4:24:61:41:55:64:c9:73:2a:2d:
b7:1c:6b:2a:10:8f:40:17:78:c4:4b:11:cb:d0:68:c3:2c:91:
0e:2f:e2:1e:4c:da:9f:2c:bc:f3:ee:ed:ea:9e:3f:56:61:24:
6c:30:f8:9d:59:94:0c:9b:dc:04:d2:42:50:de:b7:d7:5c:30:
fc:41:89:de:10:bf:0c:16:6e:78:57:e7:7e:8a:90:91:8c:cb:
85:74:b0:47:c5:f9:a1:0b:a7:3b:4b:92:50:fc:33:6e:31:1d:
8d:0b:4c:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJu/YLiM7k5lU162hNv9hWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZTcxYjM5ZDdjNDk0MzBiYmM3N2JiNjU5NTJlNDAyMWEw
MjUzMTYwHhcNMjQwMTAyMTAzMzA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjA4Y2Q0OGZlOTQ4ZGE5NmEyYWQ3ZTU3M2M3MDMxODg0NmFkZDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3um9Xh6rc8xcVWOv0aEZCM69phU
7ujz4DicJ5kQqhMD/F6ylaq6PLpDWtn92KY4SeNYTC0YVqDgSOdxXA5DoVM3fZH/
E6G/Lytzk1q7FKbjaHKHNFZkTJUe6LZWDM79kDuNnOdf0ctE1kHBIFJMQoLON8IF
mKfsVwxoMYN5bvz4KYatkLC2pS9v5/R+he39DkcmkauwmStzzEUwXTKBsbDgoNuV
UU+04CqTH5YH29hTQ/HXeKp17svpU/5wQvPzXDgCwzpNh8pk5rXU4fyk90rbPLT/
y8fiKoOwjexWPT3b0MnL5yl+f8b3Fz6gWxW4MUAXWhMTa7i7jmvG3sC9+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH8IzUj+lI2pairX5XPHAxiEat1fMB8GA1UdIwQY
MBaAFFLnGznXxJQwu8d7tllS5AIaAlMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXVjYk9kZkVsREM3eDN1MldWTGtBaG9DVXhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jMzlhOGMtM2JiMC00NDlkLTg5YzMt
NmZiYTZhMWUwZWU3LzEvZndqTlNQNlVqYWxxS3RmbGM4Y0RHSVJxM1Y4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9jMzlhOGMtM2JiMC00NDlkLTg5YzMtNmZiYTZhMWUwZWU3
LzEvVXVjYk9kZkVsREM3eDN1MldWTGtBaG9DVXhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuf/oMA0G
CSqGSIb3DQEBCwUAA4IBAQAC9cBEQDbwubkSRlthcY9JUChLvGycrKc5tL+190i4
Yw9/iw5LQCdaLhDdXcXs8dH69y8myUegSqPLZzNlet657S8lU87P7JTUBl70Er9/
jZnv7ubX7AS4Uz7ru5p9Pj4HfzMpVN5p4wkcmG3Jrmd7Tw9xvxB4DeSACrzFfGpt
Q1aFc4hsEpySacBw1NPIYbOi6M+Rkf8/n9QkYUFVZMlzKi23HGsqEI9AF3jESxHL
0GjDLJEOL+IeTNqfLLzz7u3qnj9WYSRsMPidWZQMm9wE0kJQ3rfXXDD8QYneEL8M
Fm54V+d+ipCRjMuFdLBHxfmhC6c7S5JQ/DNuMR2NC0wO
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:07:15 2024 by rpki-client on console-fra.rpki-client.org