Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/Fp6V7nbkLLHUEEn-FkA7R53Usjc.roa
File: Fp6V7nbkLLHUEEn-FkA7R53Usjc.roa (raw, json)
Hash identifier: fMegt5QCb6OP2xTFWguBMuvIS0HfhD1tR6kLUdW+ADQ=
Subject key identifier: 16:9E:95:EE:76:E4:2C:B1:D4:10:49:FE:16:40:3B:47:9D:D4:B2:37
Certificate issuer: /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Certificate serial: 018CC801945EE493209D5612F5372D182DE1
Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/Fp6V7nbkLLHUEEn-FkA7R53Usjc.roa
Signing time: Tue 02 Jan 2024 02:29:55 +0000
ROA not before: Tue 02 Jan 2024 02:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48768
IP address blocks: 217.21.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:94:5e:e4:93:20:9d:56:12:f5:37:2d:18:2d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Validity
Not Before: Jan 2 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=169e95ee76e42cb1d41049fe16403b479dd4b237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d3:de:85:27:1d:d8:35:e9:06:1f:24:06:23:
e7:7f:7b:bd:38:eb:6f:a0:49:d9:70:bf:f6:b6:f1:
4b:3c:ae:f1:80:52:26:80:d8:94:b5:e0:60:0e:f5:
1a:d8:1e:dd:c6:75:1f:5c:66:00:5e:1a:97:78:03:
07:17:b6:ab:12:e7:14:0e:20:2a:c8:11:22:a8:c7:
36:fb:5a:4c:e8:95:9e:ba:0e:69:8d:a3:7a:c7:81:
7e:a1:88:7e:1d:0d:50:9f:a0:fc:2c:4d:c1:8d:77:
8b:76:58:0b:7b:14:e5:4e:ba:bf:e9:3c:32:d2:3b:
28:35:47:5c:38:41:54:25:83:40:52:78:59:2e:d6:
52:52:50:e4:f5:97:c5:1f:b9:71:de:5c:78:2a:a8:
3d:bb:f7:b2:3e:d9:77:63:b3:dd:47:92:da:4c:f8:
95:30:47:a5:26:9e:fe:e4:c3:e2:f3:1c:d5:b5:f3:
ac:92:57:3c:09:44:48:95:5d:7d:4c:02:b9:d1:3f:
4c:de:82:ac:fb:93:cc:0f:a3:e8:e1:bf:8d:ff:cf:
8f:1a:28:27:31:cc:3a:30:cc:1e:33:bf:e8:46:74:
c5:b0:d4:59:af:bf:b8:04:02:bb:be:5c:a6:52:f2:
77:6d:34:17:24:84:93:3f:7b:d9:be:61:59:8f:8a:
89:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9E:95:EE:76:E4:2C:B1:D4:10:49:FE:16:40:3B:47:9D:D4:B2:37
X509v3 Authority Key Identifier:
keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/Fp6V7nbkLLHUEEn-FkA7R53Usjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.21.128.0/20
Signature Algorithm: sha256WithRSAEncryption
86:bb:7a:41:f5:32:32:4b:a6:8c:33:de:29:6b:25:7a:b1:09:
f4:f6:54:97:97:06:1d:3b:26:72:8a:17:db:e2:c8:70:9a:3f:
06:5c:94:fe:5f:e4:3e:c0:64:0c:bc:f8:2a:ce:24:80:9c:a2:
12:13:03:b4:5d:d8:23:e3:05:56:44:d6:4c:46:be:cd:50:63:
1c:88:d6:95:0f:fb:90:6b:91:e6:47:3f:3e:83:ef:16:b9:f8:
52:73:a4:31:8f:38:f0:49:b3:6b:fa:90:31:ef:07:39:e8:9e:
9f:7d:40:77:a2:55:a6:8d:bd:b7:6a:4a:37:89:57:90:0a:2b:
29:7e:c0:c3:54:bd:82:47:0c:8e:18:90:c2:b1:72:4f:6d:67:
b1:25:be:86:6d:37:79:d3:c4:93:4f:da:a1:ed:b9:c2:5e:d0:
9a:16:39:95:4a:c4:90:01:5c:6e:2a:40:46:08:11:a8:ba:26:
2d:53:8a:86:b7:c4:62:5d:e1:7d:bb:ff:78:d3:0c:02:2a:08:
a7:c5:fa:c0:4f:c0:ba:37:e5:22:f9:5f:4d:18:73:1b:b6:9b:
a5:54:bf:89:06:a1:52:87:c8:7f:ff:dc:17:fb:04:3a:42:2c:
1d:db:1b:e7:2f:9d:b8:c5:d8:a5:92:52:1b:7a:70:8a:00:1a:
9d:28:53:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAZRe5JMgnVYS9TctGC3hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjY2YzNjBkZjlhMWY2MWUyMzMyN2RhMGQyYzA5MTEyZTBh
OWJkNjkwHhcNMjQwMTAyMDIyOTU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjllOTVlZTc2ZTQyY2IxZDQxMDQ5ZmUxNjQwM2I0NzlkZDRiMjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtPehScd2DXpBh8kBiPnf3u9OOtv
oEnZcL/2tvFLPK7xgFImgNiUteBgDvUa2B7dxnUfXGYAXhqXeAMHF7arEucUDiAq
yBEiqMc2+1pM6JWeug5pjaN6x4F+oYh+HQ1Qn6D8LE3BjXeLdlgLexTlTrq/6Twy
0jsoNUdcOEFUJYNAUnhZLtZSUlDk9ZfFH7lx3lx4Kqg9u/eyPtl3Y7PdR5LaTPiV
MEelJp7+5MPi8xzVtfOsklc8CURIlV19TAK50T9M3oKs+5PMD6Po4b+N/8+PGign
Mcw6MMweM7/oRnTFsNRZr7+4BAK7vlymUvJ3bTQXJISTP3vZvmFZj4qJ0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBaele525Cyx1BBJ/hZAO0ed1LI3MB8GA1UdIwQY
MBaAFGzPNg35ofYeIzJ9oNLAkRLgqb1pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk04MkRmbWg5aDRqTW4yZzBzQ1JFdUNwdldrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8wNmFjNGYtOTgzMy00ZThkLWIzNTIt
NzcxNDBkMDk3ODNjLzEvRnA2VjduYmtMTEhVRUVuLUZrQTdSNTNVc2pjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8wNmFjNGYtOTgzMy00ZThkLWIzNTItNzcxNDBkMDk3ODNj
LzEvYk04MkRmbWg5aDRqTW4yZzBzQ1JFdUNwdldrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2RWAMA0G
CSqGSIb3DQEBCwUAA4IBAQCGu3pB9TIyS6aMM94payV6sQn09lSXlwYdOyZyihfb
4shwmj8GXJT+X+Q+wGQMvPgqziSAnKISEwO0Xdgj4wVWRNZMRr7NUGMciNaVD/uQ
a5HmRz8+g+8WufhSc6QxjzjwSbNr+pAx7wc56J6ffUB3olWmjb23ako3iVeQCisp
fsDDVL2CRwyOGJDCsXJPbWexJb6GbTd508STT9qh7bnCXtCaFjmVSsSQAVxuKkBG
CBGouiYtU4qGt8RiXeF9u/940wwCKginxfrAT8C6N+Ui+V9NGHMbtpulVL+JBqFS
h8h//9wX+wQ6Qiwd2xvnL524xdilklIbenCKABqdKFOl
-----END CERTIFICATE-----
Generated at Fri Jun 7 22:46:00 2024 by rpki-client on console-fra.rpki-client.org