Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/FXgglzy0g8CXVzrm-Zv1Y3nVE68.roa
File: FXgglzy0g8CXVzrm-Zv1Y3nVE68.roa (raw, json)
Hash identifier: 0oeuVoTb8ydkE+XGhsQ6TLxc+8ycEp55fbs5OBdq+Y0=
Subject key identifier: 15:78:20:97:3C:B4:83:C0:97:57:3A:E6:F9:9B:F5:63:79:D5:13:AF
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018E33D2EF58115F0B37DA27CCD274567367
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/FXgglzy0g8CXVzrm-Zv1Y3nVE68.roa
Signing time: Tue 12 Mar 2024 18:00:45 +0000
ROA not before: Tue 12 Mar 2024 18:00:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57271
IP address blocks: 185.42.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:33:d2:ef:58:11:5f:0b:37:da:27:cc:d2:74:56:73:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 12 18:00:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=157820973cb483c097573ae6f99bf56379d513af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e3:4c:01:de:9c:01:6d:81:c6:ca:7d:86:4d:
75:51:af:7d:91:31:ab:d5:b2:9c:93:bc:6c:8d:83:
b7:a8:99:f4:e9:f4:37:72:29:66:81:1d:9b:23:0c:
31:fa:e6:5f:79:06:e8:27:99:65:d7:ce:fa:4b:46:
36:75:59:48:20:02:eb:af:cb:60:71:fa:2b:50:b1:
ca:a1:ab:df:05:d7:4d:cb:c7:dd:7a:53:16:1f:1a:
d3:96:b3:19:ee:a3:90:ee:b7:da:0c:25:a7:4c:f5:
6f:a7:43:4b:e9:bf:75:19:42:6e:d0:49:6b:37:a4:
48:15:31:08:67:35:9b:55:15:e9:a2:fe:fc:4c:dd:
4d:5d:79:2d:3f:df:30:3e:60:8b:8e:1d:53:86:6e:
02:f8:0c:ec:f7:d3:7d:16:b8:31:11:e3:93:4b:dd:
71:a3:9d:ed:d6:f6:62:41:f0:2e:56:14:a7:41:c1:
87:67:a4:ea:07:9d:5c:d8:7a:db:a0:73:49:d9:ab:
16:81:3d:88:8c:8c:33:09:f6:61:f3:e2:48:a4:fd:
bc:41:15:fe:62:76:9c:1a:4a:58:56:7b:f6:d3:d6:
bc:18:ff:dd:00:07:ad:c3:c4:44:e8:ad:48:fa:cb:
9b:27:a1:09:65:f8:26:30:01:9f:64:06:c2:47:ac:
e0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:78:20:97:3C:B4:83:C0:97:57:3A:E6:F9:9B:F5:63:79:D5:13:AF
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/FXgglzy0g8CXVzrm-Zv1Y3nVE68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.14.0/24
Signature Algorithm: sha256WithRSAEncryption
81:44:77:2b:c0:80:f9:66:27:8e:1e:6f:cd:18:2f:3b:e9:0b:
57:8f:40:0d:d8:83:aa:2f:21:93:84:cd:eb:64:93:93:ec:ae:
f4:d2:05:95:26:1d:fc:f1:89:a5:51:de:dd:10:d0:f6:ce:df:
5c:50:1e:9f:0c:c2:08:2e:ab:49:21:92:82:40:b6:13:24:2f:
94:0e:af:a8:64:c7:9a:08:32:15:dd:d9:d5:37:e4:d4:63:30:
54:04:e3:53:e2:e1:d3:77:f0:0f:da:d1:44:79:34:8f:8f:c1:
a3:4a:48:08:61:f8:34:5a:c9:3b:33:94:9f:13:40:bc:cd:ec:
a0:d9:97:96:59:cd:93:89:8e:6b:4e:e7:2f:f1:3c:fb:ff:fb:
25:e3:c1:f6:51:3c:68:20:47:d0:12:0a:d7:f4:aa:ec:6d:41:
44:43:e6:21:2e:db:7e:64:45:2c:58:03:a0:bf:c3:fa:3c:0b:
32:9b:83:b6:c7:d2:49:ff:58:e0:5d:6a:cd:3b:f4:f6:ad:4c:
ae:dc:2c:e0:ba:69:76:e2:b7:89:39:4a:35:25:5a:06:9a:7e:
9c:07:87:e5:1b:67:a1:e6:c0:2b:b7:9c:12:4f:b1:19:5b:4b:
ac:1b:15:42:01:22:10:94:6a:88:94:e4:9b:b4:5f:78:69:f6:
f0:99:8c:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY4z0u9YEV8LN9onzNJ0VnNnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjQwMzEyMTgwMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTc4MjA5NzNjYjQ4M2MwOTc1NzNhZTZmOTliZjU2Mzc5ZDUxM2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneNMAd6cAW2Bxsp9hk11Ua99kTGr
1bKck7xsjYO3qJn06fQ3cilmgR2bIwwx+uZfeQboJ5ll1876S0Y2dVlIIALrr8tg
cforULHKoavfBddNy8fdelMWHxrTlrMZ7qOQ7rfaDCWnTPVvp0NL6b91GUJu0Elr
N6RIFTEIZzWbVRXpov78TN1NXXktP98wPmCLjh1Thm4C+Azs99N9FrgxEeOTS91x
o53t1vZiQfAuVhSnQcGHZ6TqB51c2HrboHNJ2asWgT2IjIwzCfZh8+JIpP28QRX+
YnacGkpYVnv209a8GP/dAAetw8RE6K1I+subJ6EJZfgmMAGfZAbCR6zg0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBV4IJc8tIPAl1c65vmb9WN51ROvMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvRlhnZ2x6eTBnOENYVnpybS1adjFZM25WRTY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSoOMA0G
CSqGSIb3DQEBCwUAA4IBAQCBRHcrwID5ZieOHm/NGC876QtXj0AN2IOqLyGThM3r
ZJOT7K700gWVJh388YmlUd7dEND2zt9cUB6fDMIILqtJIZKCQLYTJC+UDq+oZMea
CDIV3dnVN+TUYzBUBONT4uHTd/AP2tFEeTSPj8GjSkgIYfg0Wsk7M5SfE0C8zeyg
2ZeWWc2TiY5rTucv8Tz7//sl48H2UTxoIEfQEgrX9KrsbUFEQ+YhLtt+ZEUsWAOg
v8P6PAsym4O2x9JJ/1jgXWrNO/T2rUyu3Czguml24reJOUo1JVoGmn6cB4flG2eh
5sArt5wST7EZW0usGxVCASIQlGqIlOSbtF94afbwmYx7
-----END CERTIFICATE-----
Generated at Sun Jun 23 02:35:04 2024 by rpki-client on console-ams.rpki-client.org