Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/f5oKRqvfjI1F9JNDgV6KrrJ67ZM.roa
File: f5oKRqvfjI1F9JNDgV6KrrJ67ZM.roa (raw, json)
Hash identifier: wUmAayZIGVwl57Ap6/KqdoGifu8lZcLaYVdKdjSl9W8=
Subject key identifier: 7F:9A:0A:46:AB:DF:8C:8D:45:F4:93:43:81:5E:8A:AE:B2:7A:ED:93
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 018CC9BC3C2641B5C463122D2998AFEC0771
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/f5oKRqvfjI1F9JNDgV6KrrJ67ZM.roa
Signing time: Tue 02 Jan 2024 10:33:25 +0000
ROA not before: Tue 02 Jan 2024 10:33:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56789
IP address blocks: 109.107.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:3c:26:41:b5:c4:63:12:2d:29:98:af:ec:07:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Jan 2 10:33:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f9a0a46abdf8c8d45f49343815e8aaeb27aed93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e8:61:ce:b6:14:bd:72:de:c1:5d:c4:83:09:
78:5b:aa:53:16:80:f6:f7:44:0f:84:65:0a:b7:46:
90:3d:4e:16:11:ad:52:ce:17:69:d4:54:90:89:7d:
37:69:05:b6:d1:aa:38:f2:ff:88:b0:1c:ff:dc:93:
28:93:1d:49:37:07:22:01:e7:f8:3c:c6:fe:42:51:
12:65:3a:73:b2:7a:89:82:d5:c5:e7:5f:dd:9c:fa:
88:ad:db:7b:2a:2b:bc:f0:89:90:ba:7d:31:9f:01:
b2:54:5b:b2:4b:03:1a:29:c1:37:51:3b:29:bb:e6:
62:8b:76:03:25:da:ff:62:8a:1c:45:d8:a7:b0:df:
48:8c:dd:09:a4:55:77:f9:30:76:67:b6:ad:5c:b3:
70:22:37:d9:17:42:dc:66:37:f0:1a:be:98:af:5a:
8a:12:eb:ea:48:c8:85:5f:15:35:e2:94:f2:d1:d5:
3a:fe:65:6a:c4:4f:ed:79:45:6e:88:33:fe:b1:92:
a3:43:0f:ff:5f:b7:7f:e2:54:b5:37:63:11:3c:52:
41:72:14:51:71:a0:36:43:6d:e0:66:66:2e:8e:c6:
fd:8f:8c:42:31:1c:c5:da:bf:e9:59:d5:7f:b1:0f:
46:3a:cc:f5:39:30:15:b5:eb:e3:ec:76:40:e3:b9:
3f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9A:0A:46:AB:DF:8C:8D:45:F4:93:43:81:5E:8A:AE:B2:7A:ED:93
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/f5oKRqvfjI1F9JNDgV6KrrJ67ZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.153.0/24
Signature Algorithm: sha256WithRSAEncryption
14:b3:8d:31:45:0b:6a:91:c6:ca:2c:3a:4b:d6:9c:18:a6:f6:
82:48:d3:29:b6:59:e0:0e:40:25:a3:7f:dd:59:b8:0a:a8:d7:
c8:ba:1b:f4:70:90:8d:8a:5c:29:65:87:26:2a:0a:f6:a4:aa:
51:7c:76:2c:97:e6:85:f7:6b:dc:17:52:fd:aa:eb:b5:4c:80:
a0:c6:b3:bb:4e:a1:7a:30:ed:a9:f0:b2:9f:39:4b:75:ad:9a:
5e:71:fb:30:f8:12:49:6f:6f:44:c8:05:a1:8e:8c:75:20:ea:
6f:4a:b8:2c:da:18:5d:46:4f:f3:53:93:20:4d:c3:4e:89:63:
3e:f9:a7:88:cd:75:b8:a3:9e:6c:be:d7:a7:6f:66:7e:4e:e8:
e3:91:41:dd:b8:60:6f:e2:e7:16:2a:3c:44:b1:b9:0d:87:48:
8a:d0:ca:dd:e5:b4:7a:da:a3:51:e8:c2:7a:dc:47:c9:70:73:
cd:02:9a:17:fe:28:dd:c0:24:66:e4:a5:5a:18:c7:b1:fa:07:
19:a6:6a:76:ad:73:12:4d:b8:fd:4d:3a:e2:71:0b:c1:9e:80:
64:89:62:29:06:4b:98:c3:51:43:41:5b:ff:2f:a0:5c:7a:ff:
03:21:b4:ed:56:c4:2a:b9:36:f2:f8:9c:32:bf:7d:cc:fd:be:
c1:f8:7c:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvDwmQbXEYxItKZiv7AdxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNjI2YzkwOWViNDk1MTE1NGJjZWU4MjIxZTQzOTUxYjQy
NTc2MjQwHhcNMjQwMTAyMTAzMzI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjlhMGE0NmFiZGY4YzhkNDVmNDkzNDM4MTVlOGFhZWIyN2FlZDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuhhzrYUvXLewV3Egwl4W6pTFoD2
90QPhGUKt0aQPU4WEa1Szhdp1FSQiX03aQW20ao48v+IsBz/3JMokx1JNwciAef4
PMb+QlESZTpzsnqJgtXF51/dnPqIrdt7Kiu88ImQun0xnwGyVFuySwMaKcE3UTsp
u+Zii3YDJdr/YoocRdinsN9IjN0JpFV3+TB2Z7atXLNwIjfZF0LcZjfwGr6Yr1qK
EuvqSMiFXxU14pTy0dU6/mVqxE/teUVuiDP+sZKjQw//X7d/4lS1N2MRPFJBchRR
caA2Q23gZmYujsb9j4xCMRzF2r/pWdV/sQ9GOsz1OTAVtevj7HZA47k/WQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH+aCkar34yNRfSTQ4Feiq6yeu2TMB8GA1UdIwQY
MBaAFI5ibJCetJURVLzugiHkOVG0JXYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAt
ZTk3ZDFkMDIyMGFmLzEvZjVvS1JxdmZqSTFGOUpORGdWNktycko2N1pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAtZTk3ZDFkMDIyMGFm
LzEvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWuZMA0G
CSqGSIb3DQEBCwUAA4IBAQAUs40xRQtqkcbKLDpL1pwYpvaCSNMptlngDkAlo3/d
WbgKqNfIuhv0cJCNilwpZYcmKgr2pKpRfHYsl+aF92vcF1L9quu1TICgxrO7TqF6
MO2p8LKfOUt1rZpecfsw+BJJb29EyAWhjox1IOpvSrgs2hhdRk/zU5MgTcNOiWM+
+aeIzXW4o55svtenb2Z+TujjkUHduGBv4ucWKjxEsbkNh0iK0Mrd5bR62qNR6MJ6
3EfJcHPNApoX/ijdwCRm5KVaGMex+gcZpmp2rXMSTbj9TTricQvBnoBkiWIpBkuY
w1FDQVv/L6Bcev8DIbTtVsQquTby+Jwyv33M/b7B+Hwd
-----END CERTIFICATE-----
Generated at Sun May 5 18:36:34 2024 by rpki-client on console-fra.rpki-client.org