Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/Fk5V4cyrIE8FgUu4RrNzaKZGZF0.roa
File: Fk5V4cyrIE8FgUu4RrNzaKZGZF0.roa (raw, json)
Hash identifier: KHSHc/W62PBjpqd+cCsjN/sTRpSpBplpliNHeaa+x6g=
Subject key identifier: 16:4E:55:E1:CC:AB:20:4F:05:81:4B:B8:46:B3:73:68:A6:46:64:5D
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 018CC26D4331C0C5ADFBD1180C722E8378A4
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/Fk5V4cyrIE8FgUu4RrNzaKZGZF0.roa
Signing time: Mon 01 Jan 2024 00:29:49 +0000
ROA not before: Mon 01 Jan 2024 00:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207333
IP address blocks: 93.188.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:43:31:c0:c5:ad:fb:d1:18:0c:72:2e:83:78:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Jan 1 00:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=164e55e1ccab204f05814bb846b37368a646645d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:96:8a:aa:6c:dc:ed:29:aa:ba:06:d1:c3:
b7:1d:93:30:cb:14:01:f6:24:b6:12:80:2f:b7:34:
ed:03:37:e7:a3:d9:e4:e4:9f:ce:d4:ff:1b:0b:87:
bb:e4:72:4c:d5:25:29:9f:5e:81:7b:07:fe:81:1a:
00:b5:02:0d:79:4c:5b:f4:2b:19:39:fc:b5:68:36:
4a:d2:a6:0a:59:4d:e6:31:36:45:be:65:47:3e:c5:
67:75:d8:c2:a6:a7:95:71:09:a3:e5:1a:c7:78:ca:
b9:9d:26:44:ba:c3:86:da:e1:cb:cf:2e:a1:ac:c8:
6c:69:d9:33:7a:cf:46:71:96:55:bc:34:cd:e1:b1:
11:36:28:b5:60:1f:ae:8f:11:b5:de:cd:2c:e7:40:
0a:d1:31:d0:59:80:b8:34:a3:3a:6f:1f:a7:97:77:
34:ee:ec:12:56:a6:b5:c7:5f:3e:16:95:f9:46:aa:
0a:3b:5d:04:fa:ca:dd:ee:f3:e7:10:3c:9c:63:96:
9b:15:66:3e:9b:0b:2b:72:35:a8:fb:37:c7:8f:ae:
1f:f1:fb:b5:e3:54:da:8c:ca:6b:d7:ea:28:23:91:
c2:7b:80:8d:9b:b0:37:6f:d9:6f:da:d7:31:03:16:
1b:d3:de:15:49:68:e8:66:25:2f:b0:5b:6e:21:d8:
9d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4E:55:E1:CC:AB:20:4F:05:81:4B:B8:46:B3:73:68:A6:46:64:5D
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/Fk5V4cyrIE8FgUu4RrNzaKZGZF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.206.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c9:46:7f:5d:4a:ea:02:57:f0:7c:5d:41:1e:c9:da:06:b7:
ed:c5:db:ce:39:84:ad:43:69:35:93:f5:13:e5:b4:66:6b:8a:
77:00:9e:1a:67:fb:95:de:d6:63:99:0d:3b:f1:ec:65:53:ab:
43:93:94:c0:a9:7a:36:82:8d:4b:f1:fc:ff:b8:2f:a6:bb:7f:
e3:62:a9:9e:78:35:e2:7f:a5:ac:c0:7f:da:6a:d9:8b:f4:a3:
6b:be:61:87:b1:26:2c:f6:1b:5b:3d:27:b6:ad:7a:1f:46:d0:
69:fb:92:8f:a7:85:20:5f:ff:df:a7:4a:e8:ea:ee:27:10:e8:
be:de:2e:96:a1:f1:20:c1:95:a5:d4:e2:84:38:15:b5:4d:14:
20:19:37:c0:14:29:67:97:17:a1:7d:d0:36:16:af:a6:b8:0b:
2f:5a:d2:57:f8:1d:e8:c7:9e:e0:a0:af:1c:39:3c:40:d7:df:
e3:a2:35:d3:04:e7:14:d8:fd:ce:a1:94:ad:24:d2:e1:a7:ac:
9b:e2:56:2d:4a:ac:28:d7:b3:51:20:ec:d3:7b:7b:e8:bc:6c:
ad:d8:e5:eb:30:69:c0:27:31:ca:02:de:4f:34:f6:5e:f0:c9:
83:f2:3b:3a:db:9f:a5:85:96:a3:ca:7c:88:f1:9b:f8:8d:66:
10:e7:65:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbUMxwMWt+9EYDHIug3ikMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYmU2NWFlMjNmMjA3ZmE2OTUyNTVmNTVhOTA3YWMxNjA4
YmUwOTQwHhcNMjQwMTAxMDAyOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjRlNTVlMWNjYWIyMDRmMDU4MTRiYjg0NmIzNzM2OGE2NDY2NDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaWWiqps3O0pqroG0cO3HZMwyxQB
9iS2EoAvtzTtAzfno9nk5J/O1P8bC4e75HJM1SUpn16Bewf+gRoAtQINeUxb9CsZ
Ofy1aDZK0qYKWU3mMTZFvmVHPsVnddjCpqeVcQmj5RrHeMq5nSZEusOG2uHLzy6h
rMhsadkzes9GcZZVvDTN4bERNii1YB+ujxG13s0s50AK0THQWYC4NKM6bx+nl3c0
7uwSVqa1x18+FpX5RqoKO10E+srd7vPnEDycY5abFWY+mwsrcjWo+zfHj64f8fu1
41TajMpr1+ooI5HCe4CNm7A3b9lv2tcxAxYb094VSWjoZiUvsFtuIdidnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBZOVeHMqyBPBYFLuEazc2imRmRdMB8GA1UdIwQY
MBaAFF++Za4j8gf6aVJV9VqQesFgi+CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUt
NDkyYWIzNzI2ODlkLzEvRms1VjRjeXJJRThGZ1V1NFJyTnphS1pHWkYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUtNDkyYWIzNzI2ODlk
LzEvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXbzOMA0G
CSqGSIb3DQEBCwUAA4IBAQATyUZ/XUrqAlfwfF1BHsnaBrftxdvOOYStQ2k1k/UT
5bRma4p3AJ4aZ/uV3tZjmQ078exlU6tDk5TAqXo2go1L8fz/uC+mu3/jYqmeeDXi
f6WswH/aatmL9KNrvmGHsSYs9htbPSe2rXofRtBp+5KPp4UgX//fp0ro6u4nEOi+
3i6WofEgwZWl1OKEOBW1TRQgGTfAFClnlxehfdA2Fq+muAsvWtJX+B3ox57goK8c
OTxA19/jojXTBOcU2P3OoZStJNLhp6yb4lYtSqwo17NRIOzTe3vovGyt2OXrMGnA
JzHKAt5PNPZe8MmD8js625+lhZajynyI8Zv4jWYQ52UO
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:33:59 2024 by rpki-client on console-fra.rpki-client.org